Privacy Policy

DATA PRIVACY POLICY

The PORTAX company is committed to protecting the privacy of all its customers, suppliers, and has therefore drawn up this policy to demonstrate its effort and commitment in the defense of the rights of the personal data owners, in accordance with the general regulations for the protection of data and other applicable legislation.
PORTAX respects the best practices in the field of security and personal data protection, having for that purpose developed and implemented a demanding set of technical and organizational measures capable of protecting the data that are available to us by all those who somehow relate to the Company.
In this context, the PORTAX company has a Responsible for the Protection and Treatment of Personal Data, responsible for the implementation and verification of this Privacy Policy as well as for the definition of clear rules for the processing of personal data, ensuring that all those who entrust us with the treatment of your personal data, are aware of how the Company treats the data and what rights you have in this regard.

Responsible for the protection and processing of personal data

The PORTAX company is responsible for the protection and processing of the personal data of all its customers and / or potential clients, suppliers and subcontractors, of which we tredata in a licit form.

Any communication about the collection and processing of your personal data should be directed to:

Responsible for the Treatment of Personal Data - computer department
PORTAX – Componentes de Móveis, S.A.
e-mail rgpd@portax.pt and / or address:
Apartado 18 – Zona Industrial de Vilarinho
3684 909 Oliveira de Frades

Scope of Application

This data protection policy applies to all natural persons, owners of personal data, collected and processed by the company PORTAX concerning:

• Pre-contractual procedures at the request of the data subject;
• Clients with whom a contractual relationship has been established in the provision of services or supply of products marketed by the PORTAX company;
• Suppliers with whom a contractual relationship of provision of services or supply of merchandise has been established;
• Subcontractors of the PORTAX company, to whom we provide personal data, under contract of subcontractor;
• Holders of the data that gave their explicit consent to the collection and processing of their personal data for the purposes of marketing, advertising, evaluation of service satisfaction and any other duly identified.

Categories of personal data we treat

How and when we collect your personal data - Treatment basis
Your personal data will be collected and processed in the following situations:

• Execution of pre-contractual arrangements when the collection and processing of personal data is necessary for the preparation and submission of proposals for services and supplies of products.
• Execution of contract and contractual relations, when the collection and processing of personal data is necessary for the conclusion of contract, execution and management of the contract and / or contractual relationship (eg address of delivery or provision of the service, contact management, information and orders, billing management, collections and payments);
• Compliance with legal obligations that PORTAX is subject to;
• If you are a supplier of the PORTAX company;
• If you are a subcontractor of the PORTAX company;
• If you have given your consent to the collection and processing of your personal data and if such consent is free, informed, specific and unambiguous.
  

Purpose of Collection and Treatment

Our main objective is that all data collected are fully adequate for its purpose and are not subsequently treated in an incompatible manner.
The data collected depends on the purpose of the data and is always limited to what is strictly necessary.
If you send us data that we do not need, we will delete it and / or return it to the owner of the personal data, or person responsible for the personal data.
Since all requested data are limited to their purpose, they are mandatory, and, in case of lack or insufficiency of such data, the PORTAX company will not be able to provide the services in question and PORTAX will inform the compulsory nature of the data.
When the collection and processing of personal data is not based on a legal basis, we request the consent of the holders of personal data for specific purposes, in a clear, informed, explicit manner, so that the consent is a clear positive act, indicating a manifestation clear, free, specific, informed and unequivocal / explicit information that the data subject agrees to the processing of data concerning him / her.
The personal data collected are treated in a computerized manner and strictly in compliance with the legislation on the protection of personal data. They are stored in a specific database created for this purpose and in no case will the data collected be used for any purpose other than that informed to the users or the one for which consent was given by the data subject.

Time to process and keep personal data
PORTAX treats and stores personal data according to the purposes for which it is processed.
Personal data are processed by PORTAX only for the period necessary to achieve the defined purpose or according to the applicable law or until you exercise your right of opposition, to be forgotten or withdraw your consent.
As such PORTAX will treat and maintain personal data for the period in which it maintains a contractual relationship with the data subject, however we may have to maintain personal data superior to the contractual relationship, either based on the consent of the holder, or to ensure rights or duties related to the contract, or because it has legitimate interests that justify it, but always for the period strictly necessary to achieve the respective purposes and in accordance with the guidelines of the CNPD.
Personal data collected and processed after the consent of the holder, will be kept until the limit of 5 years, period from which will be requested new consent to the data holder and if in this period, he has not withdrawn his consent.
After the respective storage period has elapsed, PORTAX will delete or anonymize the data when they are not to be kept for a different purpose that can be maintained.

Right of access, rectification, erasure, limitation or opposition to the treatment of your personal data
In accordance with the General Data Protection Regulation, the data subject is entitled to access, rectify, erase, limit and portability of their personal data.

Subject to certain conditions, you may have the right to request us:

• Availability of additional information about how we use your personal information;
• Copy of the personal data you have provided to us;
• That we provide your personal data, to another responsible for the treatment, at your request;
• Updating of any inaccuracies in the personal data that we retain;
• Erase of personal data whose use is no longer legitimate;
• Limitation of how we use your personal data until the complaint is investigated.
• Opposition to the processing of personal data concerning him, provided that there are no overriding and legitimate reasons for the treatment.

The exercise of your rights is subject to certain exceptions intended to safeguard the public interest (prevention or detection of crimes) or our interest (maintaining professional secrecy) or the legislation to which the PORTAX company is subject.

Deadline for response
If you exercise any of these rights we will analyze them and we will respond, within 30 days.

How to exercise your rights
The exercise of your rights is free, unless it is a manifestly unfounded or excessive request, in which case a fee of € 25.00 may be charged.
The information must be provided in writing, but if requested, can be provided orally, and your identity must be demonstrated by other means than verbal.

Exercise your rights through:

PORTAX – Componentes de Móveis, S.A.
e-mail rgpd@portax.pt and / or address:
Apartado 18 – Zona Industrial de Vilarinho
3684 909 Oliveira de Frades

Right of opposition and individual automated decisions, including profile definitions

The PORTAX company does not subject the data subjects to any decision made solely on the basis of automated processing, including the definition of profiles.
Right to complain to a supervisory authority
Holders of data have the right to submit a complaint to a supervisory authority, if you are unhappy with our use of your personal data or with our response after exercising any of these rights, you have the right to complain to your authority of control (Comissão Nacional de Proteção de Dados – CNPD | Rua de São Bento, n.º 148, 3º, 1200-821 Lisboa | Tel: 351 213928400 | Fax: +351 213976832 | e-mail: geral@cnpd.pt).

Communication of violation of personal data to the holder

In the event of a violation of personal data, and if this constitutes a high risk to their rights and freedoms, data subjects shall be informed of:

the nature of the violation of personal data;

• categories of personal data;
• number of affected data holders;
• approximate number of records of personal data concerned;
• Likely consequences of violation of personal data;
• Measures taken and / or proposed by the Person in charge of the Processing of Personal Data, in order to remedy the violation of personal data, and if applicable, measures to mitigate any negative effects.

Consent
The PORTAX company requests the consent of the data subject, who should give it, if it so wishes, by means of a positive act, indicating a clear, free, specific, informed and unequivocal / explicit statement that it has consented to the processing of data respect.
Whenever the PORTAX company requests your consent, if you need any additional information received when collecting your consent, you can request it from the Person Responsible for the Collection and Processing of Personal Data for the e-mail rgpd@portax.pt.
Whenever you wish to receive marketing campaigns, advertising of our services, you must give authorization to do so.

How you can change or withdraw your consent
You may at any time change or withdraw your consent, with effect for the future.
To do this you must send a letter or e-mail to the contacts mentioned above.

Measures taken by the PORTAX company to ensure the security of your personal data
The PORTAX company has implemented strict technical and organizational measures, necessary and sufficient to protect your personal data against its dissemination, loss, misuse, alteration, treatment or unauthorized access, as well as against any other form of illicit treatment.
Compliance with these rules is an undeniable obligation of all those who legally access them.
We use a variety of security measures, including encryption and authentication tools, to help protect and maintain the security, integrity, and availability of your personal information.
Although data transmission via the internet or website can not guarantee complete intrusion safety, we and our subcontractors make the best efforts to implement and maintain physical, electronic and procedural safeguards to protect your personal data accordingly with the applicable data protection requirements. Among others, we have implemented the following:

• Restricted personal access to your personal data based on the criterion of "need to know" and only within the scope of the purposes communicated;
• All accesses are limited and defined according to the exclusive need, for the performance of the function and implementation of the service, which originated the need to collect the personal data of natural persons, guaranteeing their confidentiality;
• All employees of the PORTAX company, with special emphasis on those who have access to and treat personal data of natural persons, are subject to confidentiality rules and are fully aware, aware, informed and trained about the application of the general protection regulations of data;
• Data protection from conception (privaci by design) and a set of privacy-friendly preventive measures (privacy by default);
• Transfer of data collected only in encrypted form;
• Protection of information technology systems through firewalls, in order to prevent unauthorized access to your personal data;
• The existence of a strict policy on access to computer systems and information and registration of actions carried out by PORTAX employees, on personal data of customers, suppliers and subcontractors (logging);
• Continuous monitoring of access to information technology systems in order to prevent, detect and prevent the misuse of their personal data;
• Audit and control mechanisms to ensure compliance with security and privacy policies;
• An information and training program for employees.

Transfer of data to subcontractors
Your data may be transmitted to subcontractors for them to handle in the name and on behalf of PORTAX.
When this happens, the PORTAX company takes the appropriate measures, in order to ensure that subcontractors, who have access to personal data, are in compliance with the General Regulation of Protection of Personal Data and offer the highest guarantees at this level, which will be duly stipulated and safeguarded in a contract signed between the company PORTAX and the subcontractor.

Changes to the Privacy Policy
PORTAX reserves the right at any time to make adjustments or changes to this Privacy Policy, these changes being duly publicized on the Company's website.