Privacy Policy

This Privacy Policy explains the terms under which CHAPAS – Clube História e Acervo Português da Actividade Seguradora, based in mainland Portugal, owner and administrator of website, uses and processes the data and information of its readers and/or Users. The rules for the collection, use and processing of data and information are in accordance with national legislation and the Personal Data Protection Regulation 2016/679/EU of the European Parliament and the Council of 27 April 2016, having been reformulated, with a new Privacy Policy in force from 25.05.2018.


Identification of the Data Controller

CHAPAS – Clube História e Acervo Português da Actividade Seguradora, Associação com sede em Av. Almirante Reis, 133 – 5º andar 1150 – 015 Lisboa, Portugal, holder of the single legal person number 509 791 336, registered at the Commercial Registry Office of Lisbon.

CHAPAS – Clube História e Acervo Português da Actividade Seguradora takes care of the privacy and protection of the personal data of its readers and/or Users (hereinafter referred to as “Users”) and is responsible for the website (hereinafter referred to as “Site”).

You may obtain further information about your rights and/or exercise them through the following contacts:



How we collect your personal data collects the personal data of its Users in the following ways:

  • Filling in the form for the submission of User’s opinion by the owner of the personal data, through the Site;
  • Contacting the Users by filling in their personal data in the opinion submission form;


What personal data we process

We collect, register and store only personal data that allows the creation of testimonies, that can be visible on the site and that subscribe to our newsletter.
The personal data collected when creating testimonies are the following:

  • Name
  • Email
  • Opinion / Evaluation


For what purposes may your personal data be used

The personal data of the Users are only collected and stored, solely and exclusively for:

– Allow CHAPAS – Clube História e Acervo Português da Actividade Seguradora to maintain communication between its users;

– Improve the operation of the Site including the management and prioritization of content.

Important: We do not give out to third parties the personal data provided to us by our Users, for any purpose whatsoever.



What are “Cookies”?

Cookies are text files sent by the sites you visit that are stored on your computer. The information provided increases the efficiency of the sites, making it easier for users to access the information they are looking for, eliminating the need to repeatedly enter the same information. Cookies are not used to collect personal information, they only identify the computer used.

What Cookies we collect and store:

– Session Identification

– User screen resolution

– Google Analytics


How we keep your personal data safe

Our systems feature a variety of security measures, including advanced encryption and authentication tools, to help protect and maintain the security, integrity and availability of your personal data.

User data disclosed, or made public on the Site, are thanks to contracts between CHAPAS – Clube História e Acervo Português da Actividade Seguradora and users who are now agents.

From the point of view of our internal organization, only 4 (four) employees of have access to the database of the Users, limiting the access to it to the minimum indispensable for the management and maintenance of the database.

This internal standard aims to minimize the number of accesses to the Users’ personal database, reducing the probability of unauthorized access to the stored data.

We keep an internal record of all queries and accesses to the database, which allows us to identify undue access and its Authors.


Data Retention Period

We retain your personal data from the moment you fill out the registration form for new Users until you ask us to delete it, or until you ask us to cancel your registration as a User.


Data breach is not responsible for the content accessed through any link that leads the User to navigate outside the domain stores the User’s data on the servers of a third party service provider which guarantees a high level of data protection. This entity does not have access to the data that is hosted there.

The violation, or attempted violation, of database will be duly reported to the National Data Protection Commission within 72 (seventy-two) hours and will lead to the criminal and civil liability of the Agent(s) concerned for the damages caused.


How can you change or withdraw your consent

It may, at any time, amend or revoke its consent, with effect for the future.

If you revoke your consent statements you will no longer be contacted and receive communications for the purposes described in this Privacy Policy.

Please use to contact us if you wish to revoke your consent.


Rights of the data subject

The Users of the Site benefit from the following rights expressly enshrined in the Personal Data Protection Regulation 2016/679:

  • Right to Information – at the time of collection or processing, the holder of the personal data has the right to be informed as to the purpose of the processing, the person responsible for processing the data, the entities to which their data may be communicated, the conditions of access and rectification and which compulsory and optional data will be collected.
  • Right of Access – the owner of the personal data has the right to access them without restriction or delay, as well as to know what information is available on the origin of the data, the purposes of its processing and its communication to third parties.
  • Right of Erasure – the data subject has the right to request that his/her data cease to be processed, be erased and be deleted, under certain conditions, in the event of:
    • are no longer necessary for the purpose for which they were collected;
    • the data subjects withdraw their consent, or object to the processing thereof;
    • if the processing of the data does not comply with the legal provisions.
  • Right to limitation of processing – the data subject is entitled to have his data limited only to what is essential for the purpose of the processing.
  • Right to data portability (data transfer) – the data subject has the right to receive your data, or to request the transmission of your data to another entity that becomes the new responsible for your personal data (only if technically possible).
  • Right to object – the data subject has the right to object, at his/her request and free of charge, to the processing of his/her personal data for the purposes of direct marketing or any other form of prospecting and that his/her personal data be communicated to third parties, unless otherwise provided by law.
  • Right to Knowledge of a Data Violation – the owner of personal data has the right to be informed if there is any breach of security that compromises your personal data.
  • Right to Complain to Supervisory Authority – the data subject has the right to complain not only to the company’s personal data controller, but also to the supervisory authority, the National Commission for Data Protection.

If you have any questions regarding our use of your personal data you can contact our Data Protection Officer (DPO).

Subject to certain conditions, you may have the right to ask us to:

  • we provide you with additional information about our use of your personal data;
  • provide us with a copy of the personal data you have provided to us;
  • provide the personal data you have provided to another controller at your request;
  • update any inaccuracies in the personal data we hold;
  • we delete personal data whose use is no longer legitimate;
  • limit how we use your personal data until the complaint is investigated.

Your exercise of these rights is subject to certain exceptions aimed at safeguarding the public interest (prevention or detection of crime).

If you exercise any of these rights, we will review your request and respond, hopefully, within one (1) month.


Changes to this privacy policy

This Privacy Policy is effective as of 01.03.2019 and will remain in force, except for any changes to its provisions in the future, which will take effect immediately after being published on this page.

We reserve the right to update, or change, our Privacy Policy at any time and advise you to check this Privacy Policy regularly.

If we make any material changes to this Privacy Policy, we will notify you either via the email address you provide to us or by posting a prominent notice on our website.