Privacy policy

Apolónia considers the respect for the privacy of its customers, suppliers, candidates, and/or employees as one of its main priorities. In this regard, it commits to protecting the personal data it processes as part of its operations, with "personal data" understood as any information relating to an identified or identifiable natural person (the "data subject").

This Privacy Policy, applicable to customers, suppliers, candidates, and/or employees, describes who we are, for what purposes we may use your data, how we process it, with whom we may share it, how long we retain it, as well as the means by which you can contact us or exercise any of your rights.

1. Who Are We?

Your data will be processed by Apolónia Supermercados S.A., a legal entity with registration number 502442786, headquartered at Rua 5 de Outubro, 271, EN 125, 8135-100 Almancil (hereinafter referred to as "Apolónia" or "we").

Apolónia acts as the "data controller" (as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, regarding the protection of natural persons with regard to the processing of personal data and the free movement of such data – hereinafter, the "General Data Protection Regulation" or "GDPR") of the personal data of its customers, suppliers, candidates, and/or employees, as specified in this Policy.

2. For What Purposes Do We Process Your Data?

Apolónia will only process your personal data for the following purposes:

• Customer (and potential customer), supplier, and candidate and/or employee management

The processing of personal data is necessary for the performance of contracts to be entered into between customers, suppliers or candidates and/or employees and Apolónia, for carrying out pre-contractual steps at their request, as well as legal obligations towards any of these parties and data processing for better management. If they do not provide their data, we will not be able to offer our services or sell our products to our customers, nor will we be able to establish any business relationship with our suppliers or manage the labour area effectively and/or in compliance with legal obligations.

In particular, Apolónia processes the personal data of its customers in order to manage purchases, orders, or requests made to us, including the management of deliveries and returns, either in our physical stores or through our website.

Regarding our suppliers, we process their data for pre-contractual steps and to execute the contracts entered into with Apolónia.

Apolónia also processes the data of its employees or job applications in order to efficiently manage applications and legal obligations within the labour area, as well as to improve their interaction with our services, such as payroll processing or purchases with benefits.

We will retain your data only for the period necessary for the execution of the contracts entered into or to comply with the pre-contractual steps that justified the collection and subsequent processing of your data.

• Dispute management

The personal data of our customers, suppliers, and candidates and/or employees may also be processed by Apolónia for the purpose of managing disputes.

The legal basis for this processing is the legitimate interest of Apolónia (the defence of its rights and interests), with the data being retained only for the period necessary for the exercise of such rights.

• Marketing

Apolónia may process your data to obtain your opinion on articles, products, and services, particularly through surveys and tests, as well as to enable your participation in competitions, questionnaires, or other marketing initiatives. Apolónia may also process your data to allow you to benefit from the Apolónia loyalty programme, conduct statistical analyses, financial and commercial studies, and manage online traffic (e.g., measuring usage levels of Apolónia's website, applications, and digital platforms, as well as the relevance of available services, to optimise their use).

Your data may also be processed to send information, promotional communications, and advertisements from Apolónia and other Apolónia group entities, particularly regarding products, campaigns, and events that may be of interest to you.

These data processing activities will only be carried out after obtaining your consent, provided at the time of data collection or via an online form/voucher. If you consent, you will receive marketing communications via [email, post, telephone, SMS, Push message]. If you do not provide your personal data (name and email address), Apolónia will not be able to send you commercial communications. You may withdraw your consent at any time.

Apolónia will retain your personal data until you exercise your right to object.

• Complaint and contact management

You may contact us via email at sugestoes@apolonia.com or through the form available on our website www.apolonia.com to submit suggestions or complaints regarding Apolónia’s services. Your personal data will be processed based on Apolónia’s legitimate interest in improving its services and with your consent. Apolónia collects your data to analyse and address the issue underlying your suggestion or complaint.

Apolónia will retain your personal data only for the period strictly necessary to handle your suggestion or complaint.

• Recruitment

Apolónia collects candidate data through its recruitment webpage, email, in-person CV submission at stores or offices, or by completing an application form.

Your data will be retained for recruitment purposes for a maximum period of three years. After this period, applications will no longer be considered active, and data will be deleted.

The collected data may be shared with other companies within the Apolónia group for the same purpose.

• Security in our premises

For the protection of individuals and property, images are captured inside our premises using CCTV systems.

CCTV data will be retained for 30 days from the date of capture and then destroyed within a maximum of 48 hours.

3. What Personal Data Is Processed?

Depending on the purpose for which they are collected, your personal data may include your name, email address, tax identification number, contact details, CV, and/or the content of your interactions with us.

Regarding data collected through social media, each platform has its own privacy policy detailing how your personal data is used and shared. We recommend reviewing the privacy policies of the social networks you use to understand how your data will be processed.

4. Will your data be shared with third parties?

Your personal data may be processed:

• Within the Apolónia Group

The companies within the Apolónia group use the same IT infrastructure and provide services to one another. In this context, your personal data may be shared with the companies within the Apolónia group.

• By third-party subcontractors of Apolónia

Your personal data may be processed by subcontracted companies of Apolónia, including service providers for hosting, email services, information systems management, payment management, private security, logistics, marketing, and communications. Only the personal data strictly necessary for the provision of the service in question will be provided to these entities.

Apolónia may also need to share personal data of customers and/or suppliers and/or candidates and/or employees with the relevant public authorities, upon their request, in accordance with and within the limits established by law.

In any case, Apolónia takes responsibility for the processing of the personal data provided to us by our customers, suppliers, candidates, and/or employees, requiring third parties with whom we share this data to adopt appropriate security measures, in accordance with the provisions of the law.

5. Where Will Your Data Be Processed?

Personal data collected will be processed exclusively within the European Economic Area.

6. What rights do you have as a data subject?

At any time, you may request:

• Access to the personal data we hold about you;

• Rectification of your data if it is inaccurate or incomplete;

• Erasure or restriction of the processing of your personal data;

• If processing is based on your consent and carried out by automated means, you have the right to receive the personal data you previously provided in a structured, commonly used, and machine-readable format.

Your requests will be handled with special care to ensure the effectiveness of your rights. You may be asked to provide proof of your identity to ensure that the sharing of personal data is carried out exclusively with its rightful owner.

Please note that in certain cases (e.g., due to legal requirements), your request may not be immediately fulfilled. However, you will be informed of the measures taken in response within one month from the date of your request.

You also have the right to lodge a complaint with the National Data Protection Commission (CNPD).

7. Would you like to know more about your rights?

• Right of access

As the data subject, you have the right to obtain confirmation from Apolónia as to whether or not personal data concerning you is being processed and, if so, to access your personal data and the information provided by law.

If you require more than one copy of your personal data being processed, Apolónia may charge an administrative fee to cover the associated costs.

• Right to rectification

As the data subject, you have the right to obtain from Apolónia, without undue delay, the rectification of inaccurate or incomplete personal data concerning you.

• Right to erasure ("right to be forgotten”)

As the data subject, you have the right to obtain the erasure of your personal data from Apolónia without undue delay, and Apolónia is obliged to erase such data without undue delay where one of the following grounds applies:

a) The personal data is no longer necessary for the purpose for which it was collected or processed;

b) You have withdrawn your consent for data processing (where processing is based on consent) and there is no other legal basis for processing;

c) You object to the processing, and there are no overriding legitimate grounds for the processing.

• Right to restriction of processing

As the data subject, you have the right to obtain from Apolónia a restriction on the processing of your data where one of the following conditions applies:

a) You contest the accuracy of the personal data, for a period that allows Apolónia to verify its accuracy;

b) The data processing is lawful, but you object to the erasure of the personal data and request instead the restriction of its use;

c) Apolónia no longer requires the personal data for processing purposes, but the data is required by you for the establishment, exercise, or defence of legal claims;

d) You have objected to processing, pending verification of whether the legitimate grounds of the controller override those of the data subject.

• Right to data portability

If processing is based on your consent and carried out by automated means, you have the right to receive the personal data concerning you that you have provided to Apolónia in a structured, commonly used, and machine-readable format.

• Right to object

If data processing is carried out:

a) on the basis of Apolónia's legitimate interests; or

b) for direct marketing purposes (including profiling),

You may, at any time, object to the processing of your data.

8. Can previously given consent be withdrawn?

If consent is legally required for the processing of personal data, you have the right to withdraw your consent at any time. However, this does not affect the lawfulness of processing based on consent given before its withdrawal, nor does it prevent further processing of the same data if based on another legal ground, such as contract performance or a legal obligation to which Apolónia is subject.

If you wish to withdraw your consent, you can contact us at prot.dados@apolonia.com.

9. Do you have any questions?

If you have any questions regarding the processing of your personal data or wish to exercise any of your rights, you can contact us at prot.dados@apolonia.com.

10. Changes to this Policy

Apolónia may occasionally update this Privacy Policy. The effective date of the revised version (which is in force at any given time) is stated at the end of this document.

We encourage you to review the Privacy Policy periodically to stay informed.

Last updated: March 2025