1. Introduction

C.Inov, the company responsible for developing the GoTuk application, is committed to protecting users’ privacy and personal data. This Data Protection Policy outlines how personal data is collected, used, stored, and protected in compliance with the General Data Protection Regulation (GDPR).

2. Collected Personal Data

During the use of the GoTuk application, the following personal data may be collected and processed:

• Registration Information: Name, email address, phone number, password, and other details provided when creating an account.
• Usage Data: Information on how the user interacts with the application, such as interactions, usage time, and preferences.
• Location Data: If authorized, location data may be collected to enhance the user experience.
• Device Data: Device type, operating system, version, IP address, and device identifiers.
• Payment Data: Credit card information or other payment methods (processed through secure payment service providers).
• Other Data: Any other personal data voluntarily provided by the user, such as feedback or support requests.

3. Purposes of Data Processing

The data collected in the application is used for the following purposes:

• Creating and managing the user’s account;
• Providing and improving the services offered by the application;
• Personalizing the user experience based on preferences and behavior;
• Processing payments, when applicable;
• Sending notifications, updates, and communications related to the application;
• Analyzing and monitoring the performance and usage of the application;
• Complying with legal and regulatory obligations.

4. Legal Basis for Data Processing

The processing of personal data in the GoTuk application is based on the following legal grounds:

• Performance of a contract (necessary for the application’s operation);
• Consent (for data requiring explicit user consent, such as location and marketing);
• Compliance with legal obligations;
• Legitimate interest of the company in improving the application and preventing fraud.

5. Data Sharing

The user’s personal data will not be shared with third parties, except in the following cases:

• Service Providers: User data may be shared with third-party providers that help operate the application (e.g., hosting services, data analysis, payment processing).
• Legal Authorities: If required by law or competent authorities, the user’s data may be shared.
• Mergers or Acquisitions: In the event of a merger, sale, or asset transfer, the user’s data may be transferred as part of the company’s assets.

6. User Rights

Under the GDPR, users have the following rights concerning their personal data:

• Right of Access: Request a copy of the data held about them.
• Right to Rectification: Correct incomplete or inaccurate data.
• Right to Erasure (“Right to be Forgotten”): Request the deletion of personal data, except when retention is required for legal reasons.
• Right to Restrict Processing: Temporarily restrict the processing of user data under certain circumstances.
• Right to Object: Object to the processing of data for specific purposes, such as direct marketing.
• Right to Data Portability: Receive user data in a structured format and transfer it to another controller.

To exercise any of these rights, users should contact us via email at [email protected].

7. Data Security

Appropriate technical and organizational measures are implemented to ensure the security of users’ personal data against unauthorized access, loss, destruction, or improper disclosure. These measures include encryption, access control, and security monitoring.

8. Data Retention

User data will be retained only as long as necessary to fulfill the purposes described in this Policy unless a longer retention period is legally required or permitted.

9. Use of Cookies and Similar Technologies

The GoTuk application may use cookies and similar technologies to automatically collect information, such as browsing patterns, preferences, and device settings. Users can manage their cookie preferences in the application or device settings.

10. International Data Transfers

If user data is transferred outside the European Economic Area (EEA), we ensure that the transfer complies with applicable data protection laws and guarantees an adequate level of protection for personal data.

11. Changes to this Data Protection Policy

This Data Protection Policy may be updated periodically. Any significant changes will be notified through an update in the application or another appropriate communication channel. Users are advised to review this policy regularly.

12. Contact

For any questions regarding this Data Protection Policy or the processing of personal data, users can contact us via email at [email protected].

Address: Rua do Dondo, Lote 402, 5º Dto., 1800 – 107 Lisboa, Portugal.