Privacy Policy

1. Data Controller

The controller of personal data is Estagion, Lda., trading as "RiseON", tax and company number 519 044 479, with registered office at Rua José Florindo 44 C, 2750-400 Cascais, Portugal. For any privacy question: geral@riseon.pt.

2. Our commitment to your privacy

RiseON is committed to protecting the privacy and personal data of its users, clients and partners. This Privacy Policy describes how we collect, use, store and protect your information under the General Data Protection Regulation (GDPR).

3. Data we collect

• Contact form: name, email, phone (optional), area of interest and message
• Recruitment processes: CV data (education and career history, position, company, field of activity) and, only when needed for the process or to sign a contract, the address
• Technical data: IP address and device and browser type, logged automatically by the server
• Cookies: information about your interaction with our site, as set out in the Cookie Policy

4. Purposes and legal basis

• Answering contact and meeting requests: pre-contractual steps at the data subject's request and consent (Art. 6(1)(b) and (a) GDPR)
• Providing recruitment and consulting services: performance of a contract (point (b))
• Managing candidate selection processes: pre-contractual steps and the candidate's consent (points (b) and (a))
• Sending information about our services (marketing communications): consent or, for clients, legitimate interest (points (a) and (f)). You can opt out at any time via the unsubscribe link in each communication or by emailing geral@riseon.pt
• Website security and improvement: legitimate interest (point (f))
• Compliance with legal, tax and accounting obligations: legal obligation (point (c))

5. Who we share data with

We do not sell personal data. Data may only be disclosed to:

• Service providers (processors): website hosting and database, notification email delivery and authentication for the restricted area, contractually bound to process data only on our instructions (Art. 28 GDPR)
• RiseON clients: for candidates, only the data needed for the selection process and with the candidate's knowledge
• Public authorities: when required by law

6. Transfers outside the EU

Some service providers may process data outside the European Economic Area, namely in the United States. In such cases the transfer relies on appropriate safeguards: a European Commission adequacy decision (such as the EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission.

7. Retention periods

• Contact requests: up to 2 years after the last contact, unless they lead to a contractual relationship
• Client data: for the duration of the contract and then for the legal retention period for tax and accounting records (10 years)
• Applications: until the end of the selection process and, with the candidate's consent, up to 2 years for future opportunities
• Marketing communications: until consent is withdrawn or you object
• Server technical data: up to 6 months

8. Security

We apply appropriate technical and organisational measures to protect data against loss, unauthorised access or disclosure, including encrypted communications (HTTPS), access to the restricted area limited to authorised people with authentication, and choosing service providers that offer security guarantees.

9. Your rights

Under the GDPR, you have the right to:

• Access: know which of your data we hold
• Rectification: correct inaccurate or incomplete data
• Erasure: request the erasure of your data
• Restriction of processing: ask for processing to be restricted in certain situations
• Objection: object to the processing of your data, including for marketing
• Portability: receive your data in a digital format
• Withdraw consent: at any time, without affecting the lawfulness of processing carried out before

10. Complaint to the CNPD

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, at www.cnpd.pt.

11. Terms and Cookies

This policy complements this website's Terms and Conditions and Cookie Policy.