Privacy Policy

This Privacy Policy describes how Grupo Versa collects, uses, and protects the personal data of its website users, in compliance with the General Data Protection Regulation.

1. Data controller

The entity responsible for processing personal data is:

Grupo Versa – Gestão de Participações Sociais, SGPS, S.A.
Tax ID: 513755489
Address: Rua Padre António Caldas, nº 51, 4810-246 Guimarães, Portugal ()
Email: geral@grupoversa.pt

2. Personal data collected

Grupo Versa may collect the following personal data through the website:

Name
Email address
Phone number (when provided)
Content of messages sent via the contact form
Browsing data (IP address, approximate location, device type, browser, pages visited, and duration of visit)

3. Purpose of processing

The personal data collected is used to:

Respond to contact and information requests
Manage relationships with potential clients
Provide institutional and commercial information
Continuously improve the website and its content
Perform statistical analysis of usage

4. Legal basis for processing

Grupo Versa processes users’ personal data on the basis of the following lawful grounds, depending on the purposes in question:

Contact management and information requests – processing is necessary to carry out pre-contractual steps at the data subject’s request and to respond to contact requests (Article 6(1)(b) GDPR), as well as to pursue Grupo Versa’s legitimate interest in managing institutional relationships with users and potential clients (Article 6(1)(f) GDPR).
Sending institutional and commercial information by electronic means – processing is based on the data subject’s consent, given freely, specifically, informedly and unambiguously through the forms available on the website (Article 6(1)(a) GDPR).
Website improvement and statistical usage analysis – the processing of browsing data through analytics cookies or similar technologies is carried out only on the basis of the user’s consent, obtained via the website’s cookie banner (Article 6(1)(a) GDPR). Cookies that are strictly necessary for the website to function are used on the basis of Grupo Versa’s legitimate interest in ensuring its proper operation and the security of communications (Article 6(1)(f) GDPR).

5. Data sharing with third parties

Data may be processed by third-party entities, namely:

Analysis tools such as Google Analytics
Hosting and technical support services

These entities act under instructions from Grupo Versa and guarantee compliance with applicable legislation.

6. Data retention

Personal data is retained only for the period strictly necessary to pursue the purposes for which it was collected, in accordance with applicable legislation. In particular:

Data provided via the contact form is retained for a maximum period of 12 months after the response to the request or the last relevant contact, unless there is a legal obligation to retain it for a longer period.
Data used to send institutional and commercial communications is retained for as long as the data subject maintains the relevant consent and does not exercise the right to object or withdraw consent.
Browsing data collected through cookies is retained for the periods indicated in the Cookie Policy, after which it is deleted or anonymised.

7. User rights

Under applicable personal data protection legislation, users have, in particular, the right to:

Access their personal data;
Request the rectification of inaccurate or incomplete data;
Request the erasure of data under the terms provided by law;
Request restriction of processing;
Object to the processing of data where it is based on legitimate interests;
Withdraw consent where processing is based on consent, without affecting the lawfulness of processing carried out on the basis of previously given consent;
Exercise the right to data portability, under Article 20 of the GDPR, whenever processing is based on consent or the performance of a contract and is carried out by automated means;
Lodge a complaint with the National Data Protection Commission if they consider that the processing of their personal data violates applicable legislation.

Users may exercise their rights by contacting Grupo Versa via email at: geral@grupoversa.pt, indicating, whenever possible, the right they wish to exercise.

8. Data security

Grupo Versa implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or improper disclosure.

9. Changes to the policy

Grupo Versa reserves the right to update this Privacy Policy at any time, with changes being published on this website.

10. Contact

For questions related to privacy and data protection:

Email: geral@grupoversa.pt