5. How Do We Collect Your Personal Data?

1. We will collect your personal data through the forms on the WEBSITE, but also through the WEBSITE and the communication it makes with your equipment and the e-mail messages you send us.
2. Your personal data is collected through your device as follows:
   1. Through your contact request;
   2. By submitting an application;
   3. By signing up for the newsletter;
   4. Through your browser;
   5. Through cookies;
   6. IP address.
3. SIPM, Lda.
   undertakes to process your data in accordance with the law and in a legitimate manner.
4. SIPM, Lda.
   will not sell, rent or share your personal data with third parties, except in the cases clearly identified in this Privacy Policy (see Point 9 to understand how).
5. The services of SIPM, Lda.
   services are not aimed at minors, and no personal data of minors is processed intentionally.

6. What are Cookies?

1. Cookies are small information files that help identify your browser and can store information such as user settings and preferences.
2. SIPM, Lda.
   will store cookies on your device to personalize and facilitate browsing as much as possible, but also for troubleshooting, statistics, quality assurance, and to monitor system security.
3. With the exception of cookies specifically necessary for the performance of the website, the storage of other cookies will always depend on the User’s acceptance and consent, which may be withdrawn at any time through specific browser tools.
4. To find out more about the cookies we use, please consult our Cookie Policy.

7. How Do We Protect Your Personal Data?

1. Your personal data is kept secure through the adoption of various technical and organizational security measures that guarantee that only those Employees who must access it have access to it, in accordance with the rules created for this purpose.
2. To protect your personal data we only use data center providers that offer us adequate and documented security measures, namely guarantees that your personal data is stored on servers that are kept in controlled environments with limited access.
3. Personal data is kept on secure servers at PORTUGAL TELECOM DATA CENTER, S.A. with VAT number 510.030.785 and registered office at Rua Data Center 6200-065 Covilhã, which provides us with the appropriate security guarantees to protect personal data against unauthorized disclosure, loss, misuse, alteration, processing or access, as well as against any other form of unlawful processing.
4. Likewise, when you browse the WEBSITE, we protect your data with encryption, such as Hyper Text Transfer Protocol Secure (HTTPS), which is an Internet protocol that aims to communicate between devices and servers around the world.
   The HTTPS protocol emerged as an evolution of its predecessor, HTTP. The difference between them is that HTTPS encrypts device communication.
5. Although we take the care and precautions we deem appropriate to protect the personal data you provide and we collect, you should be aware that no security system is impenetrable.

8. How You Can Exercise Your Rights:

1. Before we explain how you can exercise your rights, you should know what they are.
   The law gives you the right to ask us to exercise the following rights:
   1. Access: the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, the right to access your personal data;
   2. Rectification: the right to have inaccurate personal data concerning you rectified and to have incomplete personal data completed;
   3. Erasure: the right to have your personal data erased when one of the reasons listed in the legislation applies;
   4. Limitation of processing: the right to obtain the limitation of processing if one of the situations listed in the legislation applies;
   5. Objection: the right to object at any time to the processing of personal data concerning you;
   6. Portability: the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
2. You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission at www.cnpd.pt).
3. In order to exercise the above rights, please contact SIPM, Lda.
   via the following e-mail address info@grupojoya.pt.
4. If you ask us to delete some or all of your personal data, some of the services you have requested may not be provided to you and SIPM, Lda.
   will only keep the personal data necessary to fulfill the legal obligations to which it is bound.

9. When do we communicate data to third parties?

1. SIPM, Lda.
   may use third parties to provide certain services, in terms of maintenance, technical support, marketing, invoicing or payment management, and they may have access to some of the personal data, namely the data required for the contracted purposes.
2. SIPM, Lda.
   ensures that the entities that have access to the data are credible and offer high guarantees of protection, and that no data is transmitted to them beyond what is necessary to provide the contracted service.
   remains responsible for the personal data provided.
3. SIPM, Lda.
   may also transmit data to third parties within the scope of investigations, inquiries and judicial and/or administrative proceedings or of a similar nature, provided that it is duly ordered to do so by court order.

10. Third Party Websites.

1. The WEBSITE may contain links to other websites which may collect and process your personal data, and such processing is the sole responsibility of the owners of those websites, and SIPM, Lda. has no responsibility for their policies and/or practices.
   any responsibility for their policies and/or practices.
2. Examples of these third parties are Facebook, Instagram, Youtube, Whatsapp, Tiktok and Linkedin via the buttons on the WEBSITE.

11. Data Transfers Outside the European Union.

1. If data is transferred to third countries outside the European Union, SIPM, Lda.
   will comply with the legal rules, particularly with regard to the suitability of the country of destination for the protection of personal data and the requirements applicable to such transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of security and protection.

12. The Minors.

1. The WEBSITE is not aimed at minors under the age of 16, so we ask that minors do not provide us with personal data through the WEBSITE, application, social networks and social media or emails.

13. Sensitive Personal Data.

1. SIPM, Lda.
   thanks you for not sending us or making us aware of any sensitive personal data, i.e. information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data or data relating to a natural person’s sex life or sexual orientation.
2. If you still send us or make us aware of these categories of personal data, they will be deleted immediately

14. Changes to the Privacy Policy.

1. SIPM, Lda.
   reserves the right to readjust or change this Privacy Policy at any time, and these changes will be publicized.

15. Our Contact Details.

1. If you have any doubts or questions regarding this Privacy Policy, please contact us in writing at .