Platform Technical Sheet

This Technical Sheet brings together, for the purpose of institutional transparency, the full identification of the Borgstena Group Data Protection Platform, its technological choices, its editorial governance and the criteria of quality, accessibility, security and versioning adopted.

1.Identification of the Platform

2.Entity behind the project

3.Editorial governance

The editorial direction of the Platform is ensured by the Borgstena Group's Data Protection Officer, in the exercise of the functions provided for in Articles 38 and 39 of the GDPR. Technical administration is ensured by the competent services of the Group, with the support of technical processors where applicable. Content is subject to independent quality review prior to publication, with a view to ensuring linguistic, terminological and regulatory compliance.

4.Technology and architecture

5.Language versions and territorial scope

The Platform is available in two language versions: Portuguese (Portugal) and English. Access is open from any territory, without prejudice to the application of the international transfer regime for personal data set out in Chapter V of the GDPR in the situations in which it applies.

6.Accessibility

The Platform is developed according to digital accessibility criteria, with observance of the [Web Content Accessibility Guidelines (WCAG) 2.1, level AA — to be confirmed and referenced after an accessibility audit]. Any access barriers may be reported, for resolution, to the Platform's Support service at servicedesk@dataprotectionofficer.pt.

7.Platform security

The security of the Platform observes Article 32 of the GDPR and the requirements applicable under Directive (EU) 2022/2555 (NIS 2), namely through access controls, encryption of communications, monitoring of technical logs, protection against automated attacks and periodic backup of content. Incident management is governed by the Borgstena Group's Unified Procedure for Incident Notification and Management, in conjunction with the Information Security page.

8.Statistics and audit

The use of the Platform may be subject to aggregated statistical analysis, with a view to its improvement, in strict compliance with the rules of personal data protection and under the terms of the Platform Data Protection Policy. The Platform is also subject to periodic audits, with the frequency defined by the Data Protection Officer, covering regulatory compliance, the integrity of documentary content and technical security.

9.Intellectual property

The content of the Platform, including texts, trade marks, logos, images, graphics and structure, is the property of the Borgstena Group or is used under the applicable authorisations. Reproduction, in part or in whole, is permitted exclusively for non-commercial purposes, with indication of the source and of the Platform, without prejudice to third-party rights. Any use that exceeds this scope is subject to the prior and express authorisation of the Borgstena Group.

10.Limitation of liability

The Platform is informative in nature and demonstrates the Borgstena Group's compliance commitment. Its hyperlinks to third-party websites are provided for the convenience of the user and do not imply endorsement nor liability for the respective content. The information published on the Platform does not replace consultation of the applicable legal texts nor of the specific policies and sheets. The Borgstena Group will make reasonable efforts to maintain the availability and currency of the Platform, without absolutely guaranteeing its uninterrupted continuity nor the absence of material errors.

11.Documentary reference system

All documents of the Platform observe a unique reference system, in the format #PEPD-NNNN-YYYYMMDD, where NNNN corresponds to the sequential number assigned to the document and YYYYMMDD to the date of the version. The version of each document is also identified in the format YYYYMM, allowing the documentary history to be traced and the validity to be verified. Each document indicates, in its footer, the full reference, the version, the nature and the language.

12.Technical and administrative contacts

13.Revision history

This Technical Sheet is subject to periodic review, under the responsibility of the Data Protection Officer, whenever technological, regulatory or organisational developments so warrant. Previous versions may be consulted upon request to dataprotection@borgstena.com.