Our Commitment to Privacy

At Tecnasys, the protection of personal data is a fundamental principle of how we operate. Our commitment to privacy goes beyond minimum legal and regulatory compliance. We view privacy as a core element of trust, accountability and operational excellence.

We design, implement and maintain our digital and business activities in accordance with a privacy by design and privacy by default approach, embedding data protection into our processes, technological decisions and commercial relationships. This includes clear governance, appropriate technical and organisational controls, and responsible information management throughout the entire data lifecycle.

Our objective is to ensure personal data is processed in a consistent, secure and transparent manner that enables us to:

  • Comply with increasingly demanding and evolving data protection regulations

  • Honour contractual commitments with customers, partners and suppliers

  • Protect the rights and legitimate expectations of employees, users and other stakeholders

  • Reinforce trust in Tecnasys as a responsible and reliable technology partner

For Tecnasys, privacy is not a documentation exercise, but an ongoing operational practice aligned with the highest professional standards.

Purpose of this Policy

This Corporate Privacy Policy describes Tecnasys’ approach, principles and expectations regarding the collection, use, storage, protection and transfer of personal data across all jurisdictions in which we operate.

The purpose of this document is to:

  • Clearly explain how Tecnasys processes personal data in the context of its business and digital activities

  • Establish a common framework for data processing within the organisation

  • Inform data subjects of the general criteria applicable to the processing of their personal data

  • Serve as a basis for specific privacy notices, policies and procedures

This Policy applies to Tecnasys and its operating entities and is supplemented by specific privacy notices where required by the processing context.

This Privacy Policy applies to all Tecnasys websites, digital platforms, services and business activities, whether conducted online or offline.

Where a specific Tecnasys service, programme, solution or operating entity is subject to a dedicated privacy notice, such notice may supplement or prevail over this Policy, provided it remains consistent with the principles set out herein.

This Policy governs the processing of personal data relating to:

  • customers and users

  • business partners and suppliers

  • job applicants

  • current and former employees

Where a contract defines specific data protection obligations, contractual requirements shall prevail, to the extent permitted by applicable law.

Data protection at Tecnasys is not a formal exercise, but an integrated operational framework embedded in how we deliver services.

Our approach combines:

  • executive accountability

  • technical and organisational safeguards

  • compliance processes

  • a culture of responsibility and trust

This model ensures lawful, secure and consistent processing of personal data across all jurisdictions in which we operate.

Privacy and data protection are governed through clearly defined roles and responsibilities, ensuring appropriate oversight of:

  • regulatory interpretation and compliance

  • advisory support to business functions

  • risk management and incident handling

Tecnasys applies privacy by design and privacy by default principles across technical, organisational and contractual decisions.

Tecnasys maintains internal policies, operational standards and procedures designed to ensure lawful, fair and transparent processing of personal data.

These frameworks are periodically reviewed and cover areas such as:

  • privacy risk assessments

  • access controls and security measures

  • data lifecycle management

  • third-party and supplier governance

New services, systems and material changes are assessed to identify and mitigate privacy risks before deployment.

Privacy and data protection form part of Tecnasys’ professional culture.

Our teams receive appropriate guidance and awareness on:

  • data protection principles

  • best practices

  • risks associated with personal data processing

This reinforces individual and collective accountability.

Tecnasys conducts regular assessments to identify, prioritise and mitigate privacy and data protection risks.

Monitoring and review mechanisms enable:

  • early detection of issues

  • corrective actions

  • continuous improvement of controls

Privacy is managed as an ongoing process.

Tecnasys maintains procedures for the identification, assessment and management of security and privacy incidents, including personal data breaches.

These procedures are designed to:

  • respond promptly

  • limit impact

  • meet legal and contractual obligations

  • notify authorities or affected parties where required

Privacy governance at Tecnasys relies on close cooperation between technical, legal, security and operational teams.

This cross-disciplinary approach ensures alignment between:

  • technology

  • processes

  • people

and applicable privacy requirements.

Tecnasys may process personal data in connection with website access, service delivery, contractual relationships, recruitment processes and professional communications.

Only data that is necessary, relevant and proportionate to the stated purposes is processed, in accordance with applicable law.

Personal data is processed only where a valid legal basis exists, including:

  • consent

  • contractual necessity

  • compliance with legal obligations

  • legitimate interests, where appropriately assessed

Tecnasys does not sell personal data.

Personal data may be shared with:

  • service providers

  • business partners

  • group entities

where necessary and subject to appropriate contractual and technical safeguards.

International transfers are carried out using legally recognised transfer mechanisms, such as standard contractual clauses or equivalent safeguards.

Appropriate technical and organisational measures are applied to protect personal data against unauthorised access, loss or disclosure.

Personal data is retained only for as long as necessary to fulfil its purpose or to comply with legal requirements.

Individuals may exercise their rights of access, rectification, erasure, restriction, objection and data portability, in accordance with applicable law.

Requests are handled confidentially and within statutory timeframes.

Tecnasys services are not directed at children and we do not knowingly collect personal data from minors.

Cookies and similar technologies are governed by our Cookie Policy, available on the website.

Our websites may include links to third-party services. Tecnasys does not control third-party privacy practices and recommends reviewing their policies before providing personal data.

This Privacy Policy may be updated to reflect regulatory, operational or technological changes.

Privacy enquiries may be addressed to:

[email protected]