Privacy Policy

PASTCERAM IS COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF ITS CUSTOMERS AND WEBSITE USERS. FOR THIS REASON, IT HAS PREPARED AND ADOPTED THIS POLICY AND THE PRACTICES DESCRIBED HEREIN. THIS POLICY EXPLAINS HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, AND WE THEREFORE RECOMMEND THAT YOU READ IT.

1 – IDENTIFICATION OF THE ENTITY RESPONSIBLE FOR DATA PROCESSING

Entity: PASTCERAM – PASTAS CERÂMICAS S.A. (hereinafter “PASTCERAM”)

NIPC: 505689111

Registered office: Zona Industrial Casal da Areia – Lote 38/39, 2460-392 Cós – Alcobaça (Portugal)

Telephone: +351 262 540 080 (call to the national fixed network) · +351 969 650 737 (call to the national mobile network)

Email: privacy@pastceram.com

2 – WHAT IS THIS POLICY ABOUT?

This Privacy Policy explains how we collect and process the personal data required to provide the products and services available through the website, and describes the practices adopted for this purpose.

3 – WHAT IS PERSONAL DATA?

Personal data means any information relating to a person that identifies that person or makes that person identifiable, regardless of the nature or medium of the information, including the person’s sound and image.

An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification number or to other elements specific to their physical, physiological, mental, economic, cultural or social identity.

4 – HOW WILL WE USE YOUR PERSONAL DATA?

The personal data processing operations we carry out are essential to customer satisfaction and to PASTCERAM’s activity, and are performed in accordance with applicable law and best practices.

Your personal data will not be reused for purposes that have not been previously identified or that are unrelated to the purposes for which it was originally collected.

5 – PURPOSES, LEGAL BASES AND RETENTION PERIODS FOR THE DATA COLLECTED

The personal data we process has specific legal bases depending on the purposes for which it is intended, and it will be retained for the time necessary for the respective purposes, as set out in this Privacy Policy.

We collect only personal data that is necessary and appropriate for the stated purposes. The table below sets out the purposes of processing, the data collected, the applicable legal bases and the relevant retention periods or criteria:

Where the law establishes a specific or mandatory retention period, that period will apply. In all other cases, personal data will be retained for no longer than the periods stated above, which PASTCERAM considers sufficient for the relevant purposes.

At the end of the applicable retention period, all personal data collected will be deleted.

6 – NEWSLETTERS AND OTHER COMMERCIAL AND/OR PROMOTIONAL COMMUNICATIONS

We may send newsletters or other commercial and/or promotional communications relating to PASTCERAM whenever the user has given prior and informed consent for this purpose by selecting the relevant checkboxes on the website.

The user may withdraw consent at any time through the option provided in the footer of communications sent by email (unsubscribe) or by sending a written communication to PASTCERAM using the contacts indicated in the section on the exercise of rights. Withdrawal of consent does not affect processing carried out before the withdrawal.

The above does not prevent PASTCERAM, where it has obtained a customer’s email address in the context of the sale of a product or service in accordance with personal data protection legislation, from using that address for direct marketing of its own products or services similar to those previously purchased, provided that customers are clearly and expressly given a free and easy opportunity to object to such communications in each message, for example through the unsubscribe option in the footer of the emails.

7 – HOW DO WE COLLECT YOUR PERSONAL DATA?

We collect your personal data through forms available on the website, as well as through the website’s communication with your device and through email messages you send us.

Your personal data may be collected through your device in the following ways:

• When you complete forms on the website, including newsletter subscription, contact, customer registration and purchase forms;
• Through your browser;
• Through cookies;
• IP address;
• Through pixel tags and similar technologies;
• Through your user data.

PASTCERAM undertakes to process your data lawfully and in accordance with applicable law.

PASTCERAM will not sell, rent or share your personal data with third parties except in the cases clearly identified in this Privacy Policy (see Section 12).

PASTCERAM’s services are not intended for minors and personal data relating to minors is not intentionally processed.

8 – WHAT ARE COOKIES?

Cookies are small information files that help identify your browser and can store information such as user settings and preferences.

PASTCERAM stores cookies on your device to personalise and facilitate browsing, as well as for troubleshooting, statistics, quality assurance and system security monitoring.

Except for cookies that are strictly necessary for the website to operate, the storage of other cookies will always depend on the user’s acceptance and consent, which may be withdrawn at any time using specific browser tools.

To learn more about the cookies we use, please see our Cookie Policy.

9 – HOW DO WE PROTECT YOUR PERSONAL DATA?

Your personal data is kept secure through a range of technical security measures (including storage on secure servers designed to safeguard the integrity of information) and organisational measures that ensure access is limited to employees who need such access, in accordance with defined access rules.

To protect your personal data, we only use data-centre providers that offer appropriate and documented security measures, including assurances that personal data is stored on servers maintained in controlled environments with limited access.

Personal data is stored on secure servers operated by Miztec (hereinafter “MBBLC NETWORKS LFA”), NIPC PT514911336, with registered office at Rua Aquilino Ribeiro L15 4F, 1950-027 Lisboa, which provides appropriate security guarantees to protect personal data against disclosure, loss, misuse, alteration, unauthorised processing or access, and any other unlawful form of processing.

Likewise, when you browse the website, we protect your data using encryption such as Transport Layer Security (TLS), a security protocol that protects telecommunications over the internet. Your password is stored using a one-way hash, meaning it cannot be recovered or disclosed by anyone, including PASTCERAM, and can only be reset.

Although we take the care and precautions we consider appropriate to protect the personal data you provide and that we collect, no security system is impenetrable. You should therefore keep your password secret and not disclose it to anyone; if you believe your password has been misused, notify us immediately, and take care to sign in and sign out appropriately whenever you close your browser.

10 – WHAT ARE YOUR RIGHTS?

Before explaining how you may exercise your rights, we inform you that applicable law grants you the following rights:

Access: the right to obtain confirmation as to whether or not personal data concerning you is being processed and, where that is the case, the right to access your personal data;

Rectification: the right to obtain correction of inaccurate personal data concerning you and to have incomplete personal data completed;

Erasure: the right to obtain deletion of your personal data where one of the grounds provided by law applies, in particular where:

• The personal data is no longer necessary for the purposes for which it was collected or processed;
• You withdraw the consent on which the processing is based and there is no other legal ground for the processing;
• You object to the processing and there are no overriding legitimate grounds for it;
• The personal data has been unlawfully processed;
• The personal data must be erased to comply with a legal obligation;
• The personal data was collected in connection with the offer of information society services.

Restriction of processing: the right to obtain restriction of processing where one of the situations provided by law applies, in particular where:

• You contest the accuracy of the personal data;
• The processing is unlawful and you oppose erasure and request restriction of its use instead;
• PASTCERAM no longer needs the personal data for processing purposes, but you require it for the establishment, exercise or defence of legal claims;
• You have objected to processing involving automated individual decisions, while the applicable conditions are assessed.

Objection: the right to object at any time to the processing of personal data concerning you;

Data portability: the right to receive personal data concerning you in a structured, commonly used and machine-readable format and to transmit that data to another controller without hindrance from the controller to which it was provided, where the processing is based on consent or a contract, or is carried out by automated means.

You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the Comissão Nacional de Proteção de Dados – www.cnpd.pt).

In addition to the rights described above, whenever processing is based on consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

11 – HOW CAN YOU EXERCISE YOUR RIGHTS?

You may exercise your rights by contacting us in writing at the following addresses:

Email: privacy@pastceram.com

By post: Zona Industrial Casal da Areia – Lote 38/39, 2460-392 Cós – Alcobaça (Portugal)

If you ask us to delete some or all of your personal data, certain requested services may no longer be available. PASTCERAM may nevertheless retain personal data that is necessary to comply with legal obligations to which it is subject.

12 – WHEN DO WE DISCLOSE DATA TO THIRD PARTIES?

PASTCERAM may use third parties to provide certain services, including maintenance, technical support, marketing, invoicing or payment management. These parties may have access to some of the personal data provided, limited to the data necessary for the contracted purposes.

For example, for data-centre management purposes, PASTCERAM uses the services of MBBLC NETWORKS LFA, identified in Section 9.

Your data may also be transmitted to transport companies for the purpose of ensuring delivery of your order.

PASTCERAM may also disclose your data to the following entities:

• Companies within the corporate group to which PASTCERAM belongs and with which it has commercial partnerships for the creation and provision of benefits;
• Other partners outside its corporate group, subject to your prior authorisation.

PASTCERAM ensures that entities with access to data are reliable and provide strong protection guarantees. No data will be transmitted beyond what is necessary to provide the contracted service, while PASTCERAM remains responsible for the personal data made available.

PASTCERAM may also disclose data to third parties in the context of investigations, inquiries and judicial and/or administrative proceedings, or similar proceedings, where duly required to do so by a judicial order.

13 – THIRD-PARTY WEBSITES

Our website may contain links to third-party websites that may collect and process your personal data. Such processing is the sole responsibility of the owners of those websites, and PASTCERAM is not responsible for their policies and/or practices.

Examples of such third parties include Facebook, Instagram and Pinterest, accessible through buttons available on the website.

14 – DATA TRANSFERS OUTSIDE THE EUROPEAN UNION

Your data will be processed by us within the European Economic Area.

If data is transferred to third countries outside the European Union or European Economic Area, PASTCERAM will comply with applicable law, including requirements regarding the adequacy of the destination country and the safeguards applicable to such transfers. Personal data will not be transferred to jurisdictions that do not provide adequate security and protection guarantees.

15 – MINORS

The website is not intended for persons under 18 years of age. We therefore ask minors not to provide us with personal data through the website, application, social networks/social media or email.

16 – SENSITIVE PERSONAL DATA

Please do not send or otherwise disclose sensitive personal data to us, namely information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic information, biometric information, health data, or data concerning a natural person’s sex life or sexual orientation.

If you nevertheless send or disclose any such categories of personal data, they will be deleted immediately.

17 – CHANGES TO THE PRIVACY POLICY

We reserve the right to revise or amend this Privacy Policy at any time. Any changes will be published on this website together with the updated effective date.

We recommend that you revisit this policy periodically so that you remain aware of any changes made.

18 – OUR CONTACT DETAILS

If you have any questions concerning this Privacy Policy, please contact us in writing at privacy@pastceram.com.

LATEST VERSION

24/08/2026, Alcobaça (Portugal).