Scotturb – Transportes Urbanos Lda., NIPC 511069553, headquartered at Rua de São Francisco, no. 660, Adroana, 2645-019 Alcabideche, hereinafter referred to as "Scotturb," is a public road passenger transport company operating in the municipalities of Sintra, Cascais, and Oeiras. Committed to protecting the privacy of its clients and users, and demonstrating its respect for privacy rules and the protection of personal data, Scotturb has created this Privacy Policy.
1. Why a Privacy Policy?
With this Privacy Policy, we aim to inform our clients and users about the general rules of privacy and the processing of their personal data, which we collect and handle in strict compliance with the General Data Protection Regulation ("GDPR").
2. What does the Privacy Policy cover?
This Privacy Policy applies exclusively to the collection and processing of personal data carried out by Scotturb, particularly at sales points and on the digital platforms owned by the company, such as the website https://scotturb.com/, hereinafter referred to as the site.
3. What is personal data?
When we refer to personal data, we mean any information relating to an identified or identifiable individual.
An individual is considered identifiable if they can be identified, directly or indirectly, by reference to an identifier such as a name, identification number, location data, or one or more elements specific to their physical, physiological, genetic, mental, economic, or social identity.
4. Who is responsible for data processing?
The entity responsible for the collection and processing of personal data on digital platforms is Scotturb, which decides, in this context, which data is collected, the means of processing, and the purposes for which it is used.
At its sales points, the collection and processing of personal data is ensured by Scotturb employees.
Scotturb has a Data Protection Officer (DPO), which is Best Privacy Consulting, Unipessoal, Lda., represented by Ana Fazendeiro, who can be contacted via email at .
5. What type of personal data do we collect?
On digital platforms, personal data strictly necessary for the established purposes is collected, such as issuing invoices requested by clients, subscribing to functionalities and products, and submitting applications. This includes data such as name, address, tax identification number, phone number, and email address.
At sales points, the data necessary to provide the public services offered by Scotturb is collected, including data such as name, address, phone number, civil and tax identification numbers, and email address.
Without prejudice to compliance with legal rules on data retention and transmission for legally prescribed purposes, Scotturb only processes data strictly necessary, retaining it for the legally required periods or as justified by the provision of public services.
6. When and how do we collect your data?
Your data is collected via phone, in writing, or through the website, with your consent.
Personal data is only collected and processed when the client subscribes to one of our products or services, either in person or through digital platforms, and such data is necessary for the provision of the services offered by Scotturb.
The personal data collected will be used solely for the purpose for which the data subject has given consent.
7. What are the purposes of processing personal data?
The personal data collected is intended for managing the contractual relationship, i.e., the provision of the contracted services.
8. How long do we retain your personal data?
The period for which data is stored and retained varies depending on the purpose for which the information is processed and legal requirements.
However, there are legal requirements that mandate retaining data for a specific period. Thus, whenever there is no specific legal requirement, the data will be stored and retained for as long as necessary for the purposes for which it was collected or provided, or for the period authorised by the National Data Protection Commission.
9. How can you access, rectify, or oppose the processing of your personal data?
Under the General Data Protection Regulation, the data subject is guaranteed the right to access, update, rectify, or delete their personal data, which can be done through the contacts provided by Scotturb, such as . However, it should be noted that deleting the data may render active contracts unfeasible.
10. What measures does Scotturb adopt to ensure the security of your personal data?
Scotturb is committed to ensuring the security of the personal data provided, within the limits of its responsibility, and has implemented policies to achieve this purpose.
Scotturb aims to ensure that, within its scope, conditions are implemented to protect the personal data in its custody against any unlawful processing.
To this end, on the website, personal data collection forms require encrypted browser sessions, and all personal data provided to us is securely stored in Scotturb systems, which are subject to physical and logical security measures considered essential for the protection of personal data.
Notwithstanding the security measures adopted by Scotturb, we advise all clients and users to adopt additional security measures when accessing the Internet, such as ensuring they use up-to-date computers and browsers with active firewalls, antivirus, and anti-spyware software, verifying the authenticity of websites they visit, and avoiding websites of doubtful reputation. Caution should also be exercised when using shared computers and accessing personal client accounts, and login credentials should not be shared with third parties.
11. Under what circumstances is data shared with other entities?
Scotturb, within the scope of its activities, uses other entities to provide certain services. This provision of services may involve access to the personal data of our clients and users by these entities.
When this occurs, Scotturb takes appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees in this regard.
Thus, any entity subcontracted by Scotturb will process the personal data of our clients and users on behalf of and in the name of Scotturb, with the strict obligation to adopt the necessary technical and organisational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access, and against any other form of unlawful processing.
Additionally, Scotturb may share the personal data of clients with other companies within the same economic group or with third-party service providers and business partners that are relevant for enabling the provision of services to the client.
Client or user data may need to be preserved and communicated to competent authorities if Scotturb is notified by these entities to provide such data, always in strict compliance with Portuguese law.
12. Can data be transferred internationally?
Some or all of the personal data of clients may be transferred abroad, for example, when Scotturb stores data on cloud computing servers located outside Portugal.
For this purpose, Scotturb will comply with all requirements set out by the applicable legislation and adopt best practices in security and privacy to ensure the integrity and confidentiality of clients' personal data.
13. How can you learn about changes to Scotturb's Privacy Policy?
Scotturb reserves the right to modify or update its Privacy Policy at any time, and such changes will be duly updated on its digital platforms.
14. What are cookies?
Scotturb uses cookies or similar technologies to collect information about the user's computer or mobile device, aiming to ensure the proper functioning of the site and improve the browsing experience.
Cookies serve to simplify traffic analysis or indicate when a site is visited, allowing information to be sent to users. The different types of cookies are described below:
Preference cookies: These allow the site to remember certain information to personalise the user experience. If these cookies are disabled, the site may become less functional but should still work properly.
Security cookies: These are used to authenticate users, prevent fraudulent use of login credentials, and protect user data from unauthorised access. If these cookies are blocked or disabled, the site will not function properly.
Public session cookies: These cookies allow the site to collect information related to user interaction with the site, including the most frequently visited pages and whether error messages have occurred at any point. These cookies improve the website. If they are blocked or disabled, the site may become less functional but should still work properly.
Advertising cookies: These cookies are used by parties involved in advertising services for other companies, either on the site or on advertisements on third-party websites. These cookies collect information about the user's online activities, such as viewed ads on visited sites, to infer which advertisements may be relevant. If these cookies are disabled, the site may become less functional but should still work properly.
15. Which laws and jurisdictions are applicable?
For resolving disputes arising from this document, Portuguese law will be fully applied, and any disputes must be submitted to the court of the Cascais district.
This Privacy Policy was last modified on 19 December 2024.