Privacy Policy

This Privacy Policy outlines the terms under which the personal data of representatives of third sector entities (hereinafter referred to as “Entities”) are collected and processed when submitting donation requests through the platform Apoios Jerónimo Martins.

Data Controller

The data controller is the company managing the donation request: Jerónimo Martins, SGPS, S.A., Pingo Doce – Distribuição Alimentar, S.A., or Recheio Cash & Carry, S.A., hereinafter referred to individually as “Data Controller” or collectively as the “Companies.”

Purpose, Legal Basis and Data Retention Period

Personal data collected will be processed for the purpose of assessing and managing submitted donation requests, based on the contractual obligation established upon account creation.
For this purpose, the name, role, and contact details of the Entity’s representative, as well as the information required for payment processing, are collected.

Upon submission of a request through the platform, additional documents related to the project or the Entity may be uploaded, although these are not expected to contain personal data.

Personal data is retained for a maximum period of 3 years after the Entity representative’s last interaction with the Platform, after which it will be deleted.

Data Subject Rights

Pursuant to the law in force, data subjects have the right of access to and rectification, portability and erasure of their personal data, as well as the right of restriction of and to object to the processing of their data. You may exercise your rights to access, rectification, and erasure directly through the platform. Alternatively, you may submit your request via email to comunicacao@jeronimo-martins.com. You also have the right to lodge a complaint with the Supervisory Authority in Portugal (CNPD).

Security Measures

Appropriate technical and organizational security measures have been implemented to support processing activities and to ensure the security of personal data.

Sharing of Personal Data

For the purposes described above, the Data Controller may also share personal data with other companies within the Jerónimo Martins Group or external partners and service providers, in particular for the development, maintenance and hosting of computer systems. In all such cases, the Data Controller ensures that partners and service providers use the data strictly for the intended purposes and comply with appropriate technical and organizational measures in accordance with applicable legislation.

Personal data may be transferred to entities located in third countries (outside the European Economic Area), in which case appropriate safeguards are ensured as required by law. Personal data may also be shared with other entities for the following purposes: (i) compliance with legal obligations, (ii) compliance with court orders, and (iii) response to requests from public authorities.

Data Protection Officer

The Companies have appointed a Data Protection Officer who can be contacted for any question regarding the processing of personal data via the following email address: dpo.portugal@jeronimo-martins.com.

Changes to the Personal Data Protection Policy

The Companies reserve the right to modify this Personal Data Protection Policy at any time. Any changes will be published on this website.

Last updated: September 30, 2025