The Galp Group assumes responsibility for ensuring that the processing of personal data complies with the legal obligations arising under Regulation (EU) 2016/679 of the European Parliament and of the Council and other applicable and related legislation on personal data protection.
I. Who is the «Controller» of my personal data?
II. For what purpose will my personal data be processed?
III. Which personal data will be processed?
IV. How will my personal data be processed?
V. Who are the recipients of my personal data?
VI. For how long will my personal data be processed?
VII. What rights do I have over my personal data?
VIII. Who can I contact to obtain answers to all my questions?
IX. Cookies
I. Who is the «Controller» of my personal data?
The «Controller» of the personal data within the scope of the subscription and use of the Galp+ Card is the Galp Group company, Petróleos de Portugal – Petrogal, S.A. (in this context, referred to as «GALP»), with registered office at Rua Tomás da Fonseca, Torre C, 1600-209 Lisboa.
II. For what purpose will my personal data be processed?
The purpose of the processing of personal data is the retention of loyalty of the customers that have subscribed to the Galp+ Card since it permits access to direct discounts in the purchase of vehicle fuel and/or other products at participating Galp card network service stations.
The lawfulness of the processing of personal data is based on the performance of a contract between customers and Galp, whose terms are governed by the Terms and Conditions of use of the Galp+ Card and, in every matter omitted in these, by the general priciples of law.
To offer customers a better experience in their relationship with the Galp Group, personal data may be processed by GALP and/or by Galp Group companies for:
(1) Commercial and marketing acivities (i.e. dissemination of campaigns, promotions and commercial actions, namely through direct marketing);
(2) Definition and analysis of profiles (i.e. creation of customer profiles for analysing and/or predicting aspects related to their preferences and interests); and
(3) Carrying out of opinion polls and surveys (i.e. contact with customers to determine their opinion, in order to provide an improved experience).
The grounds of lawfulness for the processing of personal data within the context of the abovementioned purposes are, namely:
• The legitimate interest of Galp in the development of commercial and marketing activities;
• Customers' consent regarding the development of commercial and marketing activities of products or services by other Galp Group companies, through a freely given, specific and informed indication of their wishes;
• The legitimate interest of Galp in the definition and analysis of profiles, due to their generic and non-intrusive nature;
• Customers' consent through a freely given, specific and informed indication of their wishes regarding the carrying out of opinion polls and surveys.
The customer may object to the processing of personal data for the purpose of marketing by Galp, both at the moment of subscription to the Galp+ Card, as well as in any subsequent electronic communication for marketing purposes, through opt-out mechanisms that will be offered in all communications, without incurring any obligation or liability and without the exercise of the right of opposition requiring any specific due cause or justification.
Likewise, if the customer explicitly consents to the processing of his/her personal data for commercial and marketing activities by Galp Group companies and to the carrying out of opinion polls and surveys, the customer may withdraw his/her consent at any time, without incurring any obligation or liability.
If customers expressly object or if consent is withdrawn, Galp and/or Galp Group companies will immediately cease the processing undertaken for the purpose in question.
III. Which personal data will be processed?
Within the context of customer loyalty, Galp will process the following personal data: compulsory data - name, date of birth, gender, telephone number, address and electronic mail address; optional data - vehicle's license plate and model.
For the purposes of commercial and marketing activities, for the carrying out of opinion surveys and for the definition and analysis of profiles, in addition to the indicated data, , GALP and/or Galp Group companies can also process consumption data and personal data resulting from the collection of opinions and assessment of Galp Group services by the customer.
IV. How will my personal data be processed?
Customers' personal data will be processed by Galp and/or Galp Group companies, within the context of the purposes indicated above, according to the Galp Group's policy and internal rules, using suitable technical and/or organisational measures to promote security and confidentiality, namely regarding unauthorised or unlawful processing of his/her personal data and their loss, destruction or accidental damage.
V. Who are the recipients of my personal data?
i. «Processors»
Customers' personal data can made available to companies responsible for the development and management of the Galp+ Card.
These companies are bound by written contract to Galp, they can only process customers' personal data for the specific purposes established above and are not authorised to directly or indirectly process customers' personal data for any pupose, for their own interest or for a third party's interest.
GALP and/or Galp Group companies can transfer customers' personal data to the United States of America, if justified within the scope of the contractual regime established with the Processors.
GALP and/or Galp Group companies state that the international flow of data is conducted and certified based on the level of «adequate protection» required by the decision of 12 July 2016 of the European Commission (i.e. EU-US Privacy Shield.
ii. «Third parties»
Customer's personal data may be communicated by Galp to Galp Group companies which will comply with the applicable data protection rules, in accordance with the purposes of the processing.
In compliance with legal obligations, personal data may be transmitted to judicial, administrative, supervisory or regulatory authorities, as well as entities that lawfully undertake activities in connection with data compilation, preventing and combating fraud, and market or statistical research.
VI. For how long will my personal data be processed?
Customers' personal data will be stored, namely:
• For a maximum period of 1 (one) year following the termination of the Galp+ Card loyalty programme;
• For a period of 1 (one) year following the last contact with the customer for the purposes of direct marketing and/or definition and analysis of profiles;
• For a period of 1 (one) year following the last satisfaction poll and/or survey conducted.
VII. What rights do I have over my personal data?
Galp+ Card customers have, namely, the right to: i) request and receive all the relevant information and communications in connection with the processing of personal data conducted by GALP and/or by Galp Group companies; ii) request access to his/her personal data, namely, obtain confirmation that his/her personal data are processed; iii) rectify, delete or restrict the processing of personal data by Galp and/or Group Galp companies.
Customers are also entitled to lodge a complaint to the competent supervisory authority, the National Data Protection Commission (CNPD), if they consider that the processing of their personal data is in violation of their rights and/or of applicable data protection laws.
VIII. Who can I contact to obtain answers to all my questions?
Customers are entitled to, at any time and regarding any topic that is deemed pertinent within the scope of privacy and personal data protection, contact the person responsible for personal data protection of the Galp Group via the following e-mail dpo@galp.com.
IX. Cookies
GALP uses cookies to collect information on the use of its website. Customers are advised to read and examine the Cookies Policy for more information on this topic.
Customers are also advised to regularly consult the Cookies Policy to keep up-to-date with the latest versions.