Privacy Policy
PASTCERAM IS COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF ITS CLIENTS AND WEBSITE USERS AND HAS THEREFORE DRAWN UP AND ADOPTED THIS POLICY AND THE PRACTICES DESCRIBED HEREIN. THIS POLICY EXPLAINS HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, SO WE RECOMMEND THAT YOU READ IT.
1 – IDENTIFICATION OF THE ENTITY RESPONSIBLE FOR DATA PROCESSING.
Organisation: PASTCERAM – PASTAS CERÂMICAS S.A. (hereinafter “PASTCERAM”)
NIPC: 505689111
Registered office: Zona Industrial Casal da Areia – Lote 38/39 2460-392 Cós – Alcobaça (Portugal)
Telephone contact: +351 262 540 080 (national landline)
+351 969 650 737 (Call national mobile network)
Email: privacy@pastceram.com
2 – WHAT IS THIS POLICY ABOUT?
This Privacy Policy explains how we collect and process personal data that is necessary for the provision of products and services that are available through the website, describing the practices adopted for this purpose.
3 – WHAT IS PERSONAL DATA?
Personal data is any information relating to a person which identifies that person or makes that person identifiable, regardless of the nature and medium of the information, including the sound and image of the person.
Identifiable means a person who can be identified, directly or indirectly, in particular by reference to an identification number or to other factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
4 – HOW WILL WE USE YOUR PERSONAL DATA?
The personal data processing operations we carry out are an essential tool for your satisfaction and for PASTCERAM’s activity and are carried out in accordance with the applicable legislation and best practices.
Your personal data will not be reused for other purposes that have not been previously identified or that are unrelated to the purposes for which they were initially collected.
5 – WHAT ARE THE PURPOSES, GROUNDS AND RETENTION PERIODS FOR THE DATA COLLECTED?
The personal data we process has specific grounds, depending on the purposes for which it is intended, and will be kept for as long as necessary for the respective purposes, as listed in this Privacy Policy.
The personal data collected is only that which is necessary and appropriate for the purposes indicated. In the table below you can see the processing purposes and the data collected for them, the respective grounds and the data retention periods or criteria:
PURPOSE | BACKGROUND | DATA COLLECTED | RETENTION PERIOD |
So that we can send you newsletters, marketing and/or promotional communications or other publications that you have requested and/or that may be of interest to you. | Consent for that specific purpose or legitimate interests (only for marketing communications concerning products or services similar to those you have already purchased) | Name; Email address. | 1 ano ou até que retire o seu consentimento ou realize o opt-out (unsubscribe) deste tipo de comunicações. |
To follow up your client registration on the website and enable you to use its functionalities. | Pre-contractual steps, execution of the contract for use of the reserved area and enjoyment of its functionalities. | Name and surname; Email address; Password. | For as long as you are registered as a client and wish to use the website’s services, and up to 2 years after your last access. |
To store your account details in the reserved area. | Pre-contractual enquiries and contract performance. | Name and surname; address (billing and delivery); email address; telephone contact; tax number; payment details; data relating to pending and/or placed orders. | For as long as you are registered as a client and wish to use the website’s services, and up to 2 years after your last access. |
To process and follow up on your online purchase/order, and its invoicing and delivery. | Pre-contractual due diligence and execution of the contract; Compliance with legal obligations to which PASTCERAM is subject (particularly in the area of invoicing). | Name and surname; Address (for invoicing and delivery); Email address; Telephone contact; Tax number; Payment details. | Pelo período necessário: à execução do contrato, a assegurar o exercício de direitos do cliente e da PASTCERAM, relativamente à compra realizada, e pelo período necessário ao cumprimento das obrigações legais a que a PASTCERAM se encontra adstrita (nomeadamente, obrigações fiscais). |
To analyse and respond to your messages, client support and contact/information requests. | Consent for this specific purpose. | Email address; Message and attachment and personal data that may be contained therein. | 2 years, or for the period deemed necessary to fulfil this purpose, if longer than 1 year. |
For commercial purposes, such as data analysis, audits. | Consent for this specific purpose (cookies); Interesses legítimos prosseguidos pela PASTCERAM. | Cookies; IP address. | Consult the Cookies Policy. |
To adapt, improve and modify the services, in particular by identifying usage trends, or to determine the effectiveness of promotional campaigns. | Consent for this specific purpose (cookies); Interesses legítimos prosseguidos pela PASTCERAM. | Cookies; IP address. | Consult the Cookies Policy. |
For website management operations. | Consent for this specific purpose (cookies); Interesses legítimos prosseguidos pela PASTCERAM. | Cookies; IP address. | Consult the Cookies Policy. |
For fraud prevention and information systems security. | Consent for this specific purpose (cookies); Interesses legítimos prosseguidos pela PASTCERAM. | Cookies; IP address. | Consult the Cookies Policy. |
If a specific or mandatory period is required by law, this will be the data retention period. In all other cases, personal data will be kept for no longer than the periods indicated above, which PASTCERAM considers to be sufficient to fulfil its purposes.
At the end of the retention period, all personal data collected will be deleted.
6 – NEWSLETTERS AND OTHER COMMERCIAL AND/OR PROMOTIONAL COMMUNICATIONS.
We may send newsletters or other commercial and/or promotional communications relating to PASTCERAM provided that the user gives their prior and informed consent for this purpose, by ticking the checkboxes provided on the site for this purpose.
The user may withdraw their consent at any time, using the option provided for this purpose in the footer of communications sent via email (unsubscribe) or by writing to PASTCERAM, to the contacts indicated in the heading on the exercise of rights. Withdrawal of consent is without prejudice to processing carried out prior to that withdrawal.
The provisions of the previous paragraph do not prevent PASTCERAM from using the email address of its clients in the context of the sale of a product or service, provided that it has obtained it in accordance with Personal Data Protection legislation, for the purposes of direct marketing of its own products or services similar to those transacted, provided that it clearly and explicitly guarantees the customers in question the possibility of objecting, free of charge and easily, at the time of each message, to the sending of such communications, for example through the unsubscribe option in the footer of the emails.
7 – HOW DO WE COLLECT YOUR PERSONAL DATA?
We will collect your personal data through the forms on the website, but also through the website and the communication it makes with your device and the e-mail messages you send us. Your personal data is collected via your device as follows:
When you fill in the forms on the website, namely newsletter subscription, contact, customer registration and purchase forms;
Through your browser;
Through cookies;
IP address.
PASTCERAM undertakes to process your data in accordance with the law and in a legitimate manner.
PASTCERAM will not sell, rent or share your personal data with third parties, except in the cases clearly identified in this Privacy Policy (see Point 12 to understand how).
8 – WHAT ARE COOKIES?
Cookies are small information files that help identify your browser and can store information, for example, user settings and preferences.
PASTCERAM will store cookies on your device to personalise and facilitate browsing as much as possible, but also for troubleshooting, statistics, quality assurance, and to monitor system security.
With the exception of cookies specifically necessary for the performance of the website, the storage of other cookies will always depend on the User’s acceptance and consent, and this consent may be withdrawn at any time through specific browser tools.
To find out more about the cookies we use, please consult our Cookie Policy. que utilizamos deve consultar a nossa Política de Cookies.
9 – HOW DO WE PROTECT YOUR PERSONAL DATA?
Your personal data is kept secure by adopting various security measures of a technical nature (the data is kept on secure servers that offer us every guarantee of the integrity of the information) and an organisational nature that guarantee that only those Employees who must access the personal data have access to it, in accordance with the need for access and the rules created for this purpose.
To protect your personal data we only use data centre providers that offer us adequate and documented security measures, namely guarantees that your personal data is stored on servers that are kept in controlled environments with limited access.
Personal data is kept on secure servers at PTISP – Almouroltec – Serviços de Informática e Internet Lda (hereinafter, “PTISP”) with NIPC 502665696 and head office at Rua José Dias Simão s/n, Parque de Ciência e Tecnologia, Edifício INOV.POINT, Alferrarede,
2200-062 Abrantes., which offers us the appropriate security guarantees to protect personal data against its dissemination, loss, misuse, alteration, unauthorised processing or access, as well as against any other form of unlawful processing.
Likewise, when you browse the website, we protect your data with encryption, such as Transport Layer Security (TLS, a security protocol that protects telecommunications via the internet) and your password is stored using a one-way hash, meaning that it cannot be recovered (or disclosed) by anyone, including PASTCERAM, and can only be reset.
Although we take the care and precautions we deem appropriate to protect the personal data you provide and we collect, you should realise that no security system is impenetrable.
You should therefore take certain precautions, such as keeping your password secret and not divulging it to anyone else; if you believe that your password has been misused, you should notify us immediately; you should also take care to log in and log out every time you close your browser.
10 – HOW CAN YOU EXERCISE YOUR RIGHTS?
Antes de explicarmos como pode exercer os seus direitos, informamos que a legislação lhe atribui os seguintes direitos:
Acesso: direito de obter a confirmação de que os dados pessoais que lhe digam respeito são ou não objeto de tratamento e, se for esse o caso, o direito de aceder aos seus dados pessoais;
Retificação: o direito de obter a retificação dos dados pessoais inexatos que lhe digam respeito e a que os seus dados pessoais incompletos sejam completados;
Apagamento: o direito de obter o apagamento dos seus dados pessoais quando se aplique um dos motivos elencados na legislação, nomeadamente quando:
Os dados pessoais deixaram de ser necessários para a finalidade que motivou a sua recolha ou tratamento;
Retirar o consentimento em que se baseia o tratamento dos dados e não existir outro fundamento jurídico para o tratamento;
Se opuser ao tratamento e não existirem interesses legítimos prevalecentes que justifiquem o mesmo;
Os dados pessoais foram tratados ilicitamente;
Os dados pessoais têm de ser apagados para o cumprimento de uma obrigação jurídica;
Os dados pessoais foram recolhidos no contexto da oferta de serviços da sociedade da informação.
Limitação do tratamento: o direito de obter a limitação do tratamento se se aplicar uma das situações elencadas na legislação, nomeadamente quando:
Contestar a exatidão dos dados pessoais;
O tratamento for ilícito e o titular dos dados se opuser ao apagamento dos dados pessoais e solicitar, em contrapartida, a limitação da sua utilização;
O responsável pelo tratamento já não precisar dos dados pessoais para fins de tratamento, mas esses dados sejam requeridos pelo titular para efeitos de declaração, exercício ou defesa de um direito num processo judicial;
Se o titular dos dados tiver oposto ao tratamento com recurso a decisões individuais automatizadas.
Oposição: o direito de se opor a qualquer momento ao tratamento dos dados pessoais que lhe digam respeito;
Portabilidade: o direito de receber os dados pessoais que lhe digam respeito num formato estruturado, de uso corrente e de leitura automática, e o direito de transmitir esses dados a outro responsável pelo tratamento sem que o responsável a quem os dados pessoais foram fornecidos o possa impedir, quando o tratamento seja baseado no consentimento ou contrato, ou quando seja realizado através de meios automatizados.
Tem ainda o direito de apresentar reclamação junto à autoridade de controlo competente (em Portugal, a Comissão Nacional de Proteção de Dados em www.cnpd.pt).
Para além dos direitos acima descritos, sempre que o fundamento para o tratamento de dados seja o consentimento, o Utilizador tem o direito de retirar o consentimento prestado a qualquer momento, sem que tal invalide o tratamento de dados realizado até esse momento.
11 – COMO PODE EXERCER OS SEUS DIREITOS?
Poderá exercer os seus direitos através de contacto escrito para os seguintes endereços:
Por email: privacy@pastceram.com
Por via postal: Zona Industrial Casal da Areia – Lote 38/39 2460-392 Cós – Alcobaça (Portugal)
Caso nos solicite a eliminação de alguns dos seus dados pessoais ou da sua totalidade, alguns dos serviços solicitados poderão não lhe ser prestados. A PASTCERAM poderá ter que conservar apenas os dados pessoais que possam ser necessários para o cumprimento das obrigações legais a que se encontra vinculada.
12 – WHEN DO WE COMMUNICATE DATA TO THIRD PARTIES?
PASTCERAM may use third parties to provide certain services, such as maintenance, technical support, marketing, invoicing or payment management, which may have access to some of the personal data provided, in particular the data required for the contracted purposes.
For example, for data centre management purposes, PASTCERAM. uses the services of PTISP (better identified in point 9.3).
n particular, your data may be passed on to transport companies in order to ensure delivery of the order placed with the client.
PASTCERAM may also communicate your data to the following entities:
Companies in the business group to which PASTCERAM belongs and with which it has commercial partnerships for the creation and offer of benefits; or, Other partners outside your business group (with your prior authorisation).
PASTCERAM ensures that the entities that have access to the data are credible and offer high guarantees of protection, never transmitting data beyond what is necessary to provide the contracted service, although PASTCERAM remains responsible for the personal data provided.
PASTCERAM may also transmit data to third parties in the context of investigations, enquiries and judicial and/or administrative proceedings or of a similar nature, provided that it is duly ordered to do so by court order.
13 – 12 – THIRD PARTY WEBSITES.
Our website may contain links to other third-party websites that may collect and process your personal data, and this processing is the sole responsibility of the owners of these websites, and PASTCERAM is not responsible for their policies and/or practices.
Examples of these third parties are Facebook or Instagram via the buttons on the website.
14 – DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.
We will process your data within the European Economic Area.
In the event of data transfers to third countries not belonging to the European Union or the European Economic Area, PASTCERAM will comply with the law, in particular with regard to the suitability of the country of destination with regard to the protection of personal data and the requirements applicable to such transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of security and protection.
15 – MINORS
The website is not aimed at minors under the age of 18, so we ask that minors do not provide us with personal data through the website, application, social networks and social media or emails.
16 – SENSITIVE PERSONAL DATA.
Please do not send or disclose to us any sensitive personal data, i.e. information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data or data relating to a natural person’s sex life or sexual orientation.
If you still send or make known these categories of personal data, they will be deleted immediately.
17 – CHANGES TO THE PRIVACY POLICY.
We reserve the right to adjust or modify this Privacy Policy at any time, and such changes will be publicised on this website with the updated effective date.
We recommend that you (re)visit this policy periodically so that you are aware of any changes made.
18 – OUR CONTACT DETAILS.
If you have any questions or concerns regarding this Privacy Policy please contact us in writing at privacy@pastceram.com
LAST VERSION
14, 06, 2024, Alcobaça (Portugal).
