ThinkDigital is a registered trademark representing the companies ThinkDigital - Engenharia de Tecnologias de Informação L.d.a. and ThinkDigital II Telematics S.A.
We develop and operate services in the information and communication technology sector, as well as in the Internet of Things (IoT) sector.
As part of our relationship with our customers, potential customers, suppliers and employees, we sometimes have to record information about the use of our products and services, as well as professional information or, at times, personal information.
We therefore believe you trust us with the responsibility of looking after your data, keeping it private and protected from third parties.
This Statement aims to help you understand how we collect, use and protect your data, both in the context of providing our services or products and in the context of our relationship with you and your company.
Whenever you wish, you can obtain more information by contacting ThinkDigital at rgpd@thinkdigital.pt.
All the data we collect has the sole purpose of creating and maintaining our relationship with you and providing the services you have contracted.
We do not keep data that is not genuinely important for providing our services or maintaining our relationship with you, in particular for support, customer service and commercial activity purposes.
The controllers of your data may be ThinkDigital - Engenharia de Tecnologias de Informação Lda. or ThinkDigital II Telematrics S.A.
Data is kept only for the period of time necessary to provide the services, maintain our relationship with you or comply with legal obligations.
"Cookies" are small text files that are stored on your device (e.g. computer, smartphone, etc.) by your web browser (e.g. Google Chrome).
These small files are used to retain information about your preferences, or how you use our online platforms, their ultimate goal always being to improve the way we provide our services.
You can always block the use of "Cookies" through the settings of your web browser. For more information, consult your web browser's technical support.
RGPD is the Portuguese acronym for General Data Protection Regulation.
You may also find it referred to as GDPR, which is the English acronym.
The RGPD is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, which lays down the rules on the protection, processing and free movement of the personal data of natural persons and applies directly to all entities that process such data. It came into force on 25 May 2018 in all Member States of the European Union, including Portugal.
The new regulation gives you several rights that have already been explained in this ThinkDigital Privacy Statement, namely:
Consent - All the data we collect and process about you always requires your prior consent, except in implicitly lawful situations, such as the performance of the services you have contracted, as well as compliance with Portuguese legal rights and obligations or those laid down by the European Parliament.
Access - You may at any time consult all the data we hold about you. To do so, you can contact us at the addresses given in this Statement.
Portability - You may at any time request your data in a digital format that allows it to be transferred. To do so, you can contact us at the addresses given in this Statement.
Erasure - You may at any time invoke the right to be forgotten. In this case we will be obliged to delete all the data we hold about you. To do so, you can contact us at the addresses given in this Statement.
Not to be contacted - You may at any time invoke the right not to be disturbed. In this case we will not delete your data, but we will not contact you again. To do so, you can contact us at the addresses given in this Statement.
This Privacy Statement cannot be construed as legal advice. For that purpose, please consult a professional in the field.
To better understand the RGPD, see the legal text (in Portuguese) here: (Download - RGPD PT).
In the course of providing our services and in our relationship with our customers, potential customers, suppliers and employees, we collect various types of information, namely:
CRM - Public data of your company or legal representative (e.g. tax ID, address, etc.), personal contacts of employees we deal with (e.g. phone, email, role)
ERP - Public data of your company or legal representative (e.g. tax ID, address, etc.), personal contacts of employees we deal with (e.g. phone, email, role)
HR - All personal data, namely CV, academic qualifications, questionnaire answers, as well as all data you submitted on our platform of your own free will.
trackingDIARY - Public data of your company or legal representative (e.g. tax ID, address, etc.), personal contacts of employees we deal with (e.g. phone, email, role), location and technical data of your vehicles collected by the installed devices, as well as any information you enter manually of your own free will.
Energy tracker - Public data of your company or legal representative (e.g. tax ID, address, etc.), personal contacts of employees we deal with (e.g. phone, email, role), energy data and technical data of the sites where our monitoring equipment was installed.
webSCADA - Public data of your company or legal representative (e.g. tax ID, address, etc.), personal contacts of employees we deal with (e.g. phone, email, role), technical data of the sites where our monitoring equipment was installed.
If you are using an application, platform or service that is not listed in this section and would like more information about its privacy policy, you may use the contacts described above.
We do not sell your data.
Nor do we provide your data to external entities under any circumstances, unless you explicitly authorise it or it is part of providing our services together with partners or suppliers (e.g. we may need to give your address to the installer or maintenance technician).
In addition to the previous point, we may also be forced to provide your data for reasons of legal obligation or force majeure.
To request information about what data we hold, or to ask for it to be rectified or even deleted, you can contact us through the means mentioned above.
Please note that for this purpose we will ask you for proof of identity so that we can make sure you are the legitimate owner of the data and not a malicious party.
All ThinkDigital employees have signed a full confidentiality agreement and are therefore prohibited from disclosing any information about the company, namely information about projects, customers, future customers, suppliers, other employees, among others.
In addition, all our systems are designed to ensure the privacy, integrity and confidentiality of the data submitted to them and are regularly inspected and audited by our technical teams.
Physically, all servers are protected in rooms with access control, video surveillance and intrusion detection.
Logically, access to the servers is restricted to a controlled group of people and requires secure passwords. In addition, a record is kept of all accesses, including to the administration and management panels of our platforms.
Finally, in order to maximise the level of security and legal compliance, ThinkDigital does not host data outside the European Union.
Yes, as long as you have not previously objected.
Under Article 6(1)(f) of Regulation (EU) 2016/679 (RGPD), we may contact you whenever it is in our legitimate interest, for example to invite you to a meeting, to invite you to find out more about our products or services, or simply as a follow-up to an ongoing commercial process with your organisation.
Note that the RGPD is a regulation that aims to regulate the privacy and protection of personal data in the Member States; it does not prevent relationships between companies and their employees. In fact, the right to promote business ("freedom to conduct a business") is one of the fundamental European rights and can be found in Article 16 of the Charter of Fundamental Rights of the European Union.
Nevertheless, you can always object to future contact, in which case we will treat your interests as our own and will not contact you again for that purpose.
To do so, simply let us know through the contacts given above.
If you asked us to delete all your data, we lose the entire history of our relationship with you.
In this case it becomes impossible for us to know that you previously asked not to be contacted again.
We therefore suggest that, instead of requesting the "right to be forgotten", you simply ask us not to contact you again. That way we will always have a record that you do not wish to be contacted, avoiding any future disturbance.