Privacy Policy

The Privacy Policy provides a framework for the processing of personal data collected by RHmais – Organização e Gestão de Recursos Humanos, S.A., with registered office at Praça de Alvalade, 6 – 12º, 1700-036 Lisbon, Tax Identification Number (NIPC) 501 859 764.


  1. Scope of Application

    This Policy applies to:

    • RHmais employees (permanent staff, interns and service providers)

    • Job applicants participating in recruitment processes

    • Clients and partners

    • Suppliers

    • External users accessing our website and digital platforms.


  1. Legal Grounds for Processing

    The processing of personal data by RHmais is based on the following legal grounds provided for in the GDPR:

    • Performance of a contract: when processing is necessary for the performance of employment or service provision contracts.

    • Compliance with a legal obligation: when processing is required by law or regulation.

    • Legitimate interest: for purposes related to the management of the company, provided that the fundamental rights and freedoms of the data subjects do not prevail.

    • Consent: when the data subject expressly authorises the processing for specific purposes.


  1. Company Obligations

    RHmais undertakes to:

    • Transparency: provide clear and accessible information about data processing.

    • Security: implement appropriate technical and organisational measures to protect data against loss, destruction, alteration or unauthorised access.

    • Data minimisation: collect only the data strictly necessary for the stated purposes.

    • Accountability: keep records of processing activities and demonstrate compliance with the GDPR.

    • Breach notification: notify the competent authorities and data subjects of any relevant personal data breach within the time limits established by the GDPR.

    • Guarantee of rights: ensure the exercise of data subjects’ rights, without undue costs or unjustified delays.


  1. Rights of Data Subjects

    Under the GDPR, data subjects have the right to:

    • Access: obtain confirmation as to whether their data are being processed and access the relevant information.

    • Rectification: correct inaccurate or incomplete data.

    • Erasure (“right to be forgotten”): request the deletion of their personal data, where applicable.

    • Restriction of processing: restrict processing in certain circumstances.

    • Portability: receive their data in a structured and interoperable format, and transmit them to another controller.

    • Objection: object to the processing of their data in specific cases.


  1. Data Retention

    Personal data will be retained only for the period necessary to fulfil the purposes for which they were collected, in accordance with the applicable legal retention periods.


  1. International Transfers

    RHmais does not transfer personal data outside the European Economic Area. Should such a need arise, the Company will ensure that such transfers comply with GDPR requirements, namely through the use of standard contractual clauses or other appropriate safeguards.


  1. Cookies and Digital Platforms

    The Company uses cookies and similar technologies on its digital platforms in order to:

    • Ensure the proper functioning of the website and applications.

    • Improve the browsing experience and personalise content.

    • Analyse usage patterns and access statistics.

    • Support marketing and communication campaigns, where consented to by the user.

    Users can manage their cookie preferences through their browser settings or via the options made available on the Company’s website. Consent for non-essential cookies will always be requested in a clear manner and may be withdrawn at any time.


  1. Contact

    To exercise their rights or for any questions related to data protection, data subjects may contact the Company’s Data Protection Officer (DPO) through the following contacts:

Praça de Alvalade, 6 -12º | 1700-036 Lisboa 

dadospessoais@gruporhmais.pt