THUNDER PLATEAU - PRIVACY POLICY
Our Privacy Policy describes how we collect and manage your personal data, how we use it, and how we comply with legal obligations to protect your privacy. Safeguarding your information is a top priority for us.
We invite you to review our privacy practices. For any questions, you can contact us by email at thunderplateau@gmail.com or by mail at Rua Bica do Sapato, No. 46, Segundo Andar, 1100-067, Lisbon.
While we strive to keep this Privacy Policy straightforward, if you encounter any unfamiliar terms or have any questions, please don’t hesitate to reach out to Thunder Plateau Unipessoal, S.A. for more information. This Privacy Policy may be modified periodically. To ensure you're up to date, visit this page, as all changes will be displayed here.
-
Who is responsible for collecting your personal data, and who oversees its management?
The responsibility for handling any personal data collected by T-PIC or provided to them lies with Thunder Plateau IT Consultancy, S.A., a public limited company, registered under legal person no. [insert number], with its registered office at Rua Bica do Sapato, No. 46 – 2º Andar, 1150-067 Lisbon. Contact details for the company can be found later in this Privacy Policy (hereinafter referred to as “Thunder Plateau” or “we”).
-
What methods are used to collect my personal data, and what specific data is gathered?
You are not obligated to provide Thunder Plateau with any personal data that may be requested (you can exercise your Right of Opposition at any time). However, if you choose not to do so, we may be unable to offer our services, process your application, or respond to any inquiries you may have.
Thunder Plateau collects personal data through various means, including when you subscribe to our newsletter, submit spontaneous applications, register for job fairs, participate in workshops and partnerships, provide references as a collaborator or ex-collaborator, sign a contract with us (employment, service provision, or other), complete customer forms, or communicate with our support teams.
If you are a candidate seeking job opportunities or relevant services, we need to process certain details about you. We only request information that is essential, such as your name, age, contact details, education, employment history, emergency contact, immigration status, financial details (if necessary for financial verification), and social security number. Additionally, you may choose to provide other relevant details. When legally appropriate, we may also collect information regarding criminal records or convictions.
For customers, we collect and use necessary information about you or your company’s employees to ensure smooth service delivery and maintain our contractual relationship. This may include personal data such as names, email addresses, job titles, and phone numbers of key personnel involved in service provision.
If you are a supplier, we require minimal personal information to facilitate operations. This includes contact details of specific individuals within your organization for communication purposes, as well as financial information, such as bank details, to process payments for services rendered. Any additional information shared voluntarily by your organization may also be retained.
By "suppliers," we refer to companies (including sole proprietors) and specialized service providers, such as independent contractors and freelancers, who offer services to Thunder Plateau. In certain cases, Thunder Plateau may subcontract customer services to third-party suppliers acting on our behalf. Freelancers, independent contractors, and supplier employees in this context are treated as candidates in terms of data protection. Accordingly, Thunder Plateau requires suppliers to inform their employees about relevant sections of this Privacy Policy (particularly those applicable to candidates).
Certain categories of personal data—such as those related to racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic or biometric data for identification, health status, sexual orientation, or life—are classified as "special categories of personal data" under the General Data Protection Regulation (GDPR). Thunder Plateau limits the collection and processing of such sensitive data, doing so only with explicit consent.
To enhance user experience and customize services, Thunder Plateau uses browser-based operations known as "cookies." These enable personalization of our website and services based on user preferences, optimizing future interactions. As part of this, we may collect data related to your browser settings, operating system, and geolocation. Additionally, while navigating the Thunder Plateau website, we may use analytical tools to measure session data, including page response times, download errors, visit duration, user interactions, and exit methods. Technical data may also be gathered to identify devices for fraud prevention and diagnostics.
-
Objectives and legal basis for processing your personal data.
The Objective and legal grounds for which Thunder Plateau processes your personal data depend on your role as a candidate, collaborator, or supplier.
If you are a candidate (including independent contractors, freelance professionals, or supplier associates), we may collect and process your personal data for the following reasons:
Talent Acquisition – Involves recruitment activities for service-based or back-office roles, including sourcing, selection, and engagement with current and prospective Thunder Plateau clients to identify job opportunities and placements. This also includes payroll processing and HR management.
Contract Management – Encompasses activities related to establishing contracts with Thunder Plateau and its partners, as well as facilitating communication with third parties involved in contractual arrangements (e.g., insurers, beneficiaries, intermediaries).
Service Optimization and Growth – Focuses on enhancing Thunder Plateau’s services, assessing operational efficiency, and processing data to identify future opportunities.
If you are a Partner or a customer, your personal data is collected and processed for the following purposes:
Contract Execution – Encompasses all necessary activities related to fulfilling the service provision contract, including payment processing.
Communications – Ensures effective contact regarding contractual matters.
Service Development and Improvement – Involves activities aimed at enhancing the services provided to or by Thunder Plateau, analyzing business operations, processing data for statistical and research purposes, and facilitating service offerings and support.
Legal Compliance – Ensures adherence to applicable legal and regulatory obligations.
Legal Protection – Under certain circumstances, assists in establishing, exercising, or defending legal claims.
Thunder Plateau may engage third parties and external service providers to operate on its behalf, including companies that manage and maintain the Thunder Plateau website, process payments, analyze data, provide customer services, support sponsors, and collaborate directly with Thunder Plateau’s business activities. As a result, these third parties may process your personal data in accordance with this Privacy Policy and applicable legal requirements.
When collecting your personal data for the purposes outlined in this Privacy Policy or any other relevant purpose, we will inform you either beforehand or at the time of collection. Where required, we will seek your consent to ensure lawful data processing. You also have the right to withdraw your consent at any time.
However, in certain cases, data processing may be legitimized by grounds other than consent, including:
When processing is necessary to enter into or fulfill a contract with you;
When processing is required to comply with legal obligations to which Thunder Plateau is subject;
When processing is based on Thunder Plateau’s legitimate interests, provided it does not override your rights, freedoms, or fundamental interests. In such cases, we ensure that a record of the justification is maintained, and you have the right to request this information;
When processing is essential for the establishment, exercise, or defense of legal claims.
- Protection of Your Personal Data.
Thunder Plateau takes all possible measures to ensure the confidentiality and security of your personal data, implementing robust safeguards to protect it from misuse, interference, loss, unauthorized access, modification, or disclosure.
Our security protocols include strict access controls, encryption, pseudonymization, and anonymization of personal data whenever feasible.
Access to your personal data is strictly limited to authorized personnel on a need-to-know basis and is always subject to stringent contractual confidentiality obligations when processed by third parties.
While data transmission over the internet or via websites cannot be entirely safeguarded against intrusions, Thunder Plateau and its service providers make every effort to implement and maintain physical, electronic, and procedural security measures in compliance with applicable data protection regulations.
- Duration of Personal Data Retention.
Thunder Plateau will store your data only for the duration required to fulfill the purpose for which it was collected.
Personal data obtained during recruitment processes will be retained for ten (10) years from the date of last contact with the candidate.
Similarly, personal data of our clients and customers will be maintained for a period of ten (10) years.
- Who will have access to your personal data?
Thunder Plateau is part of a business group, which means that your personal data may be shared with other companies within the group for the purpose of providing shared services and internal reporting.
With the candidate's consent, personal data may also be shared with affiliated companies in Portugal to match candidates with relevant job opportunities based on their skill set.
Additionally, your personal data may be shared with our clients for the purpose of providing technology consulting services.
As outlined in Section C of this Privacy Policy, your personal data may be shared with third-party service providers working on behalf of Thunder Plateau, including those currently contracted and any future partners.
In compliance with applicable laws, Thunder Plateau may also be required to disclose your data to authorities such as the Tax Administration, Social Security, and Work Conditions Authority, as well as to legal authorities when mandated by a court order.
- Global data transfers.
Thunder Plateau may share your personal data both internally and with third parties as specified in this Privacy Policy.
For data transfers outside the European Economic Area (EEA), Thunder Plateau will only send personal data to non-EEA countries when required for following instructions, fulfilling legal obligations, or working with agents and consultants who support our service management.
In the event of transferring personal data outside the EEA, Thunder Plateau guarantees that the data will be protected with the same level of security as it would be within the EEA. We will achieve this by implementing one of the following safeguards:
Transferring data to a non-EEA country with privacy laws that provide an adequate level of personal data protection, equivalent to EEA standards.
Entering into a contract with the external party to ensure they comply with EEA data protection standards.
Transferring data to entities with established international data transfer agreements, such as the EU-U.S. Privacy Shield, which ensures mutual privacy protections between the European Union and the United States.
- What rights do you possess?
As the holder of your personal data, you are entitled to a range of rights regarding how your data is processed, including:
Right to Object – You have the right to object, at any time, to the processing of your personal data based on your particular circumstances, as per the GDPR.
Right to Information – You are entitled to clear, concise, and easily accessible information about how your personal data is used and your rights related to it.
Right of Access – You have the right to access your personal data at any time.
Right to Rectification – You have the right to correct any inaccurate or incomplete personal data.
Right to Restriction – In specific cases, you have the right to restrict the processing of your personal data.
Right to Erasure – Under certain conditions, you have the right to request the deletion of your personal data without undue delay.
Right to Data Portability – You have the right to receive your personal data in a structured, commonly used, and machine-readable format, and to transfer it to another controller if applicable.
Right to Lodge a Complaint – You have the right to file a complaint with the data protection authority if you believe your personal data is being handled improperly. The relevant authority is the National Commission for Data Protection, located at Rua de São Bento, No. 148 – 3rd floor, 1200-821 Lisbon.
Right to Withdraw Consent – If the processing of your data is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to the withdrawal.
Right Not to Be Subject to Automated Decision-Making – You have the right not to be subjected to decisions based solely on automated processing that could have significant legal consequences or effects on you.
You can exercise these rights at any time by contacting Thunder Plateau using the contact information provided in this Privacy Policy.
- To ensure that your personal data is only shared with you, you may be asked to verify your identity.
Here are the contact details for Thunder Plateau
If you have any questions regarding this Privacy Policy, how we handle and use your personal data, or wish to file a complaint regarding a potential violation of privacy laws, please reach out to the responsible party for data handling via email at thunderplateau@gmail.com or via post at Rua Bica do Sapato 46, 2 Esq, 1170-005, Lisbon.
Thunder Plateau may update this Privacy Policy as necessary to incorporate feedback from data subjects, reflect any changes to our services, or comply with legal requirements.
If these updates result in significant changes to the Privacy Policy, affected data subjects will be notified accordingly, and consent may be sought when required.
Your satisfaction is our priority. Feel free to contact us with any inquiries you may have using the contact details provided.