Skip links
scroll
Solar do Rio

Privacy Policy

Solar do Rio Senior Residence Privacy Policy

Solar do Rio Senior Residence has adopted internal rules that meet best practice in the field of security and protection of personal data, and has taken the necessary technical and organisational measures to comply with the GDPR. As a result of the entry into force of this Regulation, the Solar do Rio Senior Residence guarantees access to the rights set out therein to all holders of personal data. The Solar do Rio Senior Residence's Privacy Policy is intended to inform its users of the rules governing the processing of personal data within the scope of its activity. The data that Solar do Rio Senior Residence collects from its users or potential users is processed in accordance with the rules and obligations imposed by the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC).

Personal Data Controller

For the purposes of the General Data Protection Regulation and its consequences, Solar do Rio Senior Residence is the Data Controller. In this capacity, it has the need to collect, access and process personal data related to its main activity, in the area of the provision of care and social action services, which implies that it assumes the position of Data Controller, with all the inherent obligations and duties.

Personal Data

The Solar do Rio Senior Residence collects and processes the personal data of its Users and potential users, in the course of subscribing to the services it provides, in application and pre-registration procedures, in social monitoring, among others. It may also process data from other categories, such as job applicants, either through procedures necessary for recruitment or through the spontaneous submission of data from these holders. With regard to users or potential users, the following data may be collected, among others:

  • Contractual and contact details: name, gender, address, email address, telephone/mobile;
  • Identification data: identity document, tax number, social security number, educational qualifications;
  • Family and economic data: household constitution, housing situation, contact details and address of any guardian of the user, affiliation of the user, details of the spouse (if applicable);
  • Health data: data on health status, treatment;
  • Billing data; With regard to our employees, the following data may be collected, among others;
  • Contractual and contact details: name, gender, address, email address, telephone/mobile phone number, educational qualifications, details resulting from the employment contract;
  • Identification data: identity document, tax number, bank identification number;
  • Family data: marital status, household data;

Purposes for processing personal data and respective legal grounds The personal data collected under the provisions of the previous paragraph are processed in response to the following purposes:

  • Management of the user's individual file, in everything that concerns the object of the service provision contract and the steps inherent to it;
  • From employees and potential employees, their sole purpose is to gather the information needed to sign the respective employment contracts or to assess a candidate's suitability for a job;
  • The processing of the data referred to in the previous point is lawful to the extent that:
    The data subject has given their consent to the processing of their data for one or more specific purposes;
  • Processing is necessary for the performance of a contract to which the data subject is a party (users, employees), or for pre-contractual procedures at the request of the data subject (job applicants, registration of users on the waiting list);
  • If the processing is necessary for the defence of the vital interests of the data subject;
  • If the processing is necessary for the fulfilment of a legal obligation to which Solar do Rio Senior Residence is subject.
  • If the processing is necessary for the pursuit of the legitimate interests pursued by the Data Controller.

Secrecy and Confidentiality

All our employees, internal and external, are obliged to guarantee the confidentiality and protection of information as prescribed by the General Data Protection Regulation, and are obliged to keep absolutely secret any information or knowledge of a personal, technical, business or other nature acquired, necessarily or involuntarily, during the employment relationship or because of it, concerning the Employer or any other persons, natural or legal, who have a relationship with it, namely other employees, customers and suppliers, unless previously authorised in writing by the Employer. Any reproduction, copying, modification, public communication, distribution or any other type of assignment, free of charge or for consideration, of any documents, including computer programmes, publications, information contained in databases, or any other intellectual material belonging to or relating to the Employer or any third party related to it, is expressly prohibited, unless previously authorised in writing by the Employer.

Subcontractors

In order to provide the best service to its users, the Solar do Rio Senior Residence may share the personal data of data subjects with other companies and organisations. Our concern with guaranteeing secrecy and confidentiality in the processing of personal data extends to our subcontractors, to whom we demand sufficient guarantees of data processing in compliance with and obedience to the processing rules arising from the GDPR. With this, we ensure that the owners of personal data have confidence in the processing of their data, secrecy, confidentiality and in accordance with all data processing rules and this privacy policy, as well as internal orders, instructions and procedures to respect the privacy of the owner of the data. Solar do Rio Senior Residence may communicate the personal data of its users, always in compliance with the principle of minimisation, to the following categories of subcontractors:

  • Professional service providers, such as accountants, lawyers, ROCs, nurses, doctors or other similar professionals;
    Companies providing services such as insurance, hygiene, health and safety at work or similar;
  • In addition to the subcontractors listed above, Solar do Rio Senior Residence is also obliged by law to communicate the personal data collected to various public, regulatory, administrative and tax bodies.

Data Processing Guarantees

We are guided in all our actions, and we extend the same requirement to third parties and subcontractors, by the following data processing rules:

  • Personal data is processed in compliance with the legal data processing regime, this privacy policy and with the guarantee of lawful, fair and transparent processing;
  • The data collected is merely instrumental to the activity of the Solar do Rio Senior Residence, and is intended to pursue a specific, specific and legitimate purpose, with no further processing incompatible with these purposes;
  • Solar do Rio Senior Residence observes the principle of data minimisation, collecting only the data considered adequate, relevant and necessary for the purposes of collection and processing;
  • In compliance with the principle of accuracy, the Solar do Rio Senior Residence keeps the data it holds accurate and up-to-date, and all the necessary measures to guarantee its permanent accuracy and correctness are adopted and made available to its owner, namely the right to rectification;
  • Solar do Rio Senior Residence treats the personal data it holds in accordance with the principle of integrity and confidentiality, protecting it from unlawful and unauthorised processing, preventing possible loss, destruction or unforeseen damage, adopting all the appropriate technical and organisational measures for data processing that guarantees the integrity and confidentiality of the data;
  • Whenever consent is requested for the processing of data, the Solar do Rio Senior Residence will stick to the purposes for which consent was requested.

Technical and organisational measures

The Solar do Rio Senior Residence uses a set of technologies and security procedures that are suitable for protecting your personal data from unauthorised access and disclosure:

  • Physical security measures, controlling the access of employees, collaborators and visitors to your premises;
  • Security measures related to access to systems and workstations through identity management mechanisms, authentication and privileges, the use of firewalls and antivirus on workstations, guaranteeing the availability of information through our backup systems;

Image Rights

The image will always be protected, and we will only capture, use or disclose it with your prior consent, or that of your legal guardian, and always when this is justified by the need to facilitate our work, commercial interest, the preservation of collective memory or even for identification for security reasons, identification or to facilitate communication. With regard to the image, the holder of this right may, at any time, request the withdrawal of consent for the future.

Data Subject Rights

The data subject will have the right, at all times, to access their personal data and how it is processed, being able to consult it, rectify it, request its erasure or destruction, its portability, as well as oppose its processing or the taking of decisions based on automated profiling, when legally permitted. You can exercise your rights by contacting the DPO by email.

Changes to the Privacy Policy

Solar do Rio Senior Residence reserves the right to change, modify, add to or rectify this Privacy Policy at any time, without the need for any prior notice, and such changes will be publicised.