follow us
    Extrunorte > Privacy Policy

    Privacy Policy

     

    Responsible for Treatment

    Extrunorte, Unipessoal is a company dedicated to extrusion and recycling. In order to carry out its business, it needs to collect and process personal data from its customers, employees or third parties who have dealings with it, and as such it assumes the role of Data Controller with all the obligations that such a position entails.

    We know how important personal data is to its owners and that is why we have made ourselves available so that you can easily and free of charge exercise all your rights by sending an e-mail to: geral@extrunorte.pt

     

    Identity and mission

    Extrunorte's main focus is on satisfying its customers, from whom it needs to collect personal data. At the same time, it also collects and processes employee data. And although data processing is complementary to its activity, it guarantees that it will do so in strict compliance with the GDPR and the law.

    We consider the privacy of our customers, employees and others to be an essential asset and one to which we will give the utmost protection.

     

    Personal Data

    Personal Data means all information, regardless of its nature or medium, relating to a perfectly identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly by means of an identifier, such as a name, identification number, location data, electronic identifier or other elements specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

     

    What categories of personal data do we process?

    In order to manage our business and provide our best services, we process identification data (name, gender, civil and tax identification number, nationality, date of birth, other personal data), your contact details (address, telephone number, e-mail address). With regard to our employees, we collect the same type of data as mentioned above, plus data relating to their marital status, household and educational qualifications, social security number.

     

    Collection and Processing of Personal Data

    The sole purpose of collecting and processing the data of our clients and employees is to provide the services that constitute our mission and to enter into employment contracts. Personal data is accessed directly, indirectly or even through direct contact with clients and employees.

     

    What are the grounds and purposes for processing personal data?

    The purposes for processing your personal data are to manage the contract (employment and service provision) and to provide the best service and comply with legal and contractual obligations.

    As for the legal grounds for processing personal data, they are identified as (1) Consent (in relation to authorization to capture and disclose an image), (2) Performance of a contract or pre-contractual steps (when the processing of personal data is necessary for the conclusion, performance and management of the employment contract or provision of services), (3) Compliance with a legal obligation (when the processing of personal data is necessary to comply with a legal obligation to which the Foundation is subject, such as the communication of data to police, judicial, tax or regulatory entities, or (4) Pursuit of our legitimate interest (when the processing of personal data corresponds to a legitimate interest of Extrunorte), and may also be due to (5) safeguarding the vital interests of clients or employees.

    The data will be processed and stored in accordance with the purposes and for the minimum legal period necessary.

     

    Responsibility of subcontractors

    Your data may be processed by entities subcontracted by Extrunorte, and only the data necessary to perform the required service will be provided to these entities.

    We apply the following data processing rules to all our activities and to third parties and subcontractors:

    - personal data will be processed in compliance with the legal data processing regime, this privacy policy and with the guarantee of lawful, fair and transparent processing;

    - the data collected is merely instrumental to our activity, intended to pursue a specific, specific and legitimate purpose, with no further processing incompatible with these purposes;

    - we respect the principle of data minimization, collecting only the data considered adequate, relevant and necessary for the purposes of collection and processing;

    - in compliance with the principle of accuracy, we will keep your data accurate and up-to-date whenever necessary, and we will adopt and make available to its owner all the necessary measures to guarantee its integrity;

    - we assume the principle of preserving your data in such a way that it is possible to identify you only for the period necessary for the purposes for which the data is processed;

    - we will process your data in accordance with the principle of security - protecting your data from possible unlawful and unauthorized processing, preventing possible loss, destruction or unforeseen damage, adopting all appropriate technical and organizational measures for data processing that guarantees the security, integrity and confidentiality of the data;

    - whenever you are asked to consent to the processing of data, we will provide the necessary information regarding the purposes of the processing and we will stick to these purposes.

     

    Rights of the Holder

    The holders of personal data have the following rights, which they can exercise easily and free of charge:

    Right of Access - the right to obtain confirmation of what personal data is being processed and information about it.

    The right to see or obtain a copy of, for example, invoices or written agreements.

    Right of Rectification - the right to request the rectification of inaccurate personal data or to request that incomplete personal data be completed.

    Right to erasure or "right to be forgotten" - the right to have your personal data erased, provided that there are no valid grounds for retaining it, such as when Extrunorte has to retain the data in order to comply with a legal obligation or to exercise a right.

    Right to Portability - the right to receive the data you have provided in a commonly used, machine-readable digital format.

    Right to Withdraw Consent - when data processing is based on the Customer's agreement, the Customer has the right to withdraw their consent at any time. Withdrawal of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given.

    Right to object - in cases where the processing of data is carried out for the purposes of Extrunorte's legitimate interests, or the processing is carried out for the purposes of direct marketing or profiling based on your personal preferences or interests, you may also object to the processing of personal data at any time.

    Right to restriction of processing - the right to request the restriction of the processing of your personal data, in the form of (1) suspension of processing or (2) limitation of the scope of processing to certain categories of data or processing purposes.

    Right to lodge a complaint - the right to lodge a complaint with the supervisory authority, the National Data Protection Commission, in addition to being able to do so directly with Extrunorte, if you consider that your data is not being processed legitimately.

    The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a fee may be charged. You should send your written communication to the following e-mail address: geral@extrunorte.pt

     

    Technical and organizational guarantees for the protection of personal data

    In order to guarantee the security of the data of users, employees and other data subjects, as well as maximum confidentiality, Extrunorte treats all personal data in an absolutely confidential manner, in accordance with its internal security and confidentiality policies and procedures, which are updated periodically according to needs, as well as the terms and conditions provided for by law.

    Depending on the nature, scope, context and purposes of the data processing, as well as the risks arising from the processing for the rights and freedoms of the data subjects, we apply the necessary and appropriate technical and organizational measures to protect the data, both at the time of defining the means of processing and at the time of the processing itself.

    Extrunorte also undertakes to ensure that, by default, only data that is necessary for each specific processing purpose is processed and that this data is not made available without human intervention to an indeterminate number of people.

     

    Applicable Laws and Jurisdiction

    The Privacy Policy, as well as the collection, processing or transmission of Customer and Employee Data, are governed by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 and by the applicable laws and regulations in Portugal. Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or which are related to the collection, processing or transmission of Customer data, shall be submitted exclusively to the jurisdiction of the courts of the district of Guimarães, without prejudice to the applicable mandatory legal rules.