Website Privacy Policy | MEO Institutional

Website Privacy Policy

Object

The MEO Group and its member companies are committed to guaranteeing the protection of personal data entrusted to them, ensuring its rigorous and transparent processing.

Therefore, as part of this commitment, the purpose of this privacy policy ("Policy") is to inform you of the way in which the personal data provided when using the website is processed https://institucional.meo.pt/ ("Website").

The provision of personal data in connection with the use of the Website implies knowledge and express acceptance of the provisions of this Policy. Users ("Users" or, in the singular, "User") should therefore read the Policy carefully and decide freely and voluntarily whether or not to use the Website.

The User hereby declares and warrants that he or she is of legal age and that the information provided in connection with his or her use of the Website is true, accurate, complete, and current, and the User is responsible for any discrepancies. Whenever the information provided pertains to a third party, the User warrants that he or she has informed that third party of the terms set forth in this Policy and has ensured that he or she has the legal authority to disclose the respective personal information.

We recommend that you read this Policy, along with the Cookie Policy, as well as the Privacy Policy for the MEO Group Whistleblower Channel.

1. Responsible for treatment

This Policy governs the processing of personal data collected in connection with the User’s interactions with MEO Portugal S.A., headquartered at Av. Fontes Pereira de Melo, No. 40, 1069-300 Lisbon, with corporate entity number 507690737 (“MEO Portugal”), in its capacity as the entity managing the Website, and as the entity responsible for the processing of personal data. MEO Portugal is responsible for determining what data to collect, the purposes for which it is used, and the processing methods to be applied, in accordance with the General Data Protection Regulation (“GDPR”) and other applicable legislation regarding the protection of personal data (“Data Protection Legislation”).

2. Processing and collection of personal data

The personal data we collect, as well as how it is collected, may vary depending on the nature of your interactions with the Website.

Access and browsing do not necessarily imply the provision of personal data. However, there are certain functionalities that require the provision of personal data (for example, if the User wishes to submit contact forms via the Website).

The Website may also include links to other websites that are not affiliated with MEO Portugal. 

These links are provided in good faith; MEO Portugal cannot be held liable for the collection and processing of personal data carried out through these websites and assumes no responsibility in this regard, particularly with respect to the accuracy of the information and features available on the websites.

2.1 Personal data processed within the scope of the Website

The Website offers various features and forms through which Users can contact the MEO Group, submit requests, inquiries, complaints, reports, allegations, applications, or other communications related to the activities and services described on the Website.

When using these forms, we may collect the personal data necessary to manage and process the submitted request, which may include, depending on the purpose in question, identification information, contact information, customer references, or other data strictly necessary to evaluate and respond to the request submitted.

Some of the requested information may be required, and such fields are clearly marked as such. Failure to provide the information marked as required may make it impossible to review, process, or respond to the submitted request.

The User may also attach documents or other supporting files to their submission, which may contain personal data. The provision of these items is optional, unless otherwise indicated on the respective form.

3. Purposes and grounds for processing

Personal data will be processed to manage, analyze, and respond to contacts, requests, inquiries, submissions, or other communications submitted through the Website, as well as to ensure the follow-up of such interactions. Depending on the nature of the request submitted, the processing may be necessary for the performance of a contract or to take pre-contractual steps at the data subject’s request, or it may be based on MEO Portugal’s legitimate interests in ensuring effective communication with Users and properly managing the matters submitted to it.

Personal data may also be processed in connection with the management of institutional, commercial, and contractual relationships with customers, suppliers, service providers, and other business partners, including for the purposes of evaluating, negotiating, entering into, performing, and monitoring contractual or pre-contractual relationships.

Whenever complaints are submitted through the mechanisms provided on the Website, personal data may be processed for the purposes of receiving, analyzing, investigating, managing, and following up on the reported situations, as well as for communicating with the respective complainants, based on compliance with applicable legal obligations and, where permissible, on the legitimate interests of MEO Portugal in preventing, detecting, and addressing irregularities or unlawful conduct.

To ensure the integrated management of the MEO Group’s activities, personal data may also be disclosed to other entities within the MEO Group for the purposes identified above and for internal administrative purposes, based on MEO Portugal’s legitimate interests in ensuring the efficient organization of its processes and services.

4. Retention of personal data

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected and processed, taking into account the nature of each request, communication, or interaction made through the Website, as well as the applicable legal, regulatory, or contractual time limits.

In particular, data processed in connection with contacts, requests for information, complaints, inquiries, reports, or other communications submitted through the Website will be retained for the period necessary for their analysis, management, and response, and may subsequently be retained for as long as necessary for the purposes of establishing, exercising, or defending rights in administrative, arbitration, or judicial proceedings.

Whenever processing is based on compliance with specific legal obligations, personal data will be retained for the legally applicable retention periods. In the case of processing subject to specific policies or conditions—including those related to the MEO Group’s Whistleblower Channel—different retention periods may apply, in accordance with the information provided in those contexts.

Once the applicable retention periods have expired, personal data will be securely deleted or anonymized, except when it must be retained to comply with a legal obligation or for the purpose of asserting, exercising, or defending a right in judicial, administrative, or similar proceedings.

5. Sharing personal data

In certain cases, personal data may be transferred to subcontractors, who process personal data on behalf of MEO Portugal and in accordance with its instructions (for example, IT service providers and website maintenance service providers), and who implement appropriate technical and organizational measures to ensure the protection of personal data.

MEO Portugal may also disclose personal data to other entities within the MEO Group when such disclosure is necessary to fulfill the purposes described in this Policy, as well as for internal administrative purposes and to ensure the integrated and efficient management of the MEO Group’s activities.

Finally, MEO Portugal may also disclose Users’ personal data to third parties, provided that such disclosure is made in compliance with a legal obligation, a court order, a decision by the National Data Protection Commission or another relevant supervisory authority, or to respond to requests from public or government authorities.

6. Data transfers to third countries

MEO Portugal has chosen to use servers located in the European Economic Area (“EEA”) to support and operate the Website, thereby ensuring that data processing takes place within the EEA.

However, exceptionally, the processing of data for the purposes indicated may involve its transfer to entities established in third countries, i.e. outside the EEA. Users' personal data will be transferred when there is an adequacy decision by the European Commission for a particular country or when the appropriate safeguards provided for in the GDPR are implemented, namely the conclusion of standard contractual data protection clauses adopted by the European Commission and the adoption of additional measures to ensure that personal data enjoy a level of protection essentially equivalent to that existing in the European Union. Exceptionally, data may also be transferred on the basis of the derogations provided for in Article 49 of the GDPR, such as the User's explicit consent to the transfer.

Browsing the Website may also involve the transfer of the User’s personal data—collected through cookies or similar tracking technologies—to third countries located outside the EEA (for example, to the United States of America).

For more information on the use of these cookies, please see our Cookie Policy.

To request more information about the safeguards adopted in data transfers, you can use the contacts indicated in section 10. "How you can contact us".

7. Cookies and similar technologies

The Website uses cookies and similar tracking technologies. For more information, please visit our Cookie Policy.

8. Security of personal data

MEO Portugal adheres to best practices in the area of security and personal data protection and, to that end, has implemented the necessary technical and organizational measures to ensure compliance with data protection laws at all times.

MEO Portugal makes every effort, in particular, to protect Users’ personal data against unauthorized access via the internet. To this end, it employs security systems, rules, and other procedures to ensure the protection of personal data and to prevent unauthorized access to the data, as well as its misuse, disclosure, loss, or destruction. For example, forms used to collect personal data require encrypted browser sessions, and all personal data is securely stored on MEO Portugal’s systems, which, in turn, are located in a MEO Portugal data center and are protected by all security measures that MEO Portugal deems essential for the protection of personal data.

Notwithstanding the security measures adopted, MEO Portugal warns that, since data travels over an open internet network, it is not possible to completely eliminate the risk of unauthorized access and use; therefore, the User must implement appropriate security measures when using the Website (namely, ensuring that they use a device and browser that are up to date with security patches and that these are properly configured and protected against malicious software, computer viruses, and worms, with an active firewall, antivirus, and anti-spyware software; verifying the authenticity of the websites they visit on the internet; and avoiding websites whose reputation they do not trust). Without these measures, the risk of personal data and passwords being accessed by unauthorized third parties is heightened.

If the User detects any defect, bug, or anomaly on the Website, the User must immediately report it to MEO Portugal and must not attempt to access commercial or sensitive information or the personal data of other Users, alter the Website’s features, or in any other way exploit the defect, bug, or anomaly to use the Website in an improper, unlawful, or unauthorized manner, or in a manner other than that intended or authorized by MEO Portugal.

9. Holders' rights

The data subject may exercise the rights listed below, in accordance with the law. To do so, please use the contact information provided in Section 10, “How to Contact Us.”

Without prejudice to any other administrative or judicial remedy, the data subject also has the right to lodge a complaint with the National Data Protection Commission or another competent supervisory authority under the terms of the law, if they consider that the processing of their data violates the provisions of the law in force.

Right of access

You have the right to obtain confirmation as to whether personal data concerning you is being processed, to request access to such data, to obtain information about the processing, and to obtain a copy of the personal data being processed. The first copy of the personal data will be provided free of charge; however, MEO Portugal may charge a reasonable fee based on administrative costs for any additional copies requested by the data subject.

Right to rectification or updating

Request the rectification or updating of your personal data that is inaccurate or has changed since it was collected, or request that incomplete personal data be completed.

Right to erasure

Obtain the erasure of your personal data, including any links, copies or reproductions of such data, namely if your personal data is no longer necessary for the purpose for which it was collected or processed, or if you object to the processing and there are no overriding legitimate interests justifying it, and provided that there are no valid grounds for retaining it.

Right to restriction of treatment

Request the restriction of the processing of your personal data in certain cases, namely if the processing is unlawful and you oppose the erasure of the data, requesting the suspension of the processing or the restriction of the scope of the processing to certain categories of data or processing purposes.

Right to portability

Receive the data you have provided us in a commonly used and machine-readable digital format, or request the direct transfer of your data to another entity that will become the new data controller, if the processing of your data is carried out by automated means and is based on your consent or the performance of a contract.

Right to object

Object, at any time, (i) and for reasons related to your particular situation, to the processing of your data based on the pursuit of legitimate interests by the data controller or on the compatibility of the initial processing with the subsequent processing of such data, including profiling; and (ii) to the processing of your data for direct marketing purposes, including profiling for that purpose.

Right to withdraw consent

Withdraw your consent to the processing of data legitimized by this basis. Withdrawal of consent does not invalidate the processing carried out up to that date based on the consent previously given.

10. How to contact us

MEO Group has appointed a Data Protection Officer ("DPO").

For more information on the processing of your personal data, as well as to ask questions or send suggestions related to this Policy, you can do so through the following contact details:

• Postal address: Av. Fontes Pereira de Melo, n.º 40, 1069-300 Lisboa;
• E-mail address: dpo@meo.pt.

11. Changes to this Policy

MEO Portugal may, at any time and without prior notice, make adjustments or changes to this Policy; such changes will be duly publicized on the Website (for example, through a banner or pop-up) and/or through other channels that MEO Portugal deems appropriate, whenever warranted.

Last updated: October 9, 2026.