top of page

Privacy Policy

PRIVACY POLICY

GREENPORT NRG, LDA

Last Updated: 15 September 2026

Greenport NRG, LDA (“Greenport”, “we”, “us” or “our”) is committed to protecting the privacy and personal data of users of its website.

Personal data is processed in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR), Portuguese Law No. 58/2019 of 8 August, and other applicable Portuguese and European Union data-protection and privacy legislation.

This Privacy Policy explains how Greenport collects, uses, stores, shares and protects personal data obtained through its website and related communications.

1. DATA CONTROLLER

The controller responsible for processing personal data is:

GREENPORT NRG, LDA
NIF/NIPC: 517 058 715
Avenida da Boavista, No. 3265, 5.1
4100-137 Porto
Portugal

Email: contact@greenport-nrg.pt
Data Protection Enquiries: contact@greenport-nrg.pt

Greenport NRG, LDA is a Portuguese Sociedade por Quotas. The corporate documentation supplied identifies the company, registered office and €50,000 share capital.

2. PERSONAL DATA WE MAY COLLECT

Depending on how you interact with the Website or Greenport, we may collect and process personal data including:

  • name and contact details;

  • email address and telephone number;

  • company, position and professional information;

  • information contained in enquiries or correspondence;

  • CVs, employment history, qualifications and other information submitted as part of a job application;

  • technical information such as IP address, browser type, device information and Website usage information; and

  • cookie and analytics information where permitted and, where required, after obtaining consent.

Greenport only collects personal data that is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

3. PURPOSES AND LEGAL BASES FOR PROCESSING

Greenport may process personal data for the following purposes:

Purpose

Legal Basis

Responding to enquiries and requests

Legitimate interests and/or steps taken at your request prior to entering into a contract

Managing customer, supplier and business relationships

Performance of a contract and/or legitimate interests

Business administration and correspondence

Legitimate interests

Website operation and security

Legitimate interests and, where applicable, legal obligations

Recruitment and assessment of job applications

Steps taken at the candidate's request prior to entering into a contract, legitimate interests and applicable legal obligations

Retaining CVs for consideration for future vacancies

Consent, where required

Non-essential analytics and similar cookies

Consent

Compliance with legal, regulatory, accounting or tax requirements

Compliance with a legal obligation

Consent is only used where it is an appropriate legal basis. CNPD expressly notes that consent is only one of several GDPR legal bases and, for example, processing necessary to perform a contract will generally be based on contractual necessity rather than consent.

Where Greenport relies upon legitimate interests, it will consider those interests against the rights, freedoms and reasonable expectations of the individual concerned.

4. CONTACT FORMS AND BUSINESS ENQUIRIES

Where you contact Greenport through the Website, by email or through another communication channel, we may process the information you provide in order to:

  • respond to your enquiry;

  • provide requested information;

  • evaluate a potential commercial relationship;

  • prepare or perform a contract; or

  • maintain appropriate business records.

Fields identified as mandatory are required where Greenport cannot reasonably process or respond to the request without that information.

Personal data should not be provided where it is unnecessary for the purpose of the communication.

5. RECRUITMENT AND JOB APPLICATIONS

Where an individual submits a CV or employment application, Greenport may process the information provided for the purpose of assessing the candidate for the relevant position.

This may include identity and contact information, professional experience, education, qualifications and other information voluntarily provided by the candidate.

Information relating to a particular recruitment process will be retained only for as long as reasonably necessary for that recruitment process and for any subsequent period required to comply with legal obligations or establish, exercise or defend legal claims.

Where Greenport wishes to retain an unsuccessful candidate's information for consideration for future vacancies, consent will be requested where required.

Where such processing is based on consent, the candidate may withdraw that consent at any time.

6. DATA RETENTION

Greenport retains personal data only for as long as necessary for the purpose for which it was collected, taking into account applicable legal, contractual, accounting, tax and regulatory requirements.

In determining appropriate retention periods, Greenport considers:

  • the purpose for which the information was collected;

  • the nature and sensitivity of the information;

  • applicable statutory retention periods;

  • potential legal claims; and

  • whether continued retention is necessary.

Personal data will be securely deleted or anonymised when it is no longer required, unless continued retention is required by law.

The GDPR principle of storage limitation requires personal data not to be retained longer than necessary for the relevant purpose. CNPD also recognises that erasure is generally available when data is no longer necessary and no legal rule requires continued retention.

7. DATA RECIPIENTS AND SERVICE PROVIDERS

Greenport may disclose personal data where necessary to carefully selected third parties, including:

  • IT, hosting and cloud-service providers;

  • professional advisers, including lawyers, accountants and auditors;

  • recruitment or human-resources service providers where applicable;

  • companies providing technical support to Greenport;

  • competent public, judicial, tax or regulatory authorities where disclosure is required by law; and

  • other service providers processing personal data on Greenport's behalf.

Where a third party acts as a processor on behalf of Greenport, appropriate contractual and data-protection arrangements will be maintained as required by the GDPR.

Greenport does not sell personal data to third parties.

8. INTERNATIONAL DATA TRANSFERS

Some technology, cloud, communications or other service providers used by Greenport may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, Greenport will ensure that an appropriate legal transfer mechanism is in place as required by the GDPR.

Depending on the recipient and destination, these safeguards may include:

  • an adequacy decision adopted by the European Commission;

  • European Commission-approved Standard Contractual Clauses;

  • the EU-U.S. Data Privacy Framework where applicable to an eligible participating organisation; or

  • another transfer mechanism permitted under applicable EU data-protection law.

Where required, Greenport will also implement supplementary safeguards appropriate to the circumstances of the transfer.

Information regarding applicable safeguards may be requested by contacting contact@greenport-nrg.pt.

9. COOKIES AND WEBSITE TECHNOLOGIES

The Website may use cookies and similar technologies for functionality, security, preferences, statistics and analytics.

Cookies that are strictly necessary for the operation or security of the Website may be used without consent where legally permitted.

Non-essential cookies, including analytics cookies, will only be activated after obtaining the user's consent where consent is required by applicable law.

Users must be able to accept or reject non-essential cookies and manage their preferences through the Website's cookie-management mechanism.

The Portuguese CNPD specifically states that website operators are responsible for cookies placed through their websites and that consent is required where applicable, including for analytics cookies under Article 5 of Portuguese Law No. 41/2004.

Further information regarding the cookies used, their purposes, providers and retention periods should be provided in Greenport's Cookie Policy.

10. DIRECT MARKETING

Where Greenport sends electronic direct-marketing communications to individuals, it will do so only where permitted under applicable law.

Where consent is required, marketing communications will only be sent after appropriate consent has been obtained.

Recipients may withdraw their consent or unsubscribe from marketing communications at any time, free of charge.

Portuguese rules concerning unsolicited electronic marketing require prior express consent in relevant circumstances and require recipients to have a clear and easy method of refusing further communications.

11. YOUR DATA-PROTECTION RIGHTS

Subject to the conditions and limitations established by the GDPR, individuals may have the right to:

  • Access their personal data;

  • Rectify inaccurate or incomplete personal data;

  • Erase personal data (“right to be forgotten”);

  • Restrict processing;

  • Object to processing;

  • Data portability, where applicable;

  • Withdraw consent at any time where processing is based upon consent; and

  • Lodge a complaint with the competent supervisory authority.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

CNPD confirms these core GDPR rights and also notes that individuals may obtain information concerning recipients, retention periods, automated decision-making and safeguards applying to international transfers.

Requests concerning these rights may be submitted to:

contact@greenport-nrg.com

Greenport will respond to valid requests within the time periods prescribed by applicable data-protection law.

Greenport may request reasonable information to verify the identity of the person making the request before releasing or modifying personal information.

12. RIGHT TO COMPLAIN

Individuals have the right to lodge a complaint concerning the processing of their personal data with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados – CNPD
Av. D. Carlos I, 134 – 1.º
1200-651 Lisboa
Portugal

Telephone: +351 213 928 400
Email: geral@cnpd.pt

The CNPD is Portugal's national supervisory authority responsible for monitoring compliance with the GDPR, Portuguese Law No. 58/2019 and other applicable Portuguese data-protection legislation.

13. DATA SECURITY

Greenport implements appropriate technical and organisational measures designed to protect personal data against:

  • accidental or unlawful destruction;

  • loss or alteration;

  • unauthorised disclosure;

  • unauthorised access; and

  • other unlawful forms of processing.

Appropriate measures may include access controls, secure systems, encryption, password protection, backups and secure transmission technologies.

However, no Internet transmission or electronic storage system can be guaranteed to be completely secure.

14. AUTOMATED DECISION-MAKING AND PROFILING

Greenport does not currently use personal data collected through the Website for automated decision-making, including profiling, that produces legal effects concerning individuals or similarly significantly affects them.

Should this change, Greenport will provide the information and safeguards required under applicable data-protection law.

15. THIRD-PARTY WEBSITES

The Website may contain links to third-party websites.

Greenport is not responsible for the privacy practices, security or content of independent third-party websites. Users should review the privacy policies of those websites before providing personal information.

16. CHANGES TO THIS PRIVACY POLICY

Greenport may update this Privacy Policy from time to time to reflect changes in its activities, Website, technology, service providers or applicable legal requirements.

The latest version will be published on the Website together with the date of the most recent update.

Where a material change affects processing based on consent, Greenport will obtain new consent where required by applicable law.

17. CONTACT

Questions concerning this Privacy Policy or Greenport's processing of personal data may be directed to:

GREENPORT NRG, LDA
NIF/NIPC: 517 058 715
Avenida da Boavista, No. 3265, 5.1
4100-137 Porto
Portugal

Email: contact@greenport-nrg.pt

bottom of page