What is Personal Data?
"Personal data" means any information that can identify you directly or
indirectly, such as name, e-mail address, contact details, financial
information. It may also include identifiers such as the IP address of your
computer and other mobile devices, as well as cookies.
What data we collect and how we handle it:
EWF may have access to your data through the Manufacturing Certificates Platform
(MCP) and its website. The data collected are those strictly necessary for the
pursuit of the purposes for which they are intended, namely:
- For contractual purposes, when we provide you with the service of issuing
digital documents. MCP is accessible only through a login and a password.
These elements are exclusively for administrative and IT use in the strict
scope of the services requested/contracted by the user (Name, contacts and
in specific cases information);
- When the contact form is used, the only purpose of the data collected here
is to respond to the information requested by the Customer, manage their
requests and control the quality of the services provided (name, e-mail,
telephone number, organisation to which they belong);
- Enforce applicable terms of use, establish or safeguard the right or legal
defence to prevent fraud or other illegal activities, including attacks on
EWF information systems;
Thus, we can state that we only process your personal data in the following
cases:
- When you have given us your consent;
- When the organisation responsible for entering personal data into MCP
ensures that it has the consent of the persons concerned;
- In the execution of a contract - for example to issue a digital document;
- It is in the legitimate interest of EWF - ie for the protection of our
tools, ensuring that they are protected and secure;
- In cases where the processing is mandatory by law.
Data Transfer:
As a general rule, EWF does not transfer your personal data, but only in cases
where this is necessary for one or more of the options set out below, always and
in such a way as to ensure identical protection of your data:
- If we have your consent to do so;
- If we are permitted to do so under the law;
- Where legally permissible, EWF may also transfer your personal data to
courts, law enforcement authorities, regulators or lawyers if this is
necessary to comply with the law or for the initiation, exercise or defence
of legal action.
At no time do we sell your data!
Your Rights:
- Right to request access to and rectification of your personal data;
- Right to limitation of processing;
- Right to data portability;
- Right to erasure and/or to be forgotten;
- Right to oppose processing;
- Right to withdraw consent.
What does the right of access consist of?
The right of access enables you to find out whether your data is being processed
or not and, if so, to provide information such as the purposes of processing,
the categories of data which are processed, the recipients to whom the data have
been or will be disclosed, the estimated period for which the personal data will
be stored, or, if this is not possible, the criteria used to determine this
period.
The EWF undertakes to provide you with any information concerning your request
within a period of one month, which may be extended depending on the complexity
of the request. In cases where requests prove to be excessive or manifestly
unfounded, EWF reserves the right to charge administrative costs for processing
your request.
You can exercise your right through the EWF contacts listed below.
What about the right to rectification?
The right to rectify your personal data is characterised by requesting the
correction and/or updating of your data when they are incorrect and/or out of
date.
You can exercise your right through the EWF contacts listed below.
What does the right to limitation of treatment consist of?
The right to restriction of processing allows you to request that the processing
of your personal data is restricted. In this case the Controller may proceed
with the storage of the data, but may not use them. This right can only be
exercised in certain situations, listed exhaustively in the General Data
Protection Regulation, namely:
- When you have challenged the accuracy of your personal data, during the time
period that allows EWF to verify the accuracy of your personal data;
- When you have opposed the processing, for the period of time necessary to
ascertain whether the legitimate grounds of EWF prevail over your own;
- When it considers that the processing is unlawful and EWF has objected to
the erasure of the personal data and requests, alternatively, the limitation
of the processing;
- When EWF no longer needs the personal data for the purposes of the
processing, but for you they are necessary for the exercise or defence of
claims and/or the exercise of other rights.
You can exercise your right through the EWF contacts listed below.
What does the right to portability consist of?
The right to portability allows you to request EWF to have your personal data
transferred to you or to another controller. This right is dependent on three
conditions:
- May occur only where data has been collected on the basis of consent or for
the performance of a contract;
- Only where the processing is carried out by automated means;
- In cases where you request the transmission of the data to another
controller, provided that the IT systems are compatible.
You can exercise your right through the EWF contacts listed below.
What does the right to erasure consist of?
The right to erasure, or right to be forgotten, allows you, in certain
situations, to demand that your data be deleted. This is not an absolute right
and can only be exercised in cases where the retention of personal data
infringes the Regulation:
- When the data is no longer necessary for the purpose;
- When consent is withdrawn and the processing is not based on another lawful
source;
- When the data subject exercises the right to object;
- When the processing of the data is unlawful.
The right of erasure cannot take place in cases where the exercise of the right
to freedom of expression and information is at stake, as well as in cases where
it is necessary for the fulfilment of a legal obligation, or for the purposes of
scientific or historical research or statistical purposes, or for the exercise
of the right of defence and the lodging of complaints with the competent
authorities.
You can exercise your right through the EWF contacts listed below.
What does the right of opposition consist of?
You may exercise the right to object to processing for marketing purposes,
except in cases where we consider that there are compelling legitimate grounds
for the processing to override your interests, rights and freedoms. You can
exercise this right by using the "remove" option referred to in all our
communications.
This right can also be exercised in cases where you wish to object to the
creation of profiles – profiling.
You can exercise your right through the EWF contacts listed below.
What does the right to withdraw consent consist of?
Where you have given your consent to the processing of data by EWF, you may at
any time revoke the consent previously given. Notwithstanding the withdrawal of
consent, any processing carried out prior to the revocation of consent shall be
considered lawful, and the revocation shall produce future effects only.
You can exercise your right through the EWF contacts listed below.
Exercise of Rights:
All the rights stated above may be exercised free of charge by e-mail to
ewf@ewf.be or by letter addressed to Av. Prof. Dr. Cavaco Silva, 33,
Taguspark-Oeiras, 2740-120 Porto Salvo, as well as exercising your right of
complaint before the supervisory authority.
We also inform you that you have the right to lodge a complaint with the
competent supervisory authority, especially when, with the controller, you
have not obtained satisfaction in the exercise of your rights.
Confidentiality:
EWF guarantees that all information you provide to us is considered
confidential. EWF does not sell, distribute, or do any type of business with
the information and personal data provided by you.