Your GDPR Rights

Last Updated: March 2026

Introduction/Purpose

This policy outlines your rights under the General Data Protection Regulation (GDPR) as it applies to your personal data processed by norminster through the website norminster. We are committed to protecting your privacy and ensuring that your personal data is handled in accordance with applicable data protection laws.

Scope and Applicability

This policy applies to all users of norminster who provide personal data to us. It is relevant to all processing activities conducted by norminster within the jurisdiction of Portugal and in compliance with the GDPR.

Definitions

  • Personal Data: Any information relating to an identified or identifiable natural person.
  • Processing: Any operation or set of operations performed on personal data, such as collection, storage, use, and disclosure.
  • Data Subject: An individual whose personal data is processed by norminster.

Main Policy Content

Under the GDPR, you have the following rights regarding your personal data:

  • Right to Access: You have the right to request access to your personal data that we hold. This includes the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, if so, access to the personal data and certain information about its processing.
  • Right to Rectification: You have the right to request the correction of inaccurate personal data concerning you. You may also request that incomplete personal data be completed.
  • Right to Erasure: You have the right to request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected, or if you withdraw your consent on which the processing is based.
  • Right to Restrict Processing: You have the right to request the restriction of processing your personal data under certain circumstances, such as when you contest the accuracy of the data.
  • Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit that data to another controller without hindrance.
  • Right to Object: You have the right to object to the processing of your personal data, including profiling, based on legitimate interests or for direct marketing purposes.
  • Right Not to Be Subject to Automated Decision-Making: You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you.

User Rights and Obligations

To exercise your rights, you must submit a request to us using the contact information provided below. We may require you to provide proof of identity to ensure that we are responding to the correct individual. We will respond to your request within one month of receipt. If your request is complex or if you have made multiple requests, we may extend this period by an additional two months, in which case we will inform you of the extension and the reasons for the delay.

Limitations and Disclaimers

While we strive to uphold your rights under the GDPR, certain limitations may apply. For example, we may not be able to comply with your request if it affects the rights and freedoms of others or if we are required to retain your personal data for legal obligations. Additionally, we reserve the right to refuse requests that are manifestly unfounded or excessive.

Data Protection/Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk of processing your personal data. This includes measures to protect against unauthorized or unlawful processing and against accidental loss, destruction, or damage.

Changes to Policy

We may update this policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will notify you of any significant changes by posting the new policy on our website and updating the "Last Updated" date at the top of this page.

Contact Information

If you have any questions or concerns regarding this policy or your rights under the GDPR, please contact us at:

Company: norminster
Phone: +3519243045212
Email: [email protected]
Address: Amoreiras Tower 2, Avenida Engenheiro Duarte Pacheco, Floor 5, Office 12, 1070-101 Lisboa, Portugal

Governing Law and Jurisdiction

This policy shall be governed by and construed in accordance with the laws of Portugal. Any disputes arising out of or in connection with this policy shall be subject to the exclusive jurisdiction of the courts of Portugal.