Privacy Policy

RGPD - GENERAL DATA PROTECTION REGULATION

The company Duartesfer - Construções Metálicas, Lda. taxpayer PT 505 344 874 attaches the utmost importance to the protection of the data it collects, processes and uses personal information exclusively in compliance with the General Data Protection Regulation (GDPR) and in accordance with the principles described below.

1. General:
1.1 - Personal data is all information that relates to an identified or identifiable natural or legal person. This includes, for example, your name and telephone number, as well as your postal and e-mail address.
1.2 - We do not collect, process or use your personal data when you visit our website for information purposes only.
1.3 - Data processing consists of an operation or set of operations which is performed on personal data, whether or not by automated means, namely collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, restriction, erasure or destruction.

2. What types of personal data are processed, for what purposes and for how long are they kept?
2.1 - As part of its activities, Duartesfer, Lda. processes personal data necessary for the provision of services and/or supply of products, as well as other processing to which it is legally obliged. The data will be processed by Duartesfer, Lda. to the extent that it is necessary for the respective provision of services.
2.2 - Duartesfer, Lda. collects personal data in particular through written forms, by telephone and through commercial interaction between customers and the company.
2.3 - The personal data collected may be processed electronically and in an automated or non-automated way, in all cases guaranteeing strict compliance with personal data protection legislation, being stored in specific databases created for this purpose and, under no circumstances, will the data collected be used for any purpose other than that for which it was collected or the consent of the data subject was given.

2.4 - In general, the personal data collected is based on and intended for the management of the contractual relationship, the provision of the contracted services, the adaptation of the services to the needs and interests of the Client/User, namely for the purposes of access to specific functionalities of the services and information and marketing actions. In addition, personal data may also be processed for the purposes of complying with legal obligations and for the purposes of investigating, detecting and prosecuting serious crimes. Without prejudice to the additional information provided at the time of data collection, Duartesfer, Lda. may also, if legally permissible, use the personal data provided by the data subject for other purposes, such as sending complaints and suggestions, disseminating information ALVARÁ 50229 www.duartesfer.pt Contribuinte nº 505 344 874 - Capital 250.000€ Sociedade Por Quotas de Responsabilidade, Lda Registered with the Cons.Do Reg. Com.Barcelos Under No. 4770 MOD.083 .DF.1 institutional, news about the company's products and/or services, as well as for carrying out market research or evaluation surveys.
2.5 - The period of time for which personal data is stored and kept varies according to the purpose for which the information is processed. In fact, there are legal requirements that oblige data to be kept for a minimum period of time. Therefore, whenever there is no specific legal requirement, the data will only be stored and kept for the minimum period necessary to fulfil the purposes for which it was collected or subsequently processed, under the terms defined by law.


3. Transfer of data and use of data by third parties:
3.1 - We do not transfer your data to third parties unless we are legally obliged to do so or have obtained your consent to do so.
3.2 - In order to maintain our website, we have to make certain personal data available to our hosting provider. In such contracted data processing, these service providers are also contractually obliged to process your personal data solely for the same purposes as us and in compliance with statutory data protection provisions.
3.3 - In order to be able to continue to offer you and process the services you require, in certain circumstances data may be communicated abroad. In such cases, we will apply the appropriate contractual security measures so that any recipients abroad are bound by the same data protection regulations.
3.4 - Duartesfer, Lda. may use third parties to provide certain services in the course of its business. Sometimes the provision of these services implies access by these entities to the personal data of Customers/Users. When this happens, Duartesfer, Lda. takes the appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees at this level, which is duly enshrined and contractually safeguarded between the company and the third party(ies). Thus, any entity subcontracted to Duartesfer, Lda. will process the personal data of our Customers/Users in the name and on behalf of Duartesfer, Lda. and will adopt the necessary technical and organisational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorised access and against any other form of unlawful processing. In any case, Duartesfer, Lda. remains responsible for the personal data made available to it.

4. Who is the Data Protection Officer? The Data Protection Officer plays an important role in the processing of personal data, ensuring, among other things, that data processing complies with the legislation in force. The holders of personal data may, if they so wish, address a communication to the Data Protection Officer on matters relating to the processing of personal data, using the following contact details:
Email: rgpd@duartesfer.pt

5. How you can request to see, rectify, update, limit, delete, oppose or withdraw your consent to the processing of your personal data:
At any time you can request information about the data stored from the contacts indicated by the Data Protection Officer. You can also request the deletion, correction, objection and portability of your data. In the case of deletion of ‘Right to be Forgotten’ data, the data will be immediately deleted or anonymised, unless there are legal retention obligations on our part or on the part of official entities, whether fiscal or judicial; in these cases, the data will be stored but will no longer be processed until such retention obligation expires.

6. Medidas de segurança informática:
A empresa Duartesfer, Lda. adoptou medidas adicionais de segurança de forma a proteger os dados pessoais que gere. Todavia, dispomos de outros meios adicionais, além de medidas técnicas como software de segurança e controlo de acesso à informação de carácter pessoal, utilizadores restritos, políticas de segurança, utilizadores e palavras-passe que expiram conforme exigido no RGPD, e outros sistemas destinados a evitar o mau uso, alteração, acesso não autorizado e roubo dos dados pessoais disponibilizados à empresa Duartesfer, Lda.
A empresa Duartesfer, Lda. não será responsável pelos possíveis danos ou prejuízos que possam resultar de interferências, omissões, interrupções, vírus informáticos, avarias telefónicas ou falhas no funcionamento operativo de sistemas electrónicos, motivadas por causas alheias à empresa, de atrasos ou bloqueios causados por deficiências ou sobrecargas de linhas telefónicas ou sobrecargas no sistema de internet ou em outros sistemas electrónicos, assim como de danos que possam ser causados por terceiros através de intromissões ilegítimas fora do controlo da empresa Duartesfer, Lda. Qualquer quebra de segurança “Data Breach” que venha a ser detectado pela empresa Duartesfer, Lda. e que coloque em causa dados pessoais armazenados na nossa base de dados, será comunicado em 72 horas directamente à  CNPD – Comissão Nacional de Protecção de Dados and to ‘Data Subjects’ duly identified in our databases that are considered personal data.

7. Contact:
We are entirely at your disposal for questions about data protection and processing or requests for information. Please do not hesitate to contact us via email at rgpd@duartesfer.pt or via the alternative contacts listed on our website.

8. Changes:
We reserve the right to modify the Privacy Policy. Such changes will be publicised on our website and on our company's internal information boards.

Privacy Policy published on 13.11.2024
The Management Duartesfer - Construções Metálicas, Lda.