The effective implementation and maintenance of the IMS are critical for achieving organisational excellence and compliance with standards and regulations. Devoteam Portugal's Management Committee sets the strategic direction, provide necessary resources, and foster an environment conducive to the successful adoption of the IMS across the organisation.

Each employee contributes by following applicable IMS policies and processes, protecting information and personal data, meeting quality and service requirements, reporting risks, incidents or nonconformities, and supporting continual improvement. Through these responsibilities, employees help maintain an effective, compliant and continuously evolving Integrated Management System.

Main Responsibilities: 

• The Owner is the primary responsible; the Backup ensures continuity and support, guaranteeing process effectiveness under all circumstances.

• Ensure the process is documented, updated, and aligned with the IMS and legal/contractual requirements.

• Define and monitor KPIs, ensuring objectives are met.

• Identify risks and opportunities, and propose improvements.

• Ensure compliance and manage nonconformities.

• Prepare and provide evidence for audits.

🔗IMS Process Owners & Backups

Main Responsibilities: 

• Develop, implement, and maintain Devoteam Portugal’s IMS.

• Ensure compliance with relevant standards and regulations.

• Conduct audits and manage documentation.

• Promote continuous improvement within the IMS.

• Provide training and communication to employees about IMS requirements.

• Monitor overall system performance.

Devoteam Portugal's IMS Manager is Rute Reizinho (Compliance Director & DPO).

Her backup is Joana Abreu (IMS Specialist).

📧 IMS Management Team: pt.compliance@devoteam.com 

Data Protection Officer (DPO)

Ensures effective oversight of Devoteam Portugal’s personal data protection framework, supporting compliance with the GDPR and other applicable data protection requirements, and promoting the protection of individuals’ rights and personal data across the organisation.

Main Responsibilities: 

• Monitor compliance with data protection laws (e.g., GDPR) and Devoteam data protection policies.

• Advise management and employees on data protection obligations.

• Serve as the main point of contact with data protection authorities.

• Oversee data protection impact assessments (DPIAs) and risk management processes related to personal data.

• Handle data subject requests (e.g., access, rectification, erasure) and ensure timely responses.

• Promote a culture of data protection and provide relevant training to employees.

• Cooperate with the Information Security Manager to ensure alignment between information security and data protection practices.

Devoteam Portugal's Data Protection Officer is Rute Reizinho (Compliance Director & DPO).

Her backup is Vítor Fonseca (CFO).

📧 DPO Contact: pt.compliance@devoteam.com 

Main Responsibilities: 

• Align IT systems with IMS objectives, focusing on data security and compliance.

• Manage IT infrastructure and support the implementation of IMS-related technologies.

• Address IT-related risks and incidents.

• Ensure that technological infrastructure supports efficient information flow and process automation within the IMS.

• Promote innovation and continuous improvement to enhance efficiency and regulatory compliance.

Devoteam Portugal's Information Security Manager is Carlos Gamito (CIO).

His backup is Bruno Tavares (CTO).

Main Responsibilities: 

• Manage and continually improve Devoteam Portugal’s Service Management System (SMS) in accordance with ISO/IEC 20000-1 and the IMS.

• Maintain and control the SMS policies, processes, procedures and records.

• Coordinate SMS risks, opportunities, audits, nonconformities and improvement actions.

• Monitor the performance and effectiveness of the SMS, including objectives and service management indicators.

• Coordinate the Service Management Review and follow up on resulting decisions and actions.

• Support Service and Process Owners in managing changes to services and service management processes.

• Promote awareness, competence and compliance with applicable SMS and IMS requirements.

Devoteam Portugal's SMS Manager is Ricardo Faro (Managed Services Business Unit Director).

His backup is the Service Owner.

Main Responsibilities: 

• Act as the primary point of contact for the DPO within the respective team or area.

• Ensure that new or changed personal data processing activities are communicated to the DPO for appropriate registration and assessment.

• Ensure the DPO is informed whenever personal data is processed in the context of clients, suppliers or subcontractors, so that applicable contractual and data protection requirements, including DPAs, can be assessed.

• Ensure that activities, projects or services involving personal data in Devoteam systems are communicated to the DPO so that the need for a DPIA and appropriate safeguards can be evaluated.

• Promote data protection awareness within the team and reinforce relevant policies, guidance and communications.

• Ensure that suspected or confirmed personal data breaches are immediately reported through the defined incident reporting channel.

• Support communication and follow-up with the DPO on relevant data protection matters, actions and requirements.

🔗 Devoteam Portugal's Data Protection Coordinators & Backups: DVT PT - Personal Data Protection Coordinators & Backups v3.0.pdf