Privacy Policy
AUTO-SUECO PORTUGAL – VEÍCULOS PESADOS, S.A.
Auto Sueco Portugal respects individual privacy and ensures that the data that are voluntarily provided to them are treated with confidentiality, solely for the purposes supporting their provision and only for the time necessary or established by law. You may exercise your rights of access, rectification, objection, processing restriction, portability and/or erasure by sending an email to dpo@nors.com. For further information regarding privacy and data protection, please contact the Data Protection Officer by sending an email to dpo@nors.com. If you would like to find out more about how we process your personal data, please see our Privacy Policy below.
AUTO-SUECO PORTUGAL – VEÍCULOS PESADOS, S.A. (“AUTO-SUECO”), a public limited company, with its registered office at Rua Conde da Covilhã, no. 1637, in Porto, registered at the Porto Commercial Registry Office under single registration and VAT number 505051931, and with a share capital of EUR 3,000,000.00, a company of the NORS Group, hereby discloses its Privacy Policy, by which it informs you of your rights and establishes the way it collects and uses your personal data.
At AUTO-SUECO, we undertake to only use your personal data for certain, specific purposes, and have adopted various technical and organisational measures so that the personal data provided to us are protected against disclosure, loss, improper use, alteration, unauthorised processing or access, as well as against any other form of unlawful processing.
1. Personal data processing controller de dados pessoais
AUTO-SUECO is the personal data processing controller, as it defines which data are collected, how they are processed and the purposes for which the data are used.
As an importer of the Volvo brand of trucks, buses and marine engines, AUTO-SUECO advises you to read Volvo’s privacy policies, as the latter may autonomously collect your personal data. You should directly contact the respective brand with regard to any issue related to their use of your personal data.
2. Data Protection Officer
AUTO-SUECO has a Data Protection Officer (DPO), who (i) supervises and advises the personal data controller regarding the obligations pursuant to the personal data privacy and protection regulations, (ii) cooperates with the control authority, and (iii) is the customer or potential customer’s point of contact, in order to clarify any doubts on the data processing carried out by AUTO-SUECO.
If you wish to clarify any doubts or file a complaint, you may do so by contacting the AUTO-SUECO data protection officer, using the following email address: dpo@nors.com
3. Personal data, data subjects, categories and means of collecting personal data
3.1. What are personal data?
Personal data are considered to be all and any information related to a natural person who is identified or identifiable. A natural person is considered to be identifiable when they can be directly or indirectly identified, especially by way of an identifier. To exemplify, an identifier may be a name, identification number, location data, identifiers though electronic means or one or more specific aspects of the physical, physiological, genetic, psychological, economic, cultural or social identity of that natural person.
3.2. Who are personal data subjects?
The customer or potential customer, who is a natural person, to whom the data relates and who benefits or intends to benefit from the products or services provided by AUTO-SUECO.
The representative/employee or point of contact in the company, in the case of legal persons, within the scope of the fulfilment of a contract, or of pre-contractual proceedings, entered into by and between that company and AUTO-SUECO.
3.3. What categories of personal data are processed at AUTO-SUECO?
If the customer is a natural person:
If the customer is a legal person, we only collect the name and email address and telephone number of the point(s) of contact within the company, in order to be able to fulfil the contract entered into with AUTO-SUECO, or within the scope of pre-contractual proceedings.
3.4. How and when are your personal data collected?
Your personal data may be collected in the following circumstances:
1. For the purpose of entering into and fulfilling a contract, namely, when you purchase or acquire one of our products and/or services.
2. Through the AUTO-SUECO website or the website of one of our represented brands.
3. When you go to one of our points of sale and provide us with your personal data.
4. When a data subject subscribes to our newsletters, giving their consent.
5. When you participate in events organised by AUTO-SUECO, or by the brands we represent and provide us with your personal data.
4. Grounds, Purposes and Duration of the Personal Data Processing
The grounds that make it lawful for AUTO-SUECO to process your personal data are as follows:
Consent: your personal data may be processed through your expression of free, specific, informed and unequivocal desire, through a statement or unequivocal positive act, accepting that your personal data be subject to processing.
Pre-contractual proceedings and/or contract fulfilment: your personal data may be needed to clarify doubts, for us to present a proposal requested by you, to enter into, fulfil and manage a contract entered into with AUTO-SUECO.
Compliance with a legal obligation: your data may be needed to comply with a legal obligation to which the data controller, in this case AUTO-SUECO, is bound.
Legitimate interest: your data may be needed to carry out certain operations related to the business activity of AUTO-SUECO, except in cases where your interests, freedoms and privacy rights and data protection prevail.
As such, AUTO-SUECO will process your personal data in accordance with the following legal bases:
If the customer is a legal person, in order to be able to comply with its contractual obligations, AUTO-SUECO needs to collect some personal data (name, email and telephone) of the representative or employee of that company, solely for the purpose of enabling that contract to be duly fulfilled.
In that case, the customer that is a legal person must ensure that the data collected from its representatives/employees are lawfully collected and transmitted to AUTO-SUECO (pursuant to one of the causes of legality provided for in the applicable legislation), and should grant the personal data subjects, their representatives or employees, the right to information on the processing of such data.
4.1. Period for retaining personal data
AUTO-SUECO retains the data subjects’ personal data solely for the period strictly necessary to pursue the purpose for which they were collected.
In certain cases, the law requires data to be retained for a specific period, namely in the case of data needed for information to the Tax Authority. Such data will be retained for 10 years, in accordance with the legislation in force.
We will also retain your data during the time in which you maintain a contractual relationship with AUTO-SUECO. However, we may retain your personal data for longer than the duration of the contract, in order to guarantee rights and duties related thereto or in a situation where AUTO-SUECO has a legitimate interest, always complying with the period necessary for pursuing the purpose for which they were collected.
When there is no specific legal obligation, your data will be processed solely during the period necessary to comply with the purposes leading to their collection, and for as long as there are lawful grounds for them to be retained by AUTO-SUECO.
Once the maximum retention period has been reached, the personal data will be irreversibly anonymised (while the anonymous data may be retained) or they will be safely destroyed.
5. Transmission of your personal data
AUTO-SUECO transmits your personal data only when necessary for the above-mentioned purposes, namely, for providing services requested by you.
Suppliers and service providers of AUTO-SUECO are contractually subject to the same personal data terms and conditions as the latter, and are forbidden to use, transfer, disclose or record the data subject’s personal data for any purpose other than that for which they were specifically contracted (or without your consent, as applicable).
AUTO-SUECO may transmit your personal data to third parties, depending on the purpose for which they were collected, when that has been requested by you, while the data transmitted will only be those required for such entities to carry out their business.
Your personal data may also be transmitted to entities to which the data must be communicated by law, such as the tax authority.
6. Link to other websites
We warn you that AUTO-SUECO shall not be liable for the privacy practices of third parties whose websites have a link to our website, and cannot guarantee the accuracy or authenticity of the information contained therein. We advise you to read the privacy policies of any other website that is linked to the AUTO-SUECO website.
AUTO-SUECO shall not guarantee the accuracy, perfection or authenticity of the information contained in any link or on another website. The personal data entered on other websites that are linked to the AUTO-SUECO website will be the sole responsibility of the data subject.
7. Rights of personal data subjects and response to requests by data subjects
AUTO-SUECO shall ensure the applicability and fulfilment of all the personal data subject’s rights, as set out in the General Data Protection Regulations and Portuguese legislation in force, namely Law 58/2019 of 8 August:
• Right of Access
You have the right to obtain confirmation from AUTO-SUECO as to whether the personal data related to you are subject to processing or otherwise, and if they are, to have the right to access your personal data and to the information regarding such processing. For example, you may ask us for a faithful copy of their compilation, as well as additional information on the processing we carry out.
• Right to Rectification
You also have the right to obtain from AUTO-SUECO, without undue delay, the rectification of inaccurate personal data related to you, as well as to complete your personal data that are not complete.
. Right to erasure of the data (“right to be forgotten”)
You may exercise the right to erasure, by AUTO-SUECO, of your personal data, and without undue delay, as long as: the data are no longer needed for the purpose that led to their processing; when you withdraw your consent and there are no other valid grounds for them to be retained; when you oppose the processing and AUTO-SUECO has no prevailing legitimate interests, as well as in any other cases provided for in law.
• Direito de Portabilidade dos Dados
You may exercise the right to erasure, by AUTO-SUECO, of your personal data, and without undue delay, as long as: the data are no longer needed for the purpose that led to their processing; when you withdraw your consent and there are no other valid grounds for them to be retained; when you oppose the processing and AUTO-SUECO has no prevailing legitimate interests, as well as in any other cases provided for in law.
• Right of Data Portability
You have the right to receive the personal data relating to you, that you supplied to AUTO-SUECO, in a structured, generally-used, automatic reading format, as well as the right to transmit such data to another data controller (if that is technically possible) and if the processing is based on consent and not on a contract, and if the processing is carried out by automated means.
• Right to withdrawal of consent
You may, at any given moment, change your consent, limit it to certain types of processing or withdraw it, although, withdrawal of consent shall not compromise the lawfulness of the processing carried out based on previously-given consent.
Importa ainda acrescentar que tem o direito de se opor, a qualquer momento, ao tratamento dos seus dados para efeitos de comercialização direta. Neste caso, a AUTO-SUECO also reserves the right to introduce changes at any time, without prior notice, regarding products and services mentioned on this website. compromete-se a cessar o tratamento dos dados para tal finalidade.
• Right to Restriction of Processing
In certain situations, you have the right to obtain from AUTO-SUECO the restriction of processing of your data, namely if you contest the accuracy of the personal data during a period which allowsAUTO-SUECO to check their accuracy, in cases where the data are no longer necessary for the purpose of stating, exercising or defending a right within a lawsuit and also when you object to the processing, until it is found that the grounds for the legitimate interest of AUTO-SUECO prevail over yours, as well as in any other cases provided for in law.
. Right not to be subject to any automated decision
You have the right not to be subject to any automated decisions taken based solely on automated processing, including the definition of profiles, which is effective in your legal domain or one that significantly affects you in a similar way.
7.1. Exercising your rights
You may exercise your rights free of charge, except if it involves a request that is clearly unfounded or excessive, in which case you may be charged a reasonable fee, taking into account the costs.
We will answer your requests within a maximum of 30 days, except in the case of more complex requests, where in such cases the time may be extended to 60 days.
Consequently, you may exercise your rights in the following ways:
By letter addressed to DPO, Nors Group, sent to Rua Manuel Pinto de Azevedo, nº 711, 4149-010 Porto – Portugal
b) By email: dpo@nors.com
Furthermore, should you not be satisfied with our answer after exercising one of these rights, you have the right to file a complaint with the CNPD (National Data Protection Committee) at www.cnpd.pt
8. Procedural and Technical Security Measures
AUTO-SUECO makes use of suitable physical, technological and organisational security measures for your personal data, so that the personal data provided to us are protected against disclosure, loss, inappropriate use, alteration, unauthorised processing or access, as well as against any other form of unlawful processing.
To that end, AUTO-SUECO implements technical and organisational measures to uphold an appropriate level of security for the risk of retaining the personal data on file and during their transmission.
AUTO-SUECO has an information system that has a highly reliable capacity to withstand accidental incidents or malicious or unlawful actions that compromise the availability, integrity and confidentiality of the personal data retained or transmitted.
9. Cookies
AUTO-SUECO uses cookie technology to record the user’s activity on the website and to assess and improve it, making it more useful and functional for you. Do not forget that you can predefine your browser to not accept cookies. For further information on cookies, please see our cookie privacy policy.
10. Privacy Policy Update
AUTO-SUECO reserves the right to update this policy at any time, according to legal requirements and/or its business needs. The user is therefore hereby invited to visit this page and check our policy.
This Privacy Policy was last updated on 26th July 2022.