Phone:
Fax:

On May 25, 2018, the new General Data Protection Regulation (GDPR) came into force, approved by Regulation (EU) No. 2016/679 of the European Parliament and of the Council of the European Union of April 27, which established the rules regarding the protection of individuals with regard to the processing of personal data and the free movement of such data.

The GDPR introduces a set of new rules, including the obligation to appoint a data protection officer, changes to the rules on obtaining consent, the elimination of notifications and authorizations, the implementation of the right to be forgotten, the introduction of very high fines, and reporting obligations regarding security breaches.

So, under the terms of paragraph a) of no. 1 and no. 6 of article 37 of the GDPR, the Regional Secretariat for the Environment and Climate Action (SRAAC) appointed Dr. Teresa Maria Escobar da Silva, senior technician of the Environmental Planning and Promotion Office of the Regional Secretariat for the Environment and Climate Action, as data protection officer, performing the role of senior specialist technician, as she is recognized as having the professional qualities and skills necessary to perform the inherent functions.

Contacts
Data Protection Officer: Dr. Teresa Maria Escobar da Silva
Address: Av. Antero Quental No. 9C, 3rd Floor, 9500-160 Ponta Delgada
Phone: (+351) 296 206 700
Email: [email protected]

Data Subject Rights
Right of Access: the right to obtain confirmation as to whether or not personal data concerning the User is being processed and, if so, the right to access their personal data and certain information.

Right to Rectification: right to rectify inaccurate personal data concerning the User or request that incomplete personal data be completed.

Right to Erasure: the right to obtain the erasure of your personal data without undue delay, provided that there are no valid grounds for their retention, such as cases in which they must be retained to comply with a legal obligation or because legal proceedings are in progress;

Right to Restriction of Processing: the right to request the limitation of the processing of your personal data, in the form of suspension of processing or limitation of the scope of processing to certain categories of data or purposes of processing, in accordance with Article 18 of the GDPR.

Right to Portability: the right to receive personal data concerning you that you have provided in a structured, commonly used and machine-readable format and/or the right to have such data transmitted to another data controller.

Right to Object: the User's right to object at any time to the processing of data concerning him/her, provided that there are no legitimate reasons for such processing that prevail over the interests, rights and freedoms of the User, or for the purposes of declaring, exercising or defending a right in a legal proceeding;

The Data Subject may also revoke their consent, in processing operations dependent on obtaining consent, without such revocation invalidating the processing of the data while the consent is in force.

Data Subject rights may be exercised by:

  • sending a registered letter to the address: Av. Antero Quental, No. 9C, 3rd Floor, 9500-160 Ponta Delgada, to the attention of the SRAAC Data Protection Officer; or
  • sending an email to [email protected].

The communication must contain the following information:

  • Name and email address;
  • Right to exercise and, in the case of exercising the right to restriction, the reasons why the Data Subject believes their data is being improperly processed; and 
  • Address, for notification purposes in cases where the request is made by letter.

The Data Protection Officer will respond through the same way by which the Data Subject exercised his/her right within a maximum period of one month from receipt of the request, except in cases of special complexity, in which this period may be extended by up to two months upon duly substantiated justification.

If the requests submitted are manifestly unfounded or excessive, in particular due to their repetitive nature, SRAAC reserves the right to charge administrative costs or refuse to process the request.

If the Data Subject believes that SRAAC has not complied with the requirements set forth in the GDPR or applicable national data protection legislation, they may still exercise the right to complain to the National Data Protection Commission through its website.

Attachments