HMR Health Market Research International, SA (referred to “HMR”), with VAT number 514.190.094 and headquarters at Travessa de Santa Catarina, 8, 1200-403 Lisbon (Portugal) is the data controller regarding the processing of your personal data.
HMR has also appointed a Data Protection Officer, who can be contacted by email at firstname.lastname@example.org.
Personal data are any information relating to an identified or identifiable individual person.
An identifiable person is one who can be identified, directly or indirectly, by reference to an identification number or one or more factors specific to their physical, physiological, mental, economic, cultural, or social identity.
Some examples of the personal data that HMR collects are “e-mail address”, when you contact us, or your “IP address”, when you visit us.
HMR will use your personal data for the following purposes:
- To carry out the selection and recruitment process for the job opportunity you have applied for;
- To respond to your requests for contact and information;
- To develop HMR commercial activities;
- To secure information systems and prevent fraud; and
- To manage and operate HMR website.
The personal data processing operations are carried out in accordance with the applicable legislation and best practices.
Your personal data will not be reused for other purposes that have not been previously identified or that are unrelated to the purposes for which they were initially collected.
The personal data that HMR processes has specific legal basis, depending on the purposes for which it is intended.
|Purpose||To carry out the selection and recruitment process for the job opportunity you have applied for.|
|Legal basis||Steps prior to entering a contract|
|Purpose||To respond to your requests for contact and information|
|Legal basis||HMR legitimate interests|
|Legitimate interest description||It is in HMR’s interest to respond to your requests for contact and information made through the contact form or through direct email|
|Purpose||To develop HMR commercial activities|
|Legal basis||HMR legitimate interests|
|Legitimate interest description||It is in HMR’s interest, when you contact us, to present you the services that may be most suitable for you|
|Purpose||To secure information systems and prevent fraud|
|Legal basis||HMR legitimate interests|
|Legitimate interest description||It is in HMR’s interest to ensure that the website is used safely by its users, therefore some security measures may be applied to guarantee an adequate level of security.|
|Purpose||To manage and operate HMR website|
|Legal basis||HMR legitimate interests and consent (for cookies)|
|Legitimate interest description||It is in HMR’s interest to carry out audits, analysis and revision of permissions, implement technical and support measures in order to better manage the website|
The personal data that HMR will collect and process are those that are necessary and appropriate for the purposes indicated:
|Processing purposes||Personal data|
|To carry out the selection and recruitment process for the job opportunity you have applied for||Name, phone number, e-mail address, personal url, data included in the curriculum vitae, data included in cover letter, other data collected during interviews.|
|To respond to your requests for contact and information||Name, job title, company, e-mail|
|To develop HMR commercial activities||Name, job title, company, e-mail address|
|To secure information systems and prevent fraud||IP address and Cookie data|
|To manage and operate HMR website||Cookie data|
HMR collects your personal data through:
- Forms you fill in on the website, namely the contact us form and the job application form;
- Emails you may send us requesting any information;
- Your activity on the website;
- The communication and interaction that the website makes with your equipment, namely through cookies installed on your equipment.
HMR undertakes to collect and process your personal data in accordance with the law and in a legitimate manner.
This website is not intended for minors, and no personal data of minors will be processed intentionally.
Cookies, by definition, are small pieces of information, that collects and storages information on your equipment through your browser.
There are cookies that are strictly necessary for the website operation, for example, to:
- Identify and authenticate the user; or
- Remember your habitual preferences; or
- Allow you to complete tasks without having to re-enter information (e.g., when changing pages or returning, as in the case of form data, shopping cart, etc); or
- Carry out, enable, facilitate, or support communications from/through the website; or
- Provide certain functionalities that you have requested; or
- Ensure the security of information systems and/or fraud prevention.
These cookies will be stored on your device and do not require your consent.
Cookies may also be used to collect information, for example:
- Measure and obtain statistics of the use of the website, for example, number of unique visitors, detect search engine keywords, detect specific aspects of navigation such as duration of visit, most visited pages, or most accessed contents (analytics cookies); or
- Adapt advertising and marketing based on your behaviour and profile, by adapting the advertisements to be displayed (tracking cookies, advertising, analytics); or
- Third parties other than HMR, which collect your browsing information across different websites to create such profiles (third party cookies)
The storage of these tracking, advertising, analytics, and third-party cookies will always depend on your previous acceptance and consent, that can be withdrawn at any time through specific tools and/or your browser.
Similar to cookies, pixels tags, web beacons and other similar technologies are images and/or pieces of code that are loaded when a you visit a website, webpage or content, but also when you open an email.
These technologies contain an external link to a tool server and allows to track your behaviour, in order to obtain data for online marketing, analytics, but also retargeting marketing.
When you visit the target website, this operation is recorded in the log file of the tool server and may include several information about you, namely, the operating system, session duration or IP address.
The storage of this tools will always depend on your previous acceptance and consent, that can be withdrawn at any time through specific tools and/or your browser.
The following table describes and explains how these tools are used:
|Tracking, Advertising, Analytics and Third-Party cookies|
|moove_gdpr_popup||hmr.co.com||90 days||Save cookie settings|
|Tracking, Advertising, Analytics and Third-Party cookies|
|_gat_UA-182183332-1||hmr.co.com||10 minutes||Used to speed up requests to the server. Related to google analytics.|
|_gid||hmr.co.com||24 hours||Registers a unique ID to process data on visitor use of the site for statistical purposes. Related to google analytics.|
|_ga||hmr.co.com||90 days||Registers a unique ID to process data on your use of the site for statistical purposes. Related to google analytics.|
|_ga_D8QEC90XQD||hmr.co.com||90 days||Collects data on the number of times you visit the website, as well as the date of the first and last visits. Related to google analytics.|
You can withdraw your consent at any time through:
- The cookie management tool by adjusting and defining your preferences or to disable these cookies; or
- Using a blocking tool that can be used as an extension to your browser; or
- Your browser configurations, disabling cookies and other tools.
Your personal data are kept secure through the implementation of several technical and organisational security measures that aim to ensure the confidentiality, integrity and availability of processing operations, for example by guaranteeing that they can only be accessed by those who are duly authorised.
To protect your personal data, we only use data centre providers that offer us adequate and documented security measures, namely guarantees that your personal data are stored on servers that are kept in controlled environments with limited access and that offer guarantees of resilience.
Personal data is kept on servers that provide us with adequate security guarantees to protect personal data from unauthorised disclosure, loss, misuse, alteration, processing or access, as well as from any other form of unlawful processing.
Likewise, when you browse on the website, we protect your data with encryption, such as Transport Layer Security (TLS, asecurity protocol that protects communications through the internet).
Despite of these policies and procedures, no security system is 100% failsafe, so we remind you that you shall take certain precautions when browsing and using the website, particularly when browsing on public or shared networks.
When browsing public or shared networks, the network may be monitored, which could lead to the exposure of access credentials, personal data and other information.
Whenever possible, (i) you should use your own mobile internet or your workplace’s internal network, (i) alternatively, you should use VPN connections, (iii) you should only visit trustworthy websites protected with security protocols (HTTPS, SSL/TLS).
Your personal data will be kept for as long as necessary for the purposes for which they are intended, thus:
|Processing purposes||Storage/ Retention period|
|To carry out the selection and recruitment process for the job opportunity you have applied for||Without selection: your data will be kept for six (6) months after the end of the recruitment process.
With selection: your data will be kept for the duration of your employment contract, plus one (1) year after the end of the contract.
|To respond to your requests for contact and information||Until 12 months|
|To develop HMR commercial activities||Until 12 months|
|To secure information systems and prevent fraud||5 years (according to article 118 (1) (c) of the Portuguese Criminal Code)|
|To manage and operate HMR website||See section 9 about cookies|
If a specific or mandatory period is provided for by law, the data will be stored for that period.
Without prejudice to the periods indicated, personal data may be kept beyond those periods in the following situations:
- As long as the limitation period for rights related to that purpose has not elapsed; or
- For the purposes of the declaration, exercise or defence of HMR’s rights in legal proceedings;
- Pending the final judgement of any court decision in the event of litigation related to that purpose;
- for the fulfilment of orders from judicial authorities and/or criminal law enforcement agencies within the scope of duly identified judicial proceedings, in compliance with a reasoned order from the competent judicial authority;
- to comply with acts issued by administrative authorities and competent regulatory bodies within the scope of their powers and competences, namely duly identified and substantiated administrative proceedings.
In all other cases, personal data will be kept for no longer than the periods indicated above, which HMR deems necessary to fulfil the purposes indicated above.
At the end of the retention period, all personal data collected will be deleted or anonymised.
Considering GDPR, you have some rights regarding your personal data, listed below, which are exercised in accordance with and within the limits defined by legislation:
You have also the right to file a complaint with the supervisory authority.
12.1. RIGHT TO ACCESS INFORMATION
You can confirm if your personal data is being processed and, if applicable, the right to access your personal data.
12.2. RIGHT TO RETIFICATION
You have the right to request, at any time, the rectification of your personal data and also the right to have incomplete personal data completed.
12.3. RIGHT TO DATA ERASURE
You can request the erasure of your personal data when one of the reasons listed in the legislation applies.
12.4. RIGHT TO RESTRICT DATA PROCESSING
You have the right to limit the processing of your personal data by HMR, if the one of the reasons listed in the legislation applies.
12.5. RIGHT TO OBJECT DATA PROCESSING
You have the right to object, on grounds relating to their particular situation, at any time to the processing of personal data.
12.6. RIGHT TO DATA PORTABILITY
You have the right to receive the personal data concerning them and which they have provided to HMR in a structured, commonly used and machine-readable format and the right to transmit those data to another controller.
12.7. RIGHT TO WITHDRAW CONSENT
You have the right to withdraw consent previously provided for some processing activities.
12.8. RIGHT TO LODGE A COMPLAINT WITH THE SUPERVISORY AUTHORITY
The supervisory authority is the body responsible for overseeing the application of and compliance with data protection legislation. In Portugal, at the date of publication of this Policy, the supervisory authority is the National Data Protection Commission (CNPD).
If you realise that the use of your personal data violates the GDPR, you can contact the CNPD at www.cnpd.pt.
You can exercise your rights, following the procedures:
|Access, Rectification, Erasure, Restriction, Objection and Portability.||Regarding the selection and recruitment process you can contact us through email@example.com.
You can also contact us through firstname.lastname@example.org.
a. The cookie management tool by adjusting and defining your preferences or to disable these cookies; or
b. Using a blocking tool that can be used as an extension to your browser; or
c. Your browser configurations, disabling cookies and other tools.
|Lodge a complaint with the supervisory authority||If you realise that the use of your personal data violates the GDPR, you can contact the CNPD at www.cnpd.pt.|
HMR may sometimes use service providers within the scope of the website, namely for cloud hosting and website support and maintenance. These service providers may have access to some personal data.
HMR guarantees that the service providers who may have access to your personal data are credible and offers high guarantees of personal data protection and that they do not have access to personal data beyond what is necessary for the provision of the contracted service(s).
HMR may also communicate your personal data to the following entities:
- Companies that belongs to HMR corporate group;
- Legal representatives and courts, for declaration, exercise or defence of HMR legal claims; and
- Judicial authorities and/or criminal law enforcement agencies within the scope of a legal process, in compliance with a reasoned order from the competent judicial authority
The website www.hmr.co.com and its subsites may contain links to third party websites (e.g LinkedIn, when you click on the button “Follow Us”). HMR is not responsible for the privacy practices of such websites. Thus, HMR recommends that you read such third party websites privacy statements. HMR cannot be held responsible or liable for the content and activities of such websites.
By default, no data transfers will take place outside the European Union.
In the event of transfers of data to third countries outside the European Union, in particular when necessary for the purpose of providing services to HMR, the legal rules on transfers will be complied with, with respect to (i) the adequacy of the country of destination with regard to the protection of personal data and the requirements applicable to such transfers, or (ii) the existence of adequate guarantees to carry out such transfers, in particular standard contractual clauses approved by the European Commission and, if necessary, the implementation of supplementary measures to guarantee the proper protection of personal data.
The Website is not intended for minors under the age of thirteen (13) and we therefore request that minors do not provide us with personal data via the Website.
HMR would kindly request that you do not send or disclose to us any information relating to:
- Your physical or mental health;
- Your racial or ethnic origin, your political opinion, your religion or philosophical beliefs or trade union membership;
- Your genetic or biometric data; and
- Your sex life or sexual orientation
Lisbon (Portugal), 16.10.2023