General Policy on Security and Privacy
The protection of privacy and personal data is a priority for GESBA – Empresa de Gestão do Sector da Banana, Lda. (hereafter “GESBA”) and GESBA makes a clear commitment to us.

This policy concerns privacy measures undertaken within the scope of GESBA’s activities, including on its portals, online sites and with regard to other services managed and used by the company. The personal data you provide during interactions with the various services will be treated with the guarantees of security and confidentiality required by the legal framework on the protection of personal data.

The portals, sites and applications under the responsibility or used by GESBA within the scope of the services provided contain links to other sites under the responsibility of third parties. GESBA’s privacy policy applies exclusively to the sites and services under its responsibility. When accessing sites of other entities, even if redirected from sites under the responsibility of GESBA, you should read their respective privacy policies.

Services, portals and sites under the responsibility of GESBA must be freely accessed and used by the user, with GESBA presuming that the user has read, understood and accepted the Terms and Conditions of their use.

Any attempts to alter information, or any other action which may cause damage and put the integrity of the system at risk, are strictly prohibited in accordance with current legislation. The user undertakes to scrupulously comply with applicable legislation, particularly with regard to IT crime and intellectual property rights, and is solely responsible for the infringement of these regulations.

Data Protection Officer
GESBA has appointed a Data Protection Officer, who can be contacted via email at protecaodedados@gesba.pt, or by registered letter with acknowledgement of receipt at Rua de Santa Rita, n.º 56, 9000-238, Funchal.

Privacy
GESBA respects your right to privacy. Data are requested for the purposes of the provision of the service requested by you, with personal data that are not necessary for the provision of the service not being collected and with no data collected without your consent.

Interaction with the services, portals and sites of GESBA does not require information from the user, except when, for purposes expressly identified, their collection is declared to be necessary and is authorised by the user in accordance with the following terms.

Data Processor
As the data processor, GESBA:

• Ensures that the processing of users’ personal data is carried out within the scope of the purposes for which the data were collected or for ends compatible with those purposes;
• Collects, uses and keeps only that personal data which is necessary for the purpose in question;
• Does not transmit personal data for commercial purposes or advertising;
• Processes personal data for legally prescribed purposes or for the pursuit of services at your request.

Subcontractor
As a subcontractor, GESBA undertakes to comply with the agreements on privacy and processing of personal data contracted with the entities responsible for data processing.

Types of Personal Data we collect
The personal data subject to processing by GESBA are of a diverse nature, given the nature of the services provided on electronic platforms and other services under its management.

According to the type of services provided, the following may be collected: IP address, GPS location, name, gender, age, date and place of birth, tax identification number, civil identification number, social security number, identification document number, IBAN, NIFAP (beneficiary identification number in the IFAP information system), marital status, address, nationality, e-mail address, and mobile phone number.

Personal Data Security
In the pursuit of its activities, GESBA uses a set of technologies and security procedures appropriate for the protection of personal data, protecting these from unauthorised access or disclosure, namely:

• Physical security measures, such as access control for employees, collaborators and visitors to the headquarters and, on the Data Centre premises, very strict mechanisms for combating intrusion, extinguishing fires, 24×7 monitoring of equipment and hosting equipment in dedicated areas;
• Logical security measures in relation to access to systems and work posts through mechanisms for identification, authentication and privilege management; and in relation to the network with the use of firewalls and intrusion detection systems, segregating networks and application environments, as well as encrypting information through secure communication channels.

Access and control of your Personal Data
At your request, we provide access, rectification and erasure of personal data. You also have the right to object to the processing of your personal data.

If the use of your personal data is based on consent, you have the right to withdraw your consent, without jeopardising the validity of the data processing carried out up to that point.

Through our Data Protection Officer, who can be contacted via e-mail at protecaodedados@gesba.pt, or by registered letter with acknowledgement of receipt at Rua de Santa Rita, n.º 56, 9000-238, Funchal, you may request:

• Information about your data;
• Information about its processing;
• The purpose underlying the processing;
• The correction or updating of data;
• Your data in an open format;
• The erasure of data, without prejudice to the legislation applicable to the processing concerned.

Archiving of Personal Data
Your personal data are kept by GESBA for the period necessary for their processing, in accordance with the respective purpose.

The periods of conservation can be modified when justified by public interest, historical, scientific or statistical reasons, with GESBA committing to adopt the appropriate measures of conservation and security.

Cookies and Similar Technologies
GESBA uses cookies and other similar technologies on its websites to improve the performance and browsing experience of its users, increasing the speed and efficiency of response and eliminating the need to repeatedly enter the same information.

The use of cookies helps websites to recognise the user’s device on the next visit and is often essential for the operation of the same.

The cookies used by GESBA do not collect personal information that allows the user to be identified, saving only generic information, namely the form or region/city of access, among other data.

The cookies used on the websites and portals of GESBA are the following:

• Essential – necessary for navigation on GESBA’s website or portals, enabling or optimising the functionalities offered by the websites and improving the user’s navigation experience and guaranteeing access to private areas of the same, in order to allow the performance of services (session cookies).
• Analytical – necessary for the collection of information for statistical analysis of the navigation and use of the electronic site (Google).
• Third-party

Facebook, Twitter, YouTube, Instagram, Google Play, App Store and other websites managed by third parties may install cookies for content sharing purposes. The number and status of these cookies may depend on how you use the platforms in question before or during a visit to this website. It is useful to check what the cookies management policy of these websites is.

The information generated by the use of cookies may be sent to third parties for trend analysis, navigation and performance tracking, without, however, identifying any individual.

How to control the use of Cookies?
Users can prevent the use of cookies in their browser settings. By doing this, however, the use of some features or the performance of certain tools may be limited.

It is also possible to use browser extensions (browser add-ons) to disable the use of some functions. Google offers an extension for Google Analytics that allows you to disable its use. It is available at https://tools.google.com/dlpage/gaoptout/

How to manage Cookies in different browsers:

Google Chrome

By default, all cookies are allowed, but you can adjust this setting. Follow these steps: Click the Chrome menu in the browser toolbar.

1. Definitions;
2. Show advanced settings;
3. Under “Privacy”, click on Content settings;
4. Select “Block sites from setting data”.

To change your cookie settings, follow these steps:

1. Delete cookies;
2. Block cookies by default;
3. Allow cookies by default;
4. Keep cookies and website data by default until you close your browser;
5. Make exceptions for cookies from specific websites or domains.

Internet Explorer:

1. Select the “Tools” menu and the “Internet Options” option;
2. “Privacy” tab;
3. Move the bar to the top, where the message “Block all cookies” will appear.

Mozilla Firefox:

1. Select the “Tools” menu;
2. Select “Options”;
3. “Privacy”, which you will find on the top panel;
4. In the cookies section, disable the option “Accept cookies from sites”. Click “OK” to save the changes and close.

Safari:

1. Select “Edit”;
2. Click on “Preferences”;
3. In the top panel, select the “Privacy” icon;
4. In the “Accept cookies” section, select “Never”.

Disclaimer of Liability
GESBA cannot be held responsible for any losses or damages under civil liability (including, but not limited to, emergent damages, loss of profits and moral damages, caused directly or indirectly), arising as a result of the correct or incorrect use of its services, websites and their respective contents by the user, including undue access to the user’s computer and computer system by third parties.

The information disclosed must be seen as informative.

The services, websites and portals managed by GESBA feature contents and services provided by third parties, who are responsible for updating them.  GESBA thus cannot be held responsible with regard to the complete accuracy and updating of any information contained on its websites.

Websites may contain links to sites operated by third parties over which GESBA has no control and for which it assumes no responsibility.

Viewing the legal provisions on this site does not exempt the user from consultation of the legal regulations in force, officially approved and published in the original editions and media (namely, Diário da República or the Official Journal of the European Union).

Alterations to the security and privacy policy
These Terms and Conditions, which should be read carefully, may be altered, with alterations coming into force from the date of their publication on this site, with express reference to the date of updating.

Applicable Law and Competent Court
These Terms and Conditions shall be governed and interpreted in accordance with Portuguese law. The court of the area of Lisbon has jurisdiction, to the exclusion of any other, to settle any disputes arising from the interpretation and application of these Terms and Conditions.