Skip to main content

Legal Information

Privacy Policy

Within the scope of activity of Rumos Training, and of its website under the domain www.rumos.pt (“Website”) and the services and communications made available therein, Rumos Training may collect some personal data from the User, i.e., information provided by the User that allows Rumos Training to identify and/or contact him/her ("Personal Data"). The purpose of the present Privacy Policy is to help Users understand what personal data we collect, how and why we use it, with whom we share it, and how we protect your privacy when providing our products and services. On the other hand, we would like for our Clients to be aware of the general privacy rules and the conditions for processing the data we collect, which are in strict respect and compliance with the applicable legislation, namely the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“General Data Protection Regulation”).

Data Controller

The Data Controller, referred to as “we” or “Rumos Training” in the present policy, is synonymous with the company that determines the purposes and means of the data processing in question. These companies may be the following:

  • Rumos II, Formação, S.A. (Rumos Training)
    • Head Office: Edifício Mirage - Entrecampos, Rua Eduardo Neves, n.º 3, piso 4, 1050-077 Lisbon
    • Contact: info@training.rumos.pt
    • Legal Person Number: 502624558
  • L.I.H - LEARNING AND INNOVATION HUB, LDA.
    • Head Office: Edifício Mirage - Entrecampos, Rua Eduardo Neves, n.º 3, piso 4, 1050-077 Lisbon
    • Contact: info@training.rumos.pt
    • Legal Person Number: 514698209

The Personal Data we collect

Through the Rumos Training Website, different personal data may be collected directly from the User at different moments, namely:

  • To contact with Rumos Training: name, email, location, and telephone number;
  • To subscribe to the newsletter: name, last name, and email;
  • To enroll in training courses: name, address, zip code, location, email, telephone number, billing data, and taxpayer identification number (NIF). 

Within the scope of the website, there are unstructured fields in which Users can enter personal data, as well as a virtual assistant (Chat) that enables communication between Rumos Training and Users and the transmission of personal data through it. Within the scope of the training courses, and taking into account that they are offered in live training format, the image and voice of the students who have registered for the training may be collected, as it is necessary for the purpose of providing the training. In addition to the data collected through the Website, Rumos Training also collects data from clients, employees, suppliers, and service providers for the formalization of contracts. 

The purposes of collecting Personal Data

Rumos Training collects personal data from:

  • I – Clients / Users

The Clients’/Users’ data is collected for the following purposes:

  • Providing training services;
  • Managing contact with clients; 
  • Billing and charging clients; 
  • Providing information about the training courses; 
  • Informing clients about new products and services available, and special offers and promotions; 
  • Sending newsletters.

The collection of data for the aforementioned purposes is necessary for pre-contractual procedures, to comply with the legal obligations to which Rumos Training is subject, and for the performance of the contract entered into with Rumos Training. Finally, Users are asked for their consent for marketing purposes and to send newsletters.

  • II ­– Trainers

The personal data of Trainers is collected for the purposes of recruitment and selection (pre-contractual procedures) and for the performance of the contract entered into with Rumos Training. The personal data of Rumos Training’s Trainers is also collected and processed for the purpose of complying with the legal obligations to which Rumos Training is subject.

  • III – Candidates and Employees

The data of Candidates is collected for the purpose of the purposes of recruitment and selection and the data of Employees is collected for the performance of the employment contract entered into with Rumos Training. The data processed is necessary for the performance of a contract to which the data subject is a party, or for the purposes of pre-contractual procedures at the request of the data subject. The personal data of Rumos Training’s Employees is also collected and processed for the purpose of complying with the legal obligations to which Rumos Training is subject.

  • IV – Service Providers

Rumos Training carries out processing operations on the Personal Data of its Service Providers in order to ensure compliance with the service provision contract agreed with the Data Subjects or with the joint Data Controllers (in relation to the data and Data Subjects collected by them, such as counterparties, employees and others). The personal data identified herein and subject to processing are necessary for the performance of a contract, for pre-contractual procedures, or for the fulfillment of legal obligations.

General principles applicable to the processing of Personal Data

Rumos Training is committed to ensuring that the personal data it processes is: 

  • Processed in a lawful, fair, and transparent manner with respect to the data subjects;
  • Collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with the purposes for which it was collected;
  • Accurate and updated whenever necessary;
  • Kept in a form that allows the identification of data subjects for no longer than is necessary for the purposes for which they are processed;
  • Processed in a manner that guarantees their security, including protection against unauthorized or unlawful processing and against loss, destruction, or unforeseen damage, with the adoption of appropriate technical or organizational measures.

Retention period of Personal Data

The personal data collected is processed in strict compliance with the applicable legislation and stored in specific databases created for this purpose. The length of time for which personal data collected by Rumos Training is stored and retained depends on the purpose for which the information is processed and will only be kept for the time necessary to fulfill the stated purposes. There are legal requirements for data to be kept for a minimum period of time. Therefore, in the absence of a specific legal obligation, data will only be stored and kept for the minimum period necessary for the purposes for which it was collected or processed, and then deleted. 

Rights of Personal Data Subjects

In accordance with the terms of the General Data Protection Regulation, the data subject has the following rights related to the processing of his/her personal data: 

  • Right to be Informed:

The right to be informed of the conditions under which the personal data is processed at the time when it is obtained. If personal data is not obtained from the data subject, he or she must be provided the information within a reasonable period of time, with some exceptions considered in the General Data Protection Regulation.

  • Right of Access:

The right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data, as well as information about the purposes of the processing, the categories of personal data concerned, the data recipients, the envisaged period for which the personal data will be stored, among others. 

  • Right to Rectification:

The right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning the data subject. 

  • Right to Erasure:

The right to obtain from the controller the erasure of personal data concerning him or her without undue delay under a certain number of circumstances.

  • Right to Restriction of Processing:

The right to obtain from the controller restriction of processing where one of the foreseen conditions in the General Data Protection Regulation applies.

  • Right to Data Portability:

The right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used, and machine-readable format.

  • Right to Object:

The right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her, namely when personal data is processed for direct marketing purposes.  

  • Right to not be Subject to Automated Individual Decision-Making:

The right not to be subject to a decision based solely on automated personal data processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.

  • Right to Lodge a Complaint with a Supervisory Authority:

The right to lodge a complaint with the competent supervisory authority under Portuguese law (Portuguese Data Protection Authority) if the data subject considers that how Rumos Training is processing his/her personal data infringes the applicable legislation and this Policy. By law, you are guaranteed the right to withdraw your consent to the processing of data, for which your consent was required to make its treatment legitimate. You have the right to withdraw your consent at any time, although this will not invalidate the processing of data conducted up to that date based on the consent previously given. These rights may be exercised at any time by the User by sending an e-mail to the following address: rgpd@training.rumos.pt. Rumos Training will respond to the User's request in writing (including by electronic means) within a maximum period of one month from the date of receipt of the request, except in cases of particular complexity, in which case this period may be extended to two months. If the requests submitted by the User are manifestly unjustified or excessive, particularly due to their repetitive nature, Rumos Training reserves the right to charge administrative costs or to refuse to comply with the request.

Transfers of Personal Data

Within the scope of User Data processing, Rumos Training may subcontract third parties to process User Data on its behalf and in accordance with its instructions. Rumos Training ensures that such subcontractors provide sufficient guarantees for the implementation of appropriate technical and organizational measures so that the processing meets the requirements of applicable law and ensures the security and protection of the rights of data subjects, in accordance with the terms of the subcontracting agreement signed with said subcontractors. Rumos Training may also transmit clients’ personal data to third parties, not qualified as subcontracting entities when it considers such communication of data as necessary or appropriate (i) under applicable law, (ii) in compliance with legal obligations/judicial orders, or (iii) to respond to requests from public or government authorities. In this respect, the Rumos Group may transmit your personal data to public authorities and regulators. The table below shows the recipients of personal data transfers:
 

Categories of recipients Purposes of personal data processing
Consultants and Lawyers                            Provision of consulting and legal services
Companies from the Rumos Group             Provision of services to users 
Service providers and IT infrastructure providers           Payments and provision of services
Software and systems licensing, maintenance, support, and technical assistance companies Management / maintenance / Support of the systems and software necessary for the activity of Rumos Training

Tools used

  •  Facebook:

There is interactivity with Facebook on the Website through a connection to the servers of this social network. The servers will identify the website that the User is visiting and may store other data, such as the IP address. If the User is logged into Facebook, the data will be associated with the Website. To prevent this, the User must log out of Facebook before visiting the Website. More information about the data processing practices of Facebook can be found at https://www.facebook.com/about/privacy/.

  • LinkedIn:

There is interactivity with LinkedIn on the Website through a LinkedIn button that connects to the servers of this social network. The servers will identify the website that the User is visiting and may store other data, such as the IP address. More information about the data processing practices of LinkedIn can be found at https://www.linkedin.com/legal/privacy-policy?_l=pt_BR.

Contact us
For more information or questions regarding the privacy of your personal data, contact us via the email rgpd@training.rumos.pt.