Privacy Policy

AJSEG, Insurance Mediation, Ltd., with registered office at Rua das Figuras Populares n.º 29A, NIPC 514063785, acts as the entity responsible for the processing of personal data within the scope of its insurance mediation activity, in accordance with the General Data Protection Regulation (GDPR - Regulation (EU) 2016/679) and Law No. 58/2019, of August 8. This Policy describes how we collect, use, share and protect your personal data through our website ( www.ajseg.pt ), respecting the principles of transparency, minimization and limitation of purposes. Users are entitled to rights such as access, rectification, opposition and erasure of data.

Data Collected and Purposes

We collect essential personal data for the provision of insurance brokerage services, such as name, contact information, tax data, health data (for specific insurance policies), and financial information, processed based on consent, contract execution, or legal obligation. The purposes include insurance simulations, commercial proposals, customer management, and compliance with regulatory obligations of the ASF (Insurance and Pension Funds Supervisory Authority). We use cookies for navigation analysis and website improvement, with an option to opt out.

Data Sharing and Transfers

Data may be shared with partner insurance companies, subcontractors (e.g., IT, lawyers), and authorities (ASF, CNPD, tax authorities), always under confidentiality agreements and appropriate security measures. We do not carry out international data transfers without standard contractual clauses approved by the CNPD; data remains within the European Union. Third parties such as Google Analytics process anonymized data for statistical purposes only.

Rights of Data Subjects and Data Protection Officer

You can exercise your GDPR rights by contacting geral@ajseg.pt or our postal address, including access, portability and complaints to the CNPD ( www.cnpd.pt ). We have appointed a Data Protection Officer (DPO) to oversee compliance, accessible via epd@ajseg.pt . In the event of a data breach, we will notify the CNPD within 72 hours if there is a risk, and the data subjects if there is a high risk.

Storage Duration and Safety Measures

We retain data for the time necessary for the purposes (e.g., 10 years for tax obligations) or until consent is revoked, with subsequent anonymization. We apply technical and organizational measures such as encryption, firewalls, and employee training to ensure confidentiality and integrity.