GPDR | Organizado.

Competência Segurada – Gestão de Serviços, Lda
Organizado, Lda
Date: 15 of July 2025

This Privacy Policy explains how Organizado collects, uses, stores and protects the personal data of its Clients, Potential Clients, Website Users and other Data Subjects.

The protection of your privacy and your personal data is a priority for Organizado. We are committed to processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), Law No. 58/2019 of 8 August, and all other applicable legislation on the protection of personal data.

By using our website or requesting any of our services, you acknowledge that you have read and understood this Privacy Policy.

The Organizado brand operates through two legally distinct entities, each acting as an independent Data Controller within the scope of its respective activities.

Competência Segurada – Gestão de Serviços, Lda.

Registered Office:
Rua do Vigário Geral, 1C e 1D
9500-443 Fajã de Baixo
Ponta Delgada
Portugal

Tax Identification Number (NIF): 514558075

Insurance Agent registered with the Portuguese Insurance and Pension Funds Supervisory Authority (ASF) under registration number 417456724.

Credit Intermediary registered with the Bank of Portugal under registration number 0006353.

Organizado, Lda.

Registered Office:
Avenida dos Inventores, 1, 2.º Esquerdo
9560-421 Rosário
Lagoa
Portugal

Tax Identification Number (NIF): 518835723

Email:
geral@organizado.pt

Each company is solely responsible for the processing of personal data relating to the services it provides.

2. Personal Data Collected

Depending on the service requested, Organizado may collect and process the following categories of personal data:

Identification data (name, tax identification number, citizen card/passport, date of birth, nationality);
Contact details (address, telephone number, email address);
Financial and banking information;
Employment and professional information;
Information relating to insurance policies and claims;
Information required for credit intermediation;
Vehicle information;
Property information;
Health data, whenever strictly necessary for the arrangement of insurance products and always subject to the explicit consent of the Data Subject, where legally required;
Data resulting from communications with Organizado;
Technical data collected while browsing the website, including IP address, browser type, device information and cookies.

Only the personal data strictly necessary for the provision of the requested services will be collected.

3. Purposes of Processing and Legal Basis

Personal data shall be processed exclusively for the following purposes:

Management and performance of insurance mediation services;
Management and performance of credit intermediation services;
Provision of consultancy, administrative and other services provided by Organizado;
Compliance with legal and regulatory obligations;
Prevention of fraud, money laundering and terrorist financing;
Communication with Clients and management of requests;
Improvement of the quality of services provided;
Statistical analysis and internal management;
Direct marketing communications, whenever the Data Subject has given prior consent or where otherwise permitted by applicable law.

The processing of personal data is based on one or more of the following legal grounds:

Performance of a contract or implementation of pre-contractual measures;
Compliance with legal obligations;
Legitimate interests pursued by Organizado;
Consent of the Data Subject, whenever legally required.

4. Collection of Personal Data

Personal data may be collected through:

Forms available on the website;
Email communications;
Telephone contact;
In-person meetings at our stores or offices;
Insurance companies;
Credit institutions;
Public entities;
Publicly accessible sources, whenever legally permitted;
Other entities duly authorised by the Data Subject or by law.

Whenever personal data are not collected directly from the Data Subject, Organizado shall ensure that all applicable legal requirements are complied with.

5. Retention Period of Personal Data

Personal data shall be retained only for the period strictly necessary to fulfil the purposes for which they were collected or processed, without prejudice to any longer retention periods required by law.

As a general rule:

Data relating to insurance mediation shall be retained for the period required by the applicable legislation governing the insurance sector.
Data relating to credit intermediation shall be retained in accordance with the legal retention periods established by the Bank of Portugal and other applicable legislation.
Data processed for the fulfilment of legal obligations shall be retained for the legally prescribed periods.
Personal data processed on the basis of the Data Subject’s consent shall be retained until such consent is withdrawn or until the purpose for which the data were collected has been fulfilled.

Once the applicable retention period has expired, the personal data shall be securely deleted or anonymised, unless their continued retention is required by law or by a legitimate legal interest.

6. Disclosure of Personal Data

Organizado may disclose personal data to third parties whenever such disclosure is necessary for the provision of the requested services or for compliance with legal obligations.

Personal data may be disclosed, namely, to:

Insurance companies;
Credit institutions;
Public authorities, supervisory authorities and regulatory bodies;
Courts and judicial authorities;
External service providers acting on behalf of Organizado (Data Processors), namely providers of IT services, hosting services, cloud services, accounting, legal advisory services and document management services;
Other entities where required by law or expressly authorised by the Data Subject.

Whenever personal data are disclosed to third parties, Organizado shall ensure that appropriate contractual and technical safeguards are implemented in accordance with the GDPR.

Organizado shall not sell or commercially exploit the personal data of its Clients.

7. International Transfers of Personal Data

As a rule, Organizado processes personal data within the European Economic Area (EEA).

Should it become necessary to transfer personal data to a country outside the European Economic Area, Organizado shall ensure that such transfer takes place only where one of the legal mechanisms provided for under the GDPR applies, namely:

An adequacy decision adopted by the European Commission;
Standard Contractual Clauses approved by the European Commission;
Other appropriate safeguards provided for under the GDPR.

Organizado shall ensure that any international transfer of personal data provides a level of protection essentially equivalent to that guaranteed within the European Union.

8. Security Measures

Organizado adopts appropriate technical and organisational measures to ensure the security, confidentiality and integrity of personal data.

These measures include, among others:

Controlled access to information systems;
Authentication and access management mechanisms;
Encryption of data where appropriate;
Firewalls and security monitoring systems;
Regular backup procedures;
Malware protection systems;
Continuous monitoring of information systems;
Confidentiality obligations imposed on employees and service providers;
Ongoing review and improvement of security procedures.

Despite the adoption of appropriate security measures, no information system can guarantee absolute security. Organizado therefore undertakes to act diligently in preventing, detecting and responding to any personal data breach.

9. Rights of the Data Subject

Under the applicable data protection legislation, the Data Subject may exercise, at any time, the following rights:

Right of Access – to obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, access to those personal data.
Right to Rectification – to request the correction of inaccurate or incomplete personal data.
Right to Erasure (“Right to be Forgotten”) – to request the deletion of personal data where the legal requirements are met.
Right to Restriction of Processing – to request the restriction of the processing of personal data in the cases provided for by law.
Right to Data Portability – to receive the personal data provided in a structured, commonly used and machine-readable format, and to transmit those data to another data controller where technically feasible.
Right to Object – to object to the processing of personal data based on the legitimate interests of the Data Controller or for direct marketing purposes.
Right to Withdraw Consent – where the processing is based on consent, the Data Subject may withdraw that consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.

The exercise of these rights shall not affect the rights and freedoms of third parties or the fulfilment of legal obligations to which Organizado is subject.

10. Exercising Your Rights

The Data Subject may exercise any of the rights referred to above by submitting a written request to:

Organizado

Email: geral@organizado.pt

Organizado undertakes to respond to all requests within the time limits established under the General Data Protection Regulation and applicable legislation.

Where there are reasonable doubts as to the identity of the applicant, additional information may be requested in order to confirm the identity of the Data Subject before responding to the request.

11. Complaints

Without prejudice to any other administrative or judicial remedy, the Data Subject has the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data infringes the applicable data protection legislation.

In Portugal, the competent supervisory authority is:

National Data Protection Commission (CNPD)

Website:
https://www.cnpd.pt

12. Amendments to this Privacy Policy

Organizado reserves the right to amend this Privacy Policy at any time in order to ensure its compliance with applicable legislation or to reflect changes in the services provided.

Any amendments shall become effective from the date of their publication on the website.

Users are therefore encouraged to consult this Privacy Policy periodically.

Whenever the amendments are significant, Organizado may inform Users by appropriate means.

13. Contact Details

For any questions relating to this Privacy Policy or the processing of personal data, please contact:

Organizado

Email:
geral@organizado.pt

Website:
www.organizado.pt