Linked Credit Intermediary authorized by the Bank of Portugal No. 0002970
en
pt en

Privacy Policy

We Care About Your Personal Data

APROVA respects your privacy and is fully aware of your rights as a data subject. These rights impose obligations on this institution to safeguard the integrity of the personal data we collect. APROVA complies with applicable privacy laws by implementing procedures designed to ensure compliance with such legislation.

This Privacy Statement sets out our privacy principles and informs our Clients, Suppliers, Employees, and other Partners about the procedures for processing personal data within our organization.

We encourage data subjects to review this information in order to understand how we collect, use, and share personal data.

Who Is Responsible for Data Processing

Aprova – Intermediação de Crédito, Unipessoal, Lda, tax identification number (NIPC) 515 039 381, headquartered at Praça Engenheiro José Vaz Guedes, No. 3, Store 4C, 2615-399 Alverca do Ribatejo, Portugal.

Processing of Personal Data

Personal data means any information relating to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, electronic identifiers, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.

All data provided to APROVA is processed in accordance with applicable legislation and is therefore:

  • Processed lawfully, fairly, and transparently;

  • Collected for specific, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes;

  • Adequate, relevant, and limited to what is strictly necessary in relation to the purposes for which it is processed;

  • Accurate and kept up to date whenever necessary;

  • Stored only for the period strictly necessary and legally permitted to fulfill the stated purposes.

Purpose, Legal Basis, and Data Retention Periods

Personal Data is processed for the purposes indicated in the table below, depending on the specific context and based on explicit legal grounds, and is retained only for the period strictly necessary to achieve the respective purposes.

(table image)

Data Disclosure

APROVA does not disclose your Personal Data to other recipients, except where such disclosure is necessary for the provision of contracted services, always within the strict scope of the purposes communicated to the data subject, or to comply with legal obligations to which APROVA is subject.

APROVA may disclose personal data to the following entities:

  • Banking institutions with which APROVA has credit intermediation agreements;

  • Service providers rendering services to APROVA;

  • Judicial, administrative, supervisory, or regulatory authorities.

APROVA does not carry out international transfers of personal data (i.e., outside the European Union).

Collection of Data from Other Sources

Where APROVA processes personal data collected indirectly, it will provide all relevant information regarding such processing to the respective data subjects at the first opportunity.

What Are Your Rights?

At any time, the data subject may exercise their rights of access, rectification, erasure, restriction, and portability, subject to the conditions set out by law, by contacting APROVA through a written request addressed to the Data Protection Officer, using the communication channels specified below (see “How to Contact Us”).

These rights include:

Right of Access

The right to obtain confirmation as to whether personal data concerning you is being processed and, where that is the case, access to the data and information such as the purposes of processing and retention periods.

Right to Rectification

The right to request the correction of inaccurate personal data or the completion of incomplete personal data, such as address, tax number, or contact details.

Right to Erasure

Also known as the “right to be forgotten,” this is the right to obtain the deletion of personal data, provided there are no valid grounds for its retention, such as compliance with a legal obligation.

Right to Restriction of Processing

The right to request the restriction of processing of personal data, either by (i) suspending processing or (ii) limiting the scope of processing to certain categories of data or purposes.

Right to Data Portability

The right to receive the personal data you have provided to us in a commonly used, machine-readable digital format, or to request its direct transmission to another entity designated by you.

Right to Object

The right to object at any time to the processing of personal data, provided there are no overriding legitimate interests that prevail over your interests, rights, and freedoms, such as the defense of a legal claim.

Right to Withdraw Consent

The data subject may withdraw previously given consent at any time, without the need to provide justification.

The exercise of these rights may be limited due to the existence of third-party rights and freedoms, legal or confidentiality obligations, or overriding legitimate interests of APROVA or third parties, as provided by applicable law.

If you wish to lodge a complaint related to data protection, you may contact the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD) at www.cnpd.pt, Rua D. Carlos I, 134 – 1st Floor, 1200-651 Lisbon, Portugal, telephone +351 213 928 400, or email geral@cnpd.pt.

Security of Your Personal Data

APROVA ensures the adoption and implementation of appropriate technical, organizational, and security measures, considering the available context and technology, to protect Personal Data against loss, destruction, or damage, whether accidental or unlawful, and to ensure protection against unauthorized access or use. These technical measures are also required of partners and service providers who may process personal data on behalf of APROVA.

APROVA guarantees privacy and security in the transmission of data from its clients and website visitors, using, in particular, SSL (Secure Sockets Layer) encryption for all information exchanged via the website.

If you require further clarification regarding our data security policies or become aware of any irregular situation, please contact us.

Automated Decisions

We do not carry out Personal Data processing activities that include automated decision-making or profiling.

How Can You Exercise Your Rights?

  • Email: You may exercise your rights by email at privacidade@aprova.pt.

  • Mail: You may exercise your rights by sending a letter addressed to the Data Protection Officer, APROVA, to the following postal address:
    Praça Engenheiro José Vaz Guedes, No. 3, Store 4C, 2615-399 Alverca do Ribatejo, Portugal.

  • In Person: By completing a specific form available at APROVA’s premises.

How to Contact Us

  • Email: privacidade@aprova.pt

  • Mail: Praça Engenheiro José Vaz Guedes, No. 3, Store 4C, 2615-399 Alverca do Ribatejo, Portugal.

How Can You Stay Updated on the Processing of Your Personal Data?