Name: Congrau Unipessoal Lda
NIPC: 514400153
Fiscal Address: Praceta do Satélite, Nº 9, Loja 03 2635-430 Rio de Mouro
Contact: +351 916 798 396 | contacto@congrau.pt
The purpose of this document is to establish and make known the rules and mechanisms for guaranteeing the privacy of all personal data received and stored by the company, within the scope of its commercial and employment activity, namely to inform you about which categories of personal data we collect, the purpose and legal basis for processing the data, with whom we share the data, the period of data maintenance, the rights you have and how you can exercise them and the obligations in case of data breach.
The company’s Privacy Policy is shared through all available communication media and applies to all information collected through the company’s website, Social Networks (Facebook, Instagram), as well as information you share or have shared with us in person, in meetings, interviews, by phone, SMS, email, letter or other means of correspondence. The processing of personal data will be carried out by the company.
If you wish to obtain additional information or clarify any doubts about our Privacy Policy and Processing of Personal Data, you can direct your questions by letter or e-mail:
Congrau Unipessoal Lda
A/C Encarregado Proteção de Dados/Politica de Privacidade
Praceta do Satélite, Nº 9, Loja 03
2635-430 Rio de Mouro
E-mail: contacto@congrau.pt
What is personal data and what personal data do we collect and use?
Personal Data is any information that can identify a natural person.
We collect and use personal data within the scope of the commercial activities that the company, as well as in the employment relationships (in the case of our employees) that is established. There are several types of personal data we use, including:
- Identification data (e.g. name, ID numbers, nationality, date and place of birth);
- Contact details (e.g. address, telephone, email address);
- We do not collect sensitive data – biometric data, genetic data, health data, data of racial or ethical origin, data relating to sexual life or orientation, political opinions, religious or philosophical beliefs, with the exception of trade union membership (applicable only to employees due to compliance with legal obligations).
Indirect collection of other data
We may indirectly have access to personal data of:
- Family members;
- Legal representatives or proxies;
- Partners of the partnership;
- Employees of our customers, suppliers, service providers and partners
All this data will be treated with the same security and privacy.
What is the Basis and Purposes
Basis
- Consent
Based on the prior consent of the data subject, which must be free, informed and unambiguous;
- Legitimate interest
When the processing of the data corresponds to a legitimate interest on the part of the company with a view to developing our activity and providing our services, as well as its employment relations;
- Compliance with all legal, regulatory and judicial obligations
When the processing of personal data is necessary to comply with all legal, regulatory and judicial obligations to which the company is subject.
- Pre-contractual due diligence, implementation and contract management
- Request your consent for specific processing outside this scope
Purposes
The use of personal data is necessary in particular for:
- Management and monitoring of customers/suppliers;
- Marketing activities, such as: presentation of products/services, sending newsletters, promotional campaigns and actions, satisfaction surveys, market research, profile analysis.
- Compliance with all legal, regulatory or judicial obligations that the company is bound by in the commercial and employment field;
- Complaints management;
- Recruitment processes;
- Internship processes;
Who we share personal data with
In order to fulfill the purposes described above, it may be necessary to share your data with:
- Official, Regulatory, Judicial and Police Entities
For compliance with all legal obligations, as well as participation in programs and support.
- Service providers and subcontractors
It may be necessary to share personal data with third parties within the scope of the activity and according to each objective, such as, for example, insurance companies, occupational health and safety service companies, travel agencies, training companies, technical assistance, support for e-commerce activities, hosting of our websites, among others.
- Business partners
In these cases we may share your data with these partners to optimize our products and services.
- Customers and Suppliers
Some personal data of employees, in the context of the execution of the functions that each employee performs, may have to be shared with customers and suppliers.
These entities if they belong to the EU will have the responsibility to comply with the provisions of the GDPR but the company will take all possible measures within its reach to ensure that all entities with which it shares personal data respect our Privacy Policy and therefore protect the personal data entrusted to them.
What are the retention periods for personal data
Personal data will be kept for an indefinite period of time, that is, until the data subject requests its total or partial deletion or withdraws his consent, provided that this request does not conflict with the fulfillment of contractual or legal and regulatory obligations to which the company is obliged.
What are the rights of personal data subjects
The holder of personal data, in accordance with the applicable rules, has the right to information, access, rectification, deletion, limitation, objection and portability of data, as well as to contest automatic decisions and to withdraw his consent.
- Right to information, access and rectification
The data subject may, at any time, access the data provided to us, request its rectification, as well as obtain information regarding its processing, and we undertake to follow up within a maximum period of 30 days.
- Right to disposal
The right to deletion is also recognized, with personal data being deleted, within the period referred to above, from the date of the request, provided that there are no valid legal grounds for its retention.
- Right to limitation and objection
You can request restriction, as well as object to the processing of personal data, in particular when the data are processed for direct marketing purposes.
- Portability of personal data
You have the right to request the company, where legally permissible, to send your personal data to another organization, unless this transfer by its extent implies high means and costs.
- Automatic decisions
Where applicable, the data subject has the right to challenge automated decisions such as profiling by requesting human intervention by the Data Controller.
- Withdraw your consent
The data subject may withdraw his/her consent to the extent legally permissible. This does not compromise the lawfulness of the processing carried out until that date.
If the holder wishes to exercise his rights as described above, he may do so by registered letter or by e-mail to the contacts listed below, being essential, in order to guarantee the security and confidentiality of the process, proof of identity of the holder.
Congrau Unipessoal Lda
A/C Encarregado Proteção de Dados/Politica de Privacidade
Praceta do Satélite, Nº 9, Loja 03
2635-430 Rio de Mouro
E-mail: contacto@congrau.pt
It should be noted that if there are legal rules or imperatives that override these rights, the company will respond to the impossibility and the reason for not being able to comply with the request, within a maximum period of 30 days.
The company, valuing the trust that the data subject places in us when granting his consent, has adopted the technical, physical and organizational measures appropriate to the GDPR ensuring that personal data are properly protected against unauthorized or unlawful use, alteration, unauthorized access or disclosure, accidental or purposeful destruction and loss.
The company’s Privacy Policy applies to its employees, sole proprietors and will also be extended to legal persons where the processing of personal data of managers, legal representatives and/or their employees is concerned.
The company reserves the right to change its Privacy Policy in the face of legislative changes or due to its activity.