Privacy Policy

Who is the controller of your personal data

The controller of your personal data is JJActivos, Gestão e Recuperação de Activos, Lda, acting as creditor. JJActivos also acts as a processor on behalf of your creditor, following the instructions of the data controllers and ensuring that those instructions do not breach applicable data protection law.

For what purposes we process your personal data

When you provide us with your personal data, or when we receive it as a processor, we will process it for the following purposes:

• To provide services as a processor, we process your personal data in accordance with the instructions and under the supervision of the controller, within the limits it sets, in order to carry out the recovery and management of financial and non-financial assets, in strict compliance with this policy.
• For recruitment purposes, we process your personal data on the legal basis of taking the necessary pre-contractual steps at the data subject's request and our legitimate interest in assessing the applications received.
• For telephone contact through our contact center, we process your personal data on the basis of our legitimate interest in providing the services under the contracts in force with our partners.
• To comply with the various legal obligations to which we are subject, we process your personal data for the purpose of meeting those legal obligations.
• To establish, exercise or defend a right in judicial or out-of-court proceedings, we process your personal data in order to defend the rights of JJActivos.
• To respond to complaints or suggestions through the “Customer Ombudsman”, we process your personal data on the basis of our legitimate interest in providing you with a personalised, high-quality service and, where applicable, taking the necessary pre-contractual steps at the data subject's request.

What categories of personal data we process

In the course of its business, JJActivos collects and processes the personal data needed to provide management and recovery services for financial and non-financial assets. In this context, and in any other activities the company carries out, depending on the applicable purpose, it processes:

• Identification data, for example name, date of birth, gender, address, contact details, identity card and passport details, tax number and nationality;
• Professional data and occupation, such as position, role, job description, company, employer's address and contact details;
• Data relating to the financial situation of contracts signed by the data subject, such as amounts financed, contract terms, financing conditions, goods or services financed, and the up-to-date status of the amounts being collected;
• Data relating to academic background, namely education, qualifications, certifications, languages and CV.

Accordingly, we may process your personal data where this is necessary to provide our debt collection service, even if your consent has not been requested and is not required for that purpose.

Data collected through this website

Through this website we only collect the personal data you voluntarily provide in the forms. Fields marked with * are required for us to handle your request; the others are optional.

Please do not include in your messages or attachments any data that is not needed for your request, especially sensitive data (for example, about health).

This website does not use analytics, advertising or social media cookies — see the Cookie Policy. The server hosting the website may temporarily log technical connection data (such as IP address, date and time, and page requested), solely to ensure the security and operation of the service.

How and for how long we keep your personal data

All data needed to carry out our activities is stored in a restricted database, accessible only to authorised personnel, or in JJActivos' protected data centres, supported by a comprehensive security management and administration system.

The period for which we keep your personal data depends on the purpose. We will therefore keep your personal data for the following periods:

• Provision of services as a processor: in accordance with the criteria set by the controller, and for as long as strictly necessary to manage the contract.
• Responding to your requests or complaints: for as long as strictly necessary for this purpose.
• Recruitment: for 2 years from the date the application/CV is submitted.
• Recordings of calls made from the contact center: for 30 days after they are recorded.
• Compliance with legal obligations to which we are subject: for as long as necessary to meet the applicable legal obligations.
• Establishment, exercise or defence of a right in judicial or out-of-court proceedings: until the final judgment in the dispute becomes res judicata, or until it is settled out of court.
• Where several purposes apply and the periods overlap, the longest period prevails.

To whom we disclose your personal data

JJActivos will not disclose your personal data to third parties, except to comply with the legal obligations applicable in each case or, where necessary to provide the contracted services, by using subcontractors to manage services essential to its business. Examples of external service providers acting as processors include telecommunications and IT providers. JJActivos applies strict criteria when selecting service providers in order to meet its data protection obligations, and undertakes to sign a data processing agreement with them which requires them, among other things, to apply appropriate technical and organisational measures; to process personal data only for the agreed purposes and solely on JJActivos' documented instructions; and to delete or return the personal data to JJActivos once the services have been completed.

The forms on this website are processed on the server that hosts the website itself and sent by email to the JJActivos team responsible for the request, without using third-party form services. Submitted data is not stored on the website server. Whenever a service provider processes data outside the European Economic Area, JJActivos ensures that the transfer is carried out with appropriate safeguards, in accordance with Articles 44 et seq. of the GDPR.

How you can access, rectify, update or object to the processing of your personal data

• Right of access and information — You may find out whether your personal data is being processed and consult it, including data held in this company's records.
• Right to rectification — You may correct your personal data where it is inaccurate and complete it where it is incomplete.
• Right to erasure — You may request the erasure of your personal data where, among other cases, it is no longer necessary for the purposes for which it was collected, to the extent permitted by law.
• Right to object — You may request that your personal data no longer be processed. JJActivos will stop processing the personal data unless there are compelling legitimate grounds or it is needed to establish, exercise or defend a right in legal proceedings.
• Right to restriction of processing — You may request the restriction of the processing of your personal data in the following situations:
  • a) While the accuracy of your personal data is being contested;
  • b) Where the processing is unlawful and you have opposed it and requested restriction of the use of the personal data;
  • c) Where JJActivos no longer needs to process your personal data but they are required to exercise or defend a right in legal proceedings;
  • d) Where you have objected to the processing of your personal data for the performance of a task in the public interest or for a legitimate interest, pending verification of whether those legitimate grounds override yours.
• Right to data portability — You have the right to receive, in a structured, commonly used and machine-readable format, the personal data you have provided to us and data obtained from your relationship with JJActivos, and to transmit it to another organisation.

If you have any questions or wish to exercise these rights, you may send an email to dpo@jjactivos.com, or use the Customer Ombudsman area of our website. To exercise your rights, you must provide personal details or a document proving your identity, and state which right you wish to exercise.

Exercising the rights described above is generally free of charge; however, if requests are excessive or manifestly unfounded, JJActivos reserves the right, on a case-by-case basis, to charge an administrative fee of €25.00, as provided for in the GDPR.

If you believe that JJActivos has not processed your personal data in accordance with applicable law, you may lodge a complaint with the competent supervisory authority: in Portugal, the National Data Protection Commission, CNPD (www.cnpd.pt); in Spain, the Spanish Data Protection Agency, AEPD (www.aepd.es).

Controller's contact details

As controller or processor, JJActivos is available to provide any clarification needed on this matter and to receive any requests relating to the exercise of the rights set out here, through the following contact details:

• Company: JJActivos, Gestão e Recuperação de Activos, Lda. Tax Identification Number: 505 766 469
• Registered office: Taguspark, Edifício Núcleo Central 392, 2740-122 Oeiras, Portugal
• Email: info@jjactivos.com
• Website: www.jjactivos.com — Customer Ombudsman area
• Phone: (+351) 219 669 610

Data Protection Officer contact details:

• Email: dpo@jjactivos.com
• Address: Taguspark, Edifício Núcleo Central 392, 2740-122 Oeiras, Portugal

Updates to this Privacy Policy

This Privacy Policy was last updated in September 2026 and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 — the General Data Protection Regulation (“GDPR”) — and other applicable legislation. JJActivos reserves the right to adjust or amend this Privacy Policy at any time; any such changes will be duly published.