Website privacy policy
1. Scope
This Privacy Policy applies to data collected and processed during users’ interaction with the website https://edenred.pt (hereinafter the “Website”), which is the responsibility of Edenred Portugal, S.A. (hereinafter, “User(s)”). Edenred is headquartered at Avenida Dom João II, Nº 9-L, Piso 6 B, Edifício Adamastor, Torre B, 1990-077 Lisbon (hereinafter, “Edenred”) and acts in this context as Data Controller.
The personal data processed by Edenred complies with applicable national legislation and with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, commonly known as the General Data Protection Regulation (GDPR).
In order for the User to be fully informed about the data collected, the purpose of its processing and their rights, we recommend that they read this Privacy Policy carefully and thoroughly.
2. Purposes of Processing, Legal Basis and Personal Data
Edenred collects personal data provided directly by Users through the forms available on our Website for the following purposes, based on the respective legal basis identified below:
- Acquisition of New Customers and new Establishments to join Edenred merchants’ network
Legal basis: Edenred’s legitimate interest. Edenred processes personal data collected through the contact forms on the Website in order to manage requests for information, send commercial proposals and conduct negotiations. This is necessary to respond to requests from potential customers and potential Establishment to join Edenred merchants’ network. The processing is proportionate to its purpose, allowing Edenred to identify the person making the request, understand the nature of the request and provide an appropriate and timely response. This ensures efficient communication, supports business opportunities and maintains a positive brand image;
Personal data: Name, surname, company identification, telephone number, email address and content of the message. In the case of potential customers, their position and department within the respective professional environment will also be collected.
- Sending direct marketing communications (such as newsletters, advertising material and promotional offers) by electronic means (email or SMS) from Edenred to Customers and Potential Customers.
Legal basis: Consent. You have the right to withdraw your consent at any time. Withdrawing your consent does not affect the lawfulness of processing based on consent before its withdrawal. You can do this at the bottom of each email message, where instructions for unsubscribing are provided, or through the means indicated in point 4 of this Policy. Please note that after receiving your request to withdraw consent, there may be a delay before your request is fully implemented, ensuring that your consent is withdrawn from all our systems.
Personal data: Email address, telephone number and capacity in which you provided your personal data and gave your consent (as a Customer or Potential Customer).
- Suggestion of an establishment that is not part of Edenred network
Legal basis: Edenred’s legitimate interest. Edenred processes personal data collected through the Establishment Suggestion forms on the Website for the purpose of informing the data subject of the success of the Establishment inclusion in Edenred merchants’ network. This processing is proportionate to its purpose, thereby improving the services offered and the User experience.
Personal data: Name, surname, email address, Establishment identification and message content.
- Provision of information, support and clarification of queries from beneficiaries of Edenred Solutions
Legal basis: Edenred’s legitimate interest. Edenred processes personal data collected through the contact forms on the Website to manage requests for information. The processing is proportionate to its purpose, enabling Edenred to identify the person making the request, understand the nature of the request and provide an appropriate and timely response. This ensures efficient communication and maintains a positive brand image.
Personal data: Name, surname, email address, Edenred product card number, message content.
- Provision of information, support and assistance to requests from Customers and Establishments that are part of Edenred merchants’ network
Legal basis: the Contract entered between Edenred and the Customer or the Establishment that is part of Edenred merchants’ network, or Edenred’s legitimate interest in responding effectively and appropriately to requests, ensuring quality service and satisfaction.
Personal data: Name, surname, email address, company identification, telephone number, message content.
- Compliance with legal obligations by Edenred, including audits and compliance with legitimate orders issued by police or judicial authorities
Legal basis: compliance with legal obligations by Edenred to avoid penalties.
Personal data: Name, surname, email address, card number (meal or flexible) if you are a beneficiary of Edenred Solutions, message content. And name, surname, company identification, telephone number, email address and message content if acting on behalf of a company.
3. International transfers
Edenred guarantees that your personal data, collected for the purposes mentioned above, will not be transferred outside the European Union, unless there is a decision by the European Commission recognising that the country of destination offers an adequate level of data protection (in accordance with Article 45 of the GDPR), thus allowing its transfer. Otherwise, we will ensure the security and protection of your personal data through appropriate measures, such as standard data protection clauses (in accordance with Article 46 of the GDPR).
4. Recipients of the Data
Your personal data will be accessible to authorised Edenred staff, each of whom has specific access rights in accordance with their need to know.
Your personal data will not be disclosed to third parties, except, where necessary, to the following categories of companies, as well as to their own subcontractors, expressly authorised by Edenred. Subcontractors’ access to personal data is governed by contract, ensuring that Edenred’s data protection obligations are met. Edenred contractually ensures and regularly verifies that its Subcontractors are reliable entities offering adequate data protection guarantees:
- Data storage service providers, so that Edenred can securely store the data it processes in the course of its business;
- Companies that provide CRM (Customer Relationship Management) platforms and support;
- Companies that assist us in providing our services, for the purposes of communications by email and telephone.
- Judicial bodies, criminal police bodies and administrative authorities, for the purposes of complying with a legal obligation and thus avoiding any penalties applicable to Edenred;
- Edenred Group companies.
Edenred has adopted appropriate data collection, storage and processing practices, as well as security measures to protect against unauthorised access, accidental loss, alteration, disclosure or destruction of Users’ personal data. The User, under the terms of this Privacy Policy and within the scope of the provision of services by Edenred, agrees not to access, develop, support or use any software, devices, scripts, robots or any other means or process (including web crawlers, browser plug-ins and add-ons or any other technology, particularly in a physical environment), directly or through third parties, with the aim of copying the services of the Website, or copying profiles and other data directly or indirectly related to these services. In particular, the data subject undertakes not to disclose to any third party their access data to the Website, which are personal, exclusive and confidential.
Edenred is not responsible for the content accessed through any hyperlink that takes the User to navigate outside the domain https://edenred.pt whenever such hyperlinks are the responsibility of third parties. All data collected is processed automatically and the information sent by Users is encrypted and managed with advanced security, meaning that any violation or attempted violation of databases obtained through the Website will result in immediate legal action against the offender(s).
5. Rights of Data Subjects
In accordance with applicable legislation, you have the right to access, rectify and delete your personal data. In certain circumstances and under the conditions set out in applicable legislation, you also have the right to object to and obtain the restriction of data processing, as well as the right to the portability of your personal data.
You can exercise your rights via the online link: gdpr.edenred.pt or by registered letter with acknowledgement of receipt to Edenred Portugal, located at Edifício Adamastor, Torre B, Av. D. João II, n.º 9 i, piso 6 B, 1990-077 Lisbon, providing proof of your identity.
For any other type of request or complaint, please contact the Data Protection Officer at dpo.portugal@edenred.com .
We also remind you that you can lodge a complaint about the processing of your personal data with your local personal data protection authority, which is the Comissão Nacional de Proteção de Dados (www.cnpd.pt), in Portugal.
6. Data Retention Period
Edenred retains Personal Data for the period deemed necessary and sufficient for the purposes for which it was collected and processed, with the data storage period varying according to the purpose for which the information is processed and in accordance with the legal rules requiring its retention, after which it will be deleted, using the appropriate technical and functional guarantees, as documented in each of the relevant processes. as documented in each of the relevant processes.
7. Artificial Intelligence
In the course of its activities, Edenred may use artificial intelligence (AI) technologies in the provision of services or products, including in chat sessions/conversational agents or other Edenred activities. Edenred undertakes to comply with the laws and regulations applicable to the use of AI, which includes ensuring the responsible, ethical, transparent and reliable use of AI in the context of its business activities.
8. Final considerations
Edenred reserves the right to change its Privacy Policy, Cookie Policy and Terms and Conditions described on this page, so we advise you to visit this address frequently to stay informed about how we are working to protect the personal data we collect.
Any material or relevant changes to this Privacy Policy will be communicated by Edenred Portugal through any means deemed appropriate, including the publication of a specific notice to that effect or a notice on the Website.
In short, we consider that Users are aware of these policies when browsing https://edenred.pt.
Date of last revision: 12/08/2025