Personal Data Protection Policy

Purpose And Personal Data Collected
Website navigation does not require registration. However, Jerónimo Martins may process your personal data to maintain quality of delivered service and effectively answer the user requests. Purposes for the personal data treatment are listed below:

• Newsletter Subscription
  When you subscribe “Be The Story” newsletter, Jerónimo Martins collects the necessary personal data in order to send you the newsletter, including email address. Personal data will be kept while it is necessary for the intended purpose, after which will be eliminated.
• Legitimate Interest
  In the context of its’ legitimate interest, and observing the rights of website users, Jerónimo Martins may process users’ personal data for the following purposes:
  i) fraud prevention and detection;
  ii) network security and information;
  iii) development and maintenance of the website;
  iv) provision of technical assistance.

Data Subject Rights And Exercise Of Rights
Under the legislation in force, data subjects are guaranteed the right to access, rectify and erase their personal data, to restrict and oppose their processing, as well as the right to data portability and processing restriction. Whenever the sole legal condition for the processing is the user’s consent, the latter may also withdraw previously given consent, at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

User may exercise any of the referred rights, within the limitation foreseen in the legislation, through the following contact: bethestory@jeronimo-martins.com.

The user also enjoys the right to lodge a complaint with the National Supervisory Authority (CNPD).

Security Measures
To ensure security of customers’ personal data, Jerónimo Martins has implemented the appropriate technical and organizational measures, for the processing activities above mentioned.

Communication Of Personal Data
Based on the type of personal data and dependent on the purpose, users’s personal data may be shared with third entities, fulfilling legal, regulatory and judicial obligations.

Personal data maybe be shared or accessed by Jerónimo Martins service providers, deemed necessary for the purposes described above, namely for the development, maintenance and hosting of computer systems, marketing and communications campaigns. Jerónimo Martins assures that it only resorts to service providers that present the guarantees of execution of technical and organisational measures necessary and adequate to protect their personal data. In this context, personal data collected may be transferred to entities located in third countries (outside the European Union), being ensured that appropriate legal and security measures are taken in accordance with the legislation in force.

Without prejudice to the situations expressly mentioned in this Policy, personal data collected will not be transferred to third parties without your consent.

Google Analytics
To the extent the user has this system active, this website uses the Google Analytics service, a web analytics service provided by Google, to better understand website usage and services. Google Analytics collects information such as the frequency with which users visit the website as well as other visited web pages. Google uses collected data to track and examine your use of websites, prepare reports on your activities, and share them with other Google services. Google may use the data collected on the websites to contextualize and customize the ads in its own ad network. IP anonymity has been activated on our website so that the IP address of Google users in the Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area is abbreviated in advance. Only in exceptional cases will the full IP address be sent to a Google server in the United States of America.Google’s ability to use and share information collected by Google Analytics about your visits to websites is governed by Google Analytics Terms of Use and Google’s Privacy Policy, which you should consult to clarify any questions associated with this service or to disable Google Analytics for your device.

Hotjar
This website uses Hotjar in order to better understand its users’ needs and to optimize the service and experience. Hotjar is a technology service that helps Jerónimo Martins better understand the users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables maintenance of the service based on user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor Jerónimo Martins will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link.You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of this website and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

Data Protection Officer
Jerónimo Martins has a Data Protection Officer, whom you may contact for any issues related to the processing of your personal data, by sending an email to dpo.portugal@jeronimo-martins.com.

Changes To Personal Data Protection Policy
Jerónimo Martins is entitled to change this personal data protection policy, at any moment in time. Any changes will be properly presented in this website.

Last update: 24 October 2018