MUNDICENTER II – Gestão de Espaços Comerciais S.A. (‘Mundicenter’) guarantees users of the Amoreiras Shopping Centre website and the Amoreiras Corporate Card App respect for their privacy.

The purpose of this privacy policy is to inform you about the collection, processing and use of your personal data, as well as the rights you have over it, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (‘GDPR’).

This Privacy Policy applies strictly to the Mundicenter websites and the Amoreiras Corporate Card App, excluding third-party websites that may be accessed via links on our sites. The processing of personal data that you share with third parties is not covered by this Privacy Policy, so we recommend that you read the privacy policies of these third parties before sharing any personal information.

Visiting this website and app is not subject to the registration of personal data that identifies the user. However, the use of certain content may imply the provision of personal data.

The registration in the App presupposes the provision of personal data (name, email and telephone number) in order to allow it to function, i.e. to benefit from the advantages and discounts of the Amoreiras Shopping Centre shops that are members, as well as to follow the activities and events taking place in this shopping centre.

Data Collection and Processing

Mundicenter is the entity responsible for collecting and processing the User’s personal data.

Personal data is collected from the user with their express consent, which indicates the purpose and length of time the data will be kept. This personal data will be processed or stored in computerised form by Mundicenter and its subcontractor, NETMAIS, with the aim of informing the user of competitions, actions and other events in the Mundicenter universe, and will only be kept and used for as long as necessary and in accordance with the purposes indicated in the consent given by the user. Once the retention period has expired or the purpose for which they were collected has been fulfilled, the personal data will be deleted or converted into anonymised data.

Mundicenter undertakes to comply with the provisions of the GDPR, as well as other applicable legislation, namely not to copy, reproduce, adapt, modify, alter, delete, destroy, disseminate, transmit, disclose or in any other way make available to third parties the personal data to which they have had access, without having been expressly authorised to do so, undertaking to use it exclusively for the purposes for which it was collected, refraining from any use outside the context, either for its own benefit or for that of third parties.

User’s Rights

Under the terms and for the purposes of articles 13 and following of the Regulations, MUNDICENTER hereby informs that:

1 – The person responsible for processing personal data is MUNDICENTER II – Gestão de Espaços Comerciais SA, legal person no. 503 121 495, with head office at Rua Sanches Coelho no. 3, 1649-029 Lisbon, which can be contacted on telephone no. 213 802 300 or by e-mail responsavel.rgpd@mundicenter.pt

2 – The personal data collected is used to respond to requests for information, commercial requests and to communicate information about actions, events and promotions, and the processing of such data is limited to this purpose, unless the data subject has expressly consented to the processing of such data for other purposes;

3 – The data collected will be kept for the period necessary for its use, for the use expressly referred to in point 2.

4 – The personal data subject may, at any time, exercise the following rights vis-à-vis MUNDICENTER, preferably by means of written communication to be sent to the e-mail marketing@mundicenter.pt or to the address of Mundicenter’s head office identified above:

1. a) the right to access his/her personal data made available through this document, as well as to consult, rectify, update or delete it, and to restrict its processing;
2. b) the right to object to the processing of his/her data;
3. c) the right to portability of his/her personal data;
4. d) the right to withdraw consent to the processing of personal data contained in this document;
5. e) The right to lodge a complaint with the competent supervisory authority in accordance with Portuguese Law, obtaining contact details for this purpose from MUNDICENTER;
6. f) The right to obtain information from MUNDICENTER on the purposes for which his/her data is processed, the categories of data involved, the identity of the recipients to whom it has been disclosed and the period of retention of personal data or the criteria used to define this period;
7. g) The right to be informed of what personal data is being processed and to obtain a copy of such data, with the copy being provided in electronic format, unless the data subject requests otherwise;
8. h) The right to obtain from MUNDICENTER the rectification of personal data that is inaccurate, or to complete his/her data;
9. i) The right to obtain from Mundicenter the erasure of his/her personal data (‘right to be forgotten’) without undue delay, Mundicenter being obliged to erase such personal data, namely when it is in fulfilment of a legal obligation, as well as in the event that the data subject has objected to the respective processing and/or has withdrawn the consent previously given.

Data Transmission

Mundicenter will not pass on the User’s personal data to third parties, unless:

1. a) it has obtained express consent to do so from the data subject;
2. b) the transmission is made in fulfilment of a legal obligation or to comply with a court order; and
3. c) the communication is carried out for any legitimate purpose provided for by law.

Security Measures

We have a technical team dedicated to ensuring the confidentiality and security of your data.

Mundicenter adopts the measures at its disposal (security systems, rules and other procedures) to protect the user’s personal data from unauthorised access via the Internet, and to prevent unauthorised access to the data, as well as its disclosure, improper use, loss or destruction.

It is, however, the User’s responsibility to guarantee and ensure that the equipment they are using is adequately protected against harmful software and computer viruses, worms and/or malware.

Data Controller

The email of Mundicenter’s data controller is: responsavel.rgpd@mundicenter.pt

Changes to the Privacy Policy

Mundicenter reserves the right, at any time, without prior notice and with immediate effect, to alter, add to or revoke this Privacy Policy, in whole or in part.

Any changes will be immediately publicised on this same online page.

If you have any doubts or questions about the processing of your personal data by Mundicenter, please contact us:

• responsavel.rgpd@mundicenter.pt
• Rua Sanches Coelho nº 3, 1649-029 Lisbon