This Privacy Policy describes a set of guidelines, rules, and principles observed by MermaidProperity Unip Lda (the "Watervliet") to ensure and guarantee compliance with data protection obligations and the protection of the rights of data subjects. Watervliet is committed to complying with its Privacy Policy regarding the processing of personal data in accordance with the General Data Protection Regulation, approved by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter abbreviated as "GDPR") and other applicable national or European legislation on data protection. To carry out its activities, Watervliet needs to collect and process personal data. Watervliet has developed (and continues to develop) all necessary efforts and, in particular, has conducted a detailed analysis of all its internal procedures to ensure compliance with applicable legislation and address the most relevant risks.

As the Data Controller, Watervliet guarantees that all personal data: a) Are obtained for specific, lawful, and clearly defined purposes, with data subjects having the right to question the purposes for which Watervliet collects and maintains their data; b) Are compatible with the purposes for which they were acquired; c) Are kept with appropriate security measures - implemented or to be implemented - to protect against unauthorized access or against alteration, destruction, or disclosure of any personal data; d) Are collected in a limited manner and kept only for the strictly necessary time, without collecting and/or processing excessive data.

This privacy policy applies to users of the watervliet.pt website. This Privacy Policy also includes the Cookie Policy stated in the Terms and Conditions of Use of the Website.

MermaidProsperity, Unip, Lda (the "Watervliet"), corporate entity 517168413, with registered office at Tv rebelo silva 11 3º, in Lisbon, is the entity responsible for the processing of personal data processed for the following purposes.

Watervliet obtains personal data directly from users and customers when they make a contact request directly on the website.

Watervliet processes the following personal data:

• Identification data (Name)
• Contact data (Email and telephone number)

PURPOSE - Use of personal data to respond to inquiries, contact requests, and/or others;

DATA TYPE - Identification data (Name); Contact data (Personal or professional email);

LEGAL BASIS - Legitimate Interest;

The personal data of users will only be processed by MermaidProsperity, Unip, Lda (the "Watervliet"), corporate entity 517168413, with registered office at Tv rebelo silva 11 3º, in Lisbon. In the case of suppliers who may be hired for technical maintenance purposes of the website, Watervliet contractually ensures and regularly verifies that its suppliers are reliable entities that offer adequate protection guarantees, and that no data is transmitted to them beyond what is necessary for the provision of the contracted service.

Watervliet ensures that personal data collected for the aforementioned purposes will not be transferred outside the European Union in the absence of an adequacy decision by the European Commission (Article 45 of the GDPR) or the establishment of adequate safeguards to ensure the security and protection of personal data, in this case, standard contractual clauses (Article 46 of the GDPR).

Fields marked with an asterisk (*) are mandatory. If users do not provide the requested information, it will not be possible to process the request.

Watervliet does not make any decisions that may significantly affect users based on automated processing of personal data. Decision-making processes always involve human intervention.

Watervliet retains personal data for a period that is considered necessary and sufficient for the purposes that motivated its collection and processing. The storage period of data varies according to the purpose for which the information is processed and in accordance with the legal requirements that necessitate its retention. Afterward, the data is deleted with appropriate technical and functional guarantees, as documented in each relevant process.

In accordance with applicable legislation, data subjects have the right to access, rectify, or delete their personal data, as well as to withdraw their consent when the processing of personal data is based on consent. In certain circumstances established by law, data subjects also have the right to request the restriction of their data processing, object to their treatment, exercise the right to erasure, and exercise their right to data portability. They also have the right not to be subject to solely automated individual decisions, when applicable. Data subjects can exercise their rights by sending an email to: info@watervliet.pt or by sending a registered letter with acknowledgment of receipt to MermaidProsperity, Unip, Lda, (Watervliet), Tv rebelo silva 11 3º, 1000 – 257, Lisbon, while providing proof of their identity. Watervliet has not appointed a Data Protection Officer as it is not mandatory given its activity and the quantity of personal data collected and processed. According to the provisions of the law, users can file a complaint regarding the processing of their personal data with the National Data Protection Commission.

Watervliet has the right to change this privacy policy at any time. When this occurs, Watervliet will update the date at the bottom of this page. Data subjects are advised to frequently check this page to stay informed about any changes to this policy.

Last updated: May 15, 2023, in Lisbon, by Watervliet.