BHIVE VISA UNIPESSOAL, LDA., with Tax ID number 516717944 and registered office at Avenida Duarte Pacheco, no. 19, 1^ST floor, 1070-100 Lisboa (“Bhive”), in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data (“GDPR”), guarantees the protection and confidentiality of your personal data.

BHIVE complies with the rules applicable to the processing of your Personal Data and provide you with information about your rights as the owner of the personal data.

These rules do not substitute any clause on data protection part of a specific agreement in which BHIVE has entered into.

Which personal data is collected?

Personal data corresponds to every information that allow an individual, the owner of the data, to be directly or indirectly identified.

In general, BHIVE collects the following data:

• Identification data: full name, nationality, date of birth, number of identification document, type of identification document, tax number, among other elements;
• Contact data: address, telephone number, e-mail;
• Professional life data: profession, employer; PEP (Politically Exposed Person);
• Internet browsing data (IP address and cookies).

When and how does BHIVE collects data?

Personal data is collected based on the need to comply with pre-contractual diligences required by Law and to execute a contract to which the data owner intends to be a party.

Personal data is collected directly with the data owners, per e-mail, phone, and when forms provided on the web site are filled in or through authorized third parties.

Why does BHIVE collects and processes personal data?

BHIVE collects and process personal data for the following purposes:

• Compliance with legal obligations;
• Processing information requests;
• Processing of complaints;
• Execution of agreements;
• Management of contractual relations;
• Business prospecting.

In case the data owners have given their consent, BHIVE may use the data for commercial communications.

To whom may the data be transferred to?

Personal data is processed by the administrative services of BHIVE and may be transferred to other companies that provide BHIVE complementary services that are essential to the pursuit of the purposes the data are collected for.

BHIVE may also use external entities and in this case the contractual relationship is regulated by a contract defining the security measures in place and how the processing of data is organized, as well as specifying that such entity may only act following BHIVE instructions and in accordance with the GDPR.

The data is also transferred to public authorities for compliance with legal obligations.

For how long are the data stored?

Personal data is stored by the maximum period permitted by law, or by the necessary time to comply with the aims of this Policy, with effect from the date of collection, being destroyed in a safe manner after this time.

BHIVE keeps your personal data for the period required to comply with contractual and legal obligations, being held for time needed to guarantee:

• Compliance with any obligation required by the law or any other regulations, namely in the scope of the commercial and tax law, banking law, Money Laundering Act and Securities Code;
• The right to keep evidence according to the applicable legal expiration periods.

If the personal data is processed for different purposes for which there are different storage periods, BHIVE will keep them for the longest of these periods, in which case the processing of the personal data will be restricted to the purpose for which the storage period is the longest.

How is the protection of personal data ensured?

BHIVE ensures the protection of personal data with adequate and proper Technical and Organizational measures to keep the data secure and to prevent potential intrusions and unauthorized or unlawful processing and access.

BHIVE ensures that personal data will only be available or provided to third parties in accordance with the GDPR.

Rights of the owner of the data

Data owners are entitled to the following rights:

Right to withdraw the consent: the right to withdraw the consent at any time without the withdrawal compromising the lawfulness of the processing carried out based on the consent previously given.

Right of access: right to access their Personal Data and get information about the purposes, categories, recipients, or categories of recipients to which their personal data were or will be disclosed, the retention period and their origin.

Right of rectification: the right to obtain from BHIVE the rectification or completion of any personal data concerning them that is inaccurate or incomplete, under the terms of article 16, GDPR.

Right to erasure or to be forgotten: the right to request BHIVE to erase of their personal data on the grounds set out in article 17, GDPR, and the company must comply with this request, without any undue delay, whenever one of the following reasons apply:

• The personal data is no longer needed for the purpose for which it was collected or processed in the first place;
• The data subject has withdrawn the consent that justifies data processing and there is no other legal ground for such processing;
• The data subject opposes to processing of their Personal Data and there is no other prevailing legitimate interests that justify such processing;
• The personal data was processed unlawfully;
• The personal data must be deleted for complying with a legal obligation concerning the EU laws or the laws of a Member State that applies to BHIVE;
• The personal data have been collected in relation to the offer of information society services referred to in article 8(1), GDPR.

Right to restriction of processing: the right to obtain from BHIVE the restriction of processing under the conditions set out in article 18, GDPR

Right to data portability: in the cases provided for the article 20, GDPR, the right to receive from BHIVE the personal data concerning them in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from BHIVE.

Right to object: the right to object to processing of personal data by BHIVE in the circumstances established in article 21, GDPR.

Right to Individual Automated Decisions, including Profiling: BHIVE does not adopt automated individual decisions, including profiling, which produce effects in the legal sphere of the data subjects or that significantly affect them in a similar way.

Right to complain with the supervisory authority: If there is a disagreement as to the use of their data, data owners are entitled to lodge a complaint with the supervisory body, the National Data Protection Commission (https://www.cnpd.pt/).

Data owners may exercise any of these rights by writing to the contacts provided in this policy, attaching their tax identification number to confirm their identification.

The exercise of any of the rights above mentioned may be limited due to these parties rights, legal obligations or other confidential or predominant legitimate interests.

Updates to the Private Policy

This Privacy Policy may periodically be updated by BHIVE to reflect changes to the law or alterations to the actual website and its content. Any modifications will be published immediately on this page and we therefore advise you to consult it regularly.

Details of the data controller:

BHIVE VISA UNIPESSOAL, LDA.

Corporate tax nº: 516717944

Tel: +351213713350

For any questions related to data protection, please send an email to: info@bhivevisa.com