This Privacy Policy describes how Grupo Versa collects, uses, and protects the personal data of its website users, in compliance with the General Data Protection Regulation.

1. Data controller

The entity responsible for processing personal data is:

Grupo Versa – Gestão de Participações Sociais, SGPS, S.A.
Tax ID: 513755489
Address: Rua Padre António Caldas, nº 51, 4810-246 Guimarães, Portugal ()
Email: geral@grupoversa.pt

2. Personal data collected

Grupo Versa may collect the following personal data through the website:

• Name
• Email address
• Phone number (when provided)
• Content of messages sent via the contact form
• Browsing data (IP address, approximate location, device type, browser, pages visited, and duration of visit)

3. Purpose of processing

The personal data collected is used to:

• Respond to contact and information requests
• Manage relationships with potential clients
• Provide institutional and commercial information
• Continuously improve the website and its content
• Perform statistical analysis of usage

4. Legal basis for processing

1. Contact management and information requests – processing is necessary to carry out pre-contractual steps at the data subject’s request and to respond to contact requests (Article 6(1)(b) GDPR), as well as to pursue Grupo Versa’s legitimate interest in managing institutional relationships with users and potential clients (Article 6(1)(f) GDPR).
2. Sending institutional and commercial information by electronic means – processing is based on the data subject’s consent, given freely, specifically, informedly and unambiguously through the forms available on the website (Article 6(1)(a) GDPR).
3. Website improvement and statistical usage analysis – the processing of browsing data through analytics cookies or similar technologies is carried out only on the basis of the user’s consent, obtained via the website’s cookie banner (Article 6(1)(a) GDPR). Cookies that are strictly necessary for the website to function are used on the basis of Grupo Versa’s legitimate interest in ensuring its proper operation and the security of communications (Article 6(1)(f) GDPR).

5. Data sharing with third parties

Data may be processed by third-party entities, namely:

• Analysis tools such as Google Analytics
• Hosting and technical support services

These entities act under instructions from Grupo Versa and guarantee compliance with applicable legislation.

6. Data retention

1. Data provided via the contact form is retained for a maximum period of 12 months after the response to the request or the last relevant contact, unless there is a legal obligation to retain it for a longer period.
2. Data used to send institutional and commercial communications is retained for as long as the data subject maintains the relevant consent and does not exercise the right to object or withdraw consent.
3. Browsing data collected through cookies is retained for the periods indicated in the Cookie Policy, after which it is deleted or anonymised.

7. User rights

1. Access their personal data;
2. Request the rectification of inaccurate or incomplete data;
3. Request the erasure of data under the terms provided by law;
4. Request restriction of processing;
5. Object to the processing of data where it is based on legitimate interests;
6. Withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out on the basis of previously given consent;
7. Exercise the right to data portability, under Article 20 of the GDPR, whenever processing is based on consent or the performance of a contract and is carried out by automated means;
8. Lodge a complaint with the National Data Protection Commission if they consider that the processing of their personal data violates applicable legislation.

8. Data security

Grupo Versa implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or improper disclosure.

9. Changes to the policy

Grupo Versa reserves the right to update this Privacy Policy at any time, with changes being published on this website.

10. Contact

For questions related to privacy and data protection:

Email: geral@grupoversa.pt