Introduction

ACA attaches great importance to the protection of your personal data. We want you to feel informed and secure when responding to job advertisements and submitting unsolicited applications through this website.


We have implemented a set of organisational and technological measures to protect your personal data, namely to prevent loss, unauthorised or unlawful processing, and unauthorised access, whether occurring intentionally or accidentally. This statement sets out the safeguards implemented in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.


The application form associated with job advertisements and unsolicited applications allows candidates to submit a range of personal data, in addition to their curriculum vitae (CV) and any supporting documents (certificates) that may be attached.


Please read the following information carefully regarding the conditions under which your personal data are processed, in accordance with ACA’s Privacy Policy.

What types of personal data are processed?

The data entered by the candidate in the application form.
The CV and certificates attached by the candidate to the application form.

Who has access to your personal data?

Members of the Human Resources Department involved in the recruitment and selection process.
The manager of the department or company that requested the vacancy to be filled (internal client).
The internal client may be any company within the ACA Group.

What are the purposes of the processing?

Inclusion in ongoing recruitment and selection processes.

Management of applications for use in future recruitment processes.

Recruitment of employees for ACA Group companies.

What type of processing is carried out?

Review of candidates’ CVs.
Telephone contact to invite the candidate to attend an interview.
Storage of the CV in the Human Resources Department database, with restricted access.

Printing of the CV for use during the interview.


Note: Any subsequent processing activities are subject to the candidate’s consent declaration, issued at the beginning of the assessment process.

How long do we retain your personal data?

Until the conclusion of the recruitment and selection process, in the case of responses to job advertisements.
Until the candidate exercises the right to erasure, in the case of unsolicited applications.
Whenever a candidate who has responded to a job advertisement wishes their data to be considered for future recruitment processes, they must also submit an unsolicited application.

What measures are in place to protect your personal data?

Digital storage with restricted IT access.
Candidate consent declaration obtained at the beginning of the process.
Destruction of paper copies of CVs used during interviews.

Information, awareness-raising, and confidentiality obligations set out in ACA’s Code of Ethics and Disciplinary Regulations.

What are the rights of the data subject?

Right of Access: The data subject has the right to obtain confirmation as to whether or not personal data concerning them are being processed and, where that is the case, the right to access their personal data.


Right to Rectification: The data subject has the right to request the rectification of their personal data at any time and to have incomplete personal data completed, including by means of a supplementary statement.


Right to Erasure: The data subject has the right to obtain the erasure of their personal data at any time.


Right to Restriction of Processing: The data subject has the right to obtain restriction of the processing of their personal data under certain circumstances.


Right to Data Portability: The data subject has the right to receive the personal data concerning them that they have provided to ACA in a structured, commonly used, and machine-readable format, and to transmit those data to another controller.


Right to Object: The data subject has the right to object, at any time, to the processing of personal data concerning them, particularly where they consider that the processing may be carried out for purposes other than those for which the data were originally collected.


Right to Lodge a Complaint with a Supervisory Authority: The data subject may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD) or with another competent supervisory authority responsible for personal data protection matters. Contact details: Rua de São Bento, 148, R/C, 1200-821 Lisboa; Telephone: + 351 21 393 00 39; Fax: +351 213 976 832; e-mail: geral@cnpd.pt

Updates and Contact Details

Any updates to this Privacy Policy will be published on this website and incorporated into this Privacy Policy.

For any questions relating to this Privacy Policy and the protection of personal data, you may contact ACA’s Data Protection Officer by email at data.protection@grupo-aca.com, or in writing to: Avenida dos Descobrimentos, Edifício Las Vegas III, nº 63, 4760-011 Vila Nova de Famalicão.