A Noytrall Technologies, Lda. (doravante referida como "Noytrall") está comprometida com o respeito pela privacidade dos utilizadores, bem como com a proteção e segurança dos seus dados pessoais.
Este texto tem como objetivo informar o utilizador sobre como a Noytrall trata os dados pessoais que são fornecidos através do website www.noytrall.com ou da aplicação web Noytrall.
1. Scope and Data Controller
This privacy policy applies to all personal data collected through the website www.noytrall.com ("Website") or the Noytrall web app ("App") operated by Noytrall Technologies, Lda.
Noytrall Technologies, Lda., with registration number 516661574 at the Commercial Registry Office of Coimbra, tax identification number 516661574, headquartered at Rua de São Martinho nº 8, Lourinha de Baixo, 3450-092 Marmeleira, with a share capital of 8,039.22 €, is responsible for processing your personal data.
Before using the Website or App, the user should carefully read this privacy policy and decide freely whether to provide their personal data to Noytrall.
By using the Website or App, the user guarantees that they are of legal age and that the data provided is true, accurate, complete, and current. The user is responsible for any discrepancies in the data provided. If the provided data belongs to a third party, the user guarantees that they have informed the third party about the conditions stated in this document and have obtained their authorization to provide their data to Noytrall for the indicated purposes.
For any questions regarding this privacy policy, you can contact Noytrall through the following contact points:
- Data Protection Officer (DPO): dpo@noytrall.com
2. Purposes of Processing and Legal Basis
The personal data collected through the Website and App are intended to inform, respond to, or follow up on user requests, and are processed for the following purposes:
- Handling, directing, and consulting inquiries and/or complaints;
- Contracting services and/or equipment;
- Requesting contact related to any service or equipment;
- Conducting environmental impact assessments;
- Joining partnerships promoted by Noytrall together with its business partners;
- Participating in Noytrall app activities under the gamification program;
- Engaging in campaigns and contests related to advantages and benefits;
- Communicating readings recorded by measurement equipment installed at the consumption site (meter).
The processing of personal data is necessary to perform the above operations in the context of executing the contract between the user and Noytrall, or as part of pre-contractual measures at the user's request.
Joining partnerships promoted by Noytrall, whether through the Website or the Web App, may require sharing and transmitting your personal data to Noytrall's commercial partners. Noytrall will only share your personal data with these partners to the extent strictly necessary and, where applicable, after obtaining your prior consent and acceptance of the specific partnership terms and conditions available at the time of data collection for this purpose.
The data subject can choose whether or not to participate in the gamification program. If you choose to participate, the collected data will be necessary for maintaining participation in the program, accessing gamification levels and experiences, as well as participating in the benefits and advantages provided. Participation in the gamification program is entirely voluntary. If you opt-in, we will collect and process data related to your consumption and its environmental impacts, as well as data on your participation in the activities and proposals of the gamification program. The collected data is necessary for effective participation in the gamification program.
As an interactive program, enabling push notifications allows us to send electronic messages related to the gamification program. If you do not wish to receive push notifications, you may choose not to initially enable them or cancel their delivery upon receiving any communication, though you may lose access to some program functionalities.
If you have not opted into the gamification program, the data necessary for participation will not be processed, and only the data required for other services you have contracted or subscribed to will be retained.
3. Recipients
The user's personal data may be disclosed to reputable service providers contracted by Noytrall, who will process the data exclusively for the purposes established by Noytrall and in accordance with the instructions issued by Noytrall. These providers strictly comply with legal regulations on personal data protection, information security, and other applicable standards under the terms of a written agreement entered into between the parties.
Additionally, the user's personal data may be disclosed to Noytrall's business partners for the purpose of joining a partnership, upon the user's request and after obtaining consent for this purpose.
Noytrall may also disclose the user's personal data to third parties when such transmission is necessary to comply with a legal obligation, a decision of the National Data Protection Commission or another relevant supervisory authority, or a court order. Personal data may also be disclosed for any other legitimate purpose provided by law.
4. International Data Transfers
Noytrall strives to ensure that the processing of personal data occurs entirely within the European Economic Area (EEA).
Exceptionally, and when strictly necessary for achieving the processing purposes described in this Policy, Noytrall may transfer the personal data collected to third countries or international organizations for which there is an adequacy decision by the European Commission or are subject to appropriate safeguards provided in the law, such as the execution of standard contractual clauses for the transfer of personal data (as per Article 46 of the GDPR). When transferring data to third countries or international organizations based on appropriate safeguards, Noytrall will ensure additional measures to guarantee that the personal data enjoy a level of protection essentially equivalent to that in the European Union.
Additionally, the data collected during your navigation on our website, notably through cookies and other similar technologies, may also be transferred outside the EEA if you consent to the placement of certain categories of cookies (e.g., analytical or advertising cookies). These cookies are placed by third parties who may transfer your data to countries that do not have an adequacy decision from the European Commission and that do not offer a level of personal data protection essentially equivalent to that of the European Union (e.g., the United States of America), as is the case with the web analysis and optimization service “Google Analytics,” provided by Google Ireland Limited. For example, sharing data with service providers outside the EEA (such as Google LLC) may involve disproportionate access to your data by the data importing country’s governmental and intelligence services or the impossibility of effectively exercising your rights. For more information on the use of these cookies, please consult our Cookie Policy.
Should the Data Subject wish to obtain more information about personal data processing carried out outside the EEA, including the safeguards adopted in data transfer, they may contact the data controllers using the contact details provided in this Policy.
5. Retention Period
Noytrall will retain users' personal data for the period necessary to fulfill the purposes for which they were collected. In the event of a contract between Noytrall and the user, the data will be retained for the duration of the contract plus the periods of limitation and expiration of the rights arising from it, unless Noytrall is required by law to keep them for a longer period.
Noytrall may also retain the data beyond these periods for statistical purposes, in which case the data should be anonymized.
6. User Rights
The user has the right to request from Noytrall access to personal data concerning them, as well as their rectification or erasure. They also have the right to restrict processing concerning the user, the right to object to processing, as well as the right to data portability, in accordance with the laws governing the processing of personal data.
The right to deletion is conditional in cases of personal data necessary for complying with legal obligations.
To exercise the aforementioned rights, the user may contact the data controller using the addresses provided in point no. 1 of this policy. The user also has the right to lodge a complaint with the National Data Protection Commission if they believe their rights regarding their personal data have been violated.
For any questions related to this privacy policy, the user may also contact Noytrall's data protection officer (DPO), whose email address is dpo@noytrall.com.
7. Security Measures
Noytrall makes its best efforts to protect users' personal data from unauthorized access through the Internet. For this purpose, it uses security systems, rules, and other procedures to ensure the protection of personal data, as well as to prevent unauthorized access, improper use, disclosure, loss, or destruction.
However, it is the users' responsibility to ensure and verify that the device used to access the Website and the Web App is adequately protected against harmful software, computer viruses, and worms. Users should be aware that without adequate security measures (e.g., secure browser configuration, updated antivirus software, firewall software, and not using software of dubious origin), the risk of personal data and passwords being accessed by unauthorized third parties is increased.
Additionally, if users detect any defect, bug, or anomaly on the Website or App, they must immediately report its existence to Noytrall and refrain from using the aforementioned to access commercial information, personal data of other users, alter the features of the Website or Web App, or, in any other way, exploit the defect, bug, or anomaly to use the digital channels irregularly, unlawfully, or differently from what Noytrall designed.
8. Sharing News
Through the Website and the Web App, the User can share relevant news on various social media platforms, including: Facebook, LinkedIn, and X. Noytrall cannot be held responsible for the processing of your personal data carried out by these platforms following your share. Therefore, users should carefully read the Terms and Conditions and Privacy Policies of these platforms before sharing news.
9. Cookies
The Website and the App use cookies. To learn more, please visit our Cookie Policy.
10. Changes to the Privacy Policy
Noytrall may change this Privacy Policy at any time. When such changes occur, they will be disclosed through the Website and/or the Web App and/or communicated to users via the contact details provided.