Privacy Policy | Never End Wish |N.E.W.|

Privacy Policy Evenirex Lda, Owner of the Never End Wish Brand

January 2024 Version

We are committed to protecting your privacy by ensuring the processing of your personal data in compliance with applicable legal provisions on data protection.[1]

To this end, we recommend reading this Privacy Policy and its updates. In the event of changes to the Privacy Policy, the date of the last modification, available at the top of this page, is also updated.

This policy covers:

Data Controller
What personal data is collected and processed
How personal data is obtained
How personal data is used
Legal basis for using personal data
How long we retain personal data
Who we share personal data with
How we protect personal data
Countries we transfer personal data to
Your rights regarding your personal data

Data Controller

The entity responsible for the collection and processing of your personal data will be Evenirex Lda, located at Av. da Liberdade, No. 110, 1st floor, 1269-046, Lisbon, with NIPC number 517 993 392, which provides services in the organization of events (CAE 82300) and decides on the data collected, means of processing, and purposes for which your data is used.

If you have any questions about how we process the personal data you have provided to us, need clarification on this document, or wish to exercise any of the rights mentioned herein, please contact us via email at Evenirex@gmail.com or alternatively, write to us at:

Avenida da Liberdade, No. 110, 1st floor

1269-046 Lisbon, Portugal

Evenirex Lda would also like to inform you that a Data Privacy Officer has been appointed, who will be responsible, among other functions, for (i) monitoring compliance with applicable data processing regulations, (ii) acting as a point of contact with data subjects regarding questions about the processing of their data by Evenirex Lda, (iii) cooperating with the National Data Protection Commission (hereinafter referred to as “CNPD”), and (iv) providing information and advice to Evenirex Lda regarding its obligations in terms of privacy and data protection.

If you wish to contact our Data Privacy Officer, please send a written communication to the contact details provided in this policy.

What personal data is collected and processed

“Personal data” refers to any information, of any nature and on any support, relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, for example by name, identification number, location data, electronic identifier, or other factors specific to their physical, physiological, genetic, economic, cultural, or social identity.

We may collect your personal data during the provision of our services, through the use of our website, when contacting or requesting information about Evenirex Lda or Never End Wish, or as a result of contacts you may have with our employees or clients.

Personal data processed by Evenirex Lda includes:

Identification data, such as your name (including prefix or title), your company, title or position, and your connection to a specific person;
Contact information, such as postal address, email address, and phone numbers;
Financial information, such as tax identification number or payment methods;
Technical information, such as data about your visits to our website or regarding materials and communications sent by Evenirex Lda or its registered trademark Never End Wish electronically;
Data provided for scheduling meetings or attendance at events, including accessibility restrictions and dietary restrictions;
Background provided by you or gathered as part of the client acceptance process, including financial, administrative, and marketing details of businesses;
Personal data obtained by Evenirex Lda on its own behalf or generated by our clients in the course of providing our services, including special categories of data;
Data obtained through the use of our website, including cookies; and
Any other data you may provide us with.

How we obtain personal data

We may collect your data as part of the process of contracting our services, extending to third parties as necessary during the provision of services at our events. Through our IT tools and applications, including our website and electronic communications sent to Evenirex Lda and Never End Wish. When you provide them to us, or interact directly with us, such as through contacts with our employees, or through social networks. And through other means and sources, such as through the use of publicly available sources of information to keep your data updated.

How we use your personal data

Evenirex Lda collects and processes your personal data in various ways, including through the use of our website and our services. We use your data:

To provide our services, which may include processing personal data of third parties on behalf of our clients;
To provide information you request from us;
In promoting our services, by sending news and publications and/or newsletters;
In promoting events organized or co-organized by Evenirex Lda through its Never End Wish brand;
To manage and direct our relationship with you;
To comply with tax legislation and anti-money laundering and terrorist financing legislation, as well as for conflict checks;
To fulfill our legal, regulatory, and risk management obligations, including exercising rights or defending legal claims;
To provide and improve our website, including auditing and monitoring its use;
For recruitment purposes.

Legal basis for using your personal data

We use your personal data lawfully, fairly, and transparently, with the following bases:

With your consent, in writing, orally, or through validation of an option, provided it is freely given, informed, specific, and unequivocal;
In pre-contractual measures or in the performance of contractual obligations, including the provision of legal services;
To comply with legal and regulatory obligations;
For legitimate business purposes. Please refer to “How personal data is used” for more details.

The provision of your personal data is entirely voluntary, but mandatory for the provision of our services.

How long we retain personal data

Evenirex Lda processes and retains your personal data according to the purposes for which it is processed or whenever there is a specific legal and/or regulatory obligation to retain it.

For example, there are cases where the law requires data to be processed and retained for a minimum period, such as (i) 10 years for data necessary for Tax Authority information for accounting or tax purposes or data relating to commercial registration; (ii) 7 years for anti-money laundering and terrorist financing purposes; (iii) 30 days for image recordings.

Similarly, Evenirex Lda will retain data according to prescription periods for judicial actions.

Once the maximum retention period has been reached, your personal data will be irreversibly anonymized (where anonymized data may be retained) or securely destroyed.

Who we share your personal data with

We may share your personal data with third parties in accordance with current contractual and legal provisions, including:

Competent government and judicial authorities, such as Courts or the Tax Authority;
Our professional consultants and auditors;
Suppliers with whom Evenirex Lda contracts certain support services, such as word processing, translations, copies, document reviews;
IT service providers;
Third parties involved in the course of services we provide to clients and with their prior consent, such as lawyers, enforcement agents, local consultants, and others;
Entities involved in organizing events or seminars or co-hosts thereof.

When your data is transmitted to subcontractors, Evenirex Lda will take the necessary contractual measures to ensure that subcontractors respect and protect your personal data, using only subcontractors who provide sufficient guarantees of implementing adequate technical and organizational measures for this purpose.

When necessary or for reasons stated in this policy, personal data may also be shared with regulatory authorities, courts, and official entities. While unlikely, we may be required to disclose your data to comply with legal requirements. We will make reasonable efforts to notify you before such disclosure, unless legally prohibited from doing so.

If in the future we reorganize or transfer all or part of our business, we may need to transfer your personal data to new entities affiliated with Evenirex Lda or to third parties through which Evenirex Lda’s services will be provided.

Evenirex Lda may use social networks such as Facebook, Instagram, TikTok, LinkedIn, Twitter, among others. If you are a user of these services, you should review their privacy policies for more information on how they handle your personal data.

Evenirex Lda DOES NOT SELL, RENT, OR COMMERCIALIZE PERSONAL DATA TO THIRD PARTIES.

How we protect your personal data

We use a variety of technical and organizational security measures to help protect your personal data against destruction, loss, alteration, unauthorized disclosure, and access, in accordance with applicable data protection laws.

Countries we transfer your personal data to

To provide our services, it may be necessary to transfer your personal data to locations outside Portugal.

Therefore, Evenirex Lda may need to transfer your personal data to a third country outside the European Economic Area (“EEA”) and not included in the list of countries that the European Commission has already considered to have adequate levels of personal data protection. In such cases, Evenirex Lda will ensure that data transfers are carried out in strict compliance with applicable legal standards, including Chapter V of the GDPR.

Your rights regarding your personal data

As the data subject whose data is processed by Evenirex Lda, you can, at any time and within legal limits, exercise the following rights by sending a written communication to Evenirex Lda at evenirex@gmail.com:

Right of Access – right to obtain confirmation of what your personal data is being processed and information about it, such as the purposes of processing, retention periods, among others;
Right to Rectification – right to request the rectification of your inaccurate personal data or the completion of incomplete data;
Right to Erasure (“Right to be Forgotten”) – right to obtain the deletion of your personal data, provided that there are no valid grounds for its retention, such as compliance with legal obligations;
Right to Restriction of Processing – right to request restriction of the processing of your personal data, in particular, to oppose its processing;
Right to Portability – right to receive your personal data in a structured, commonly used, and machine-readable format, and to transmit it to another data controller;
Right to Object – right to object to the processing of your personal data, unless there are compelling legitimate grounds for processing that prevail over your interests, rights, and freedoms, or for the purposes of declaring, exercising, or defending a right in a judicial process;
Right to Withdraw Consent – right to withdraw consent to the processing of personal data at any time, without compromising the lawfulness of processing based on consent previously given;
Right to Complain – right to lodge a complaint with the CNPD if you believe that the processing of your personal data violates the legislation in force at any given time.

Without prejudice to the possibility of exercising these rights before Evenirex Lda directly, the data subject may also contact the CNPD directly in the event that he believes that his rights are being violated, without prejudice to any other administrative or judicial resource.

This Privacy Policy was last updated in January 2024.