I. WHAT IS THE DATA TREATED AND HOW IS IT COLLECTED?
CLIPOURO – COMÉRCIO DE ARTIGOS DE PAPELARIA, INFORMÁTICA E DESENHO, LDA. (hereinafter CLIPOURO) only collects personal data that is appropriate, relevant and limited to what is strictly necessary for the purposes for which they are processed.
With respect to customers, customers’ collaborators, suppliers, partners, employees and collaborators, CLIPOURO collects the following personal data: identification data, professional data, professional activity or accounting, of their own, in the case of natural persons or their representatives in the case of legal persons such as name, nationality, contact, identity card details, position, duties, professional contacts and any personal data whose treatment is strictly necessary for the execution of a contract or for the fulfilment of legal obligations;
With regard to contact requests, CLIPOURO collects the following personal data: identification data such as name, email address, telephone or mobile phone number;
On the subscription of the Newsletter, CLIPOURO collects the following personal data: identification data such as e-mail address;
For applications, CLIPOURO collects the following personal data: identification data such as name, e-mail address and any data included in the curriculum vitae.
Personal data are collected by several means, including filling in forms on CLIPOURO's website, sending emails, telephone contacts, delivering personal cards, requesting proposals, sending professional applications, contracting the services of or by CLIPOURO.
II. RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA
Sandra Fernandes is the person within CLIPOURO who centralizes and is responsible for data protection matters, whose contact is [email protected]
III. WHAT IS THE LEGAL BASIS AND FOR WHAT PURPOSES ARE THE PERSONAL DATA TREATED FOR?
The legal basis for the processing of personal data of customers, customers’ collaborators, suppliers, partners, employees and collaborators, is the execution of a contract and compliance with legal obligations, as provided for in article 6, paragraph 1 b) and c) of the General Data Protection Regulation (Regulation (EU) 2016/679 or simply GDPR).
Processing of clients’ personal data, customers’ collaborators, suppliers, partners, employees and collaborators, is intended for any purpose directly related to the execution of the respective contracts or compliance with legal obligations, namely recruitment, hiring, contractual management, job management, accounting, business activity, customer management, communication, proposal submission and provision of services.
The processing of personal data for purposes other than those abovementioned, in particular personal data collected through CLIPOURO’s website or received by e-mail with contact requests, depend on the consent of the data subjects, as provided in article 6, point a) of the GDPR.
The processing of personal data collected through CLIPOURO's website or e-mail address will be used to respond to contact requests, such as sending proposals/estimates and other information about services, sending marketing communications such as newsletters, technical articles, information on events or other related activities and recruitment.
IV. PERSONAL DATA RETENTION
CLIPOURO only stores personal data in a way that allows the data subjects to be identified during the period strictly necessary to achieve the purposes for which it is processed, without prejudice of conservation for longer periods for the fulfilment of legal obligations.
It is therefore important to clarify that personal data concerning the recruitment and selection of candidates may be kept for the period necessary to fulfil the purpose (for example, if an applicant joins CLIPOURO, his/her personal data will be processed according to the purpose; if the candidate do not join CLIPOURO, his/her personal data may be kept in reserve for future recruitment processes for 1 year, without prejudice to the right of the holder to request the elimination of the data at any time).
In case of contact requests, personal data will be eliminated after 6 months from the submission of the request, without subsequent contact.
However, in order to comply with legal obligations regarding the preservation of books, accounting records and respective supporting documents, personal data may be kept for archiving purposes for a period of 12 years, pursuant to article 123, paragraph 4 of the Corporate Income Tax Code.
V. RIGHTS OF THE PERSONAL DATA HOLDER
CLIPOURO guarantees, at any moment, the right of access to your personal data, as well as its rectification, elimination, portability, limitation and/or opposition to the treatment of that data.
For this purpose, you may exercise any of these rights by writing to CLIPOURO and send it to its headquarters’ address or through the following electronic mail [email protected]
In addition, for this purpose you can always submit any complaints that you may deem necessary to the competent authority.
VI. RIGHT TO FORGET
The holder of the personal data shall have the right to obtain from the controller the elimination of his/her personal data, which in turn shall be obliged to delete them, where one of the following reasons applies:
(i) the data are no longer necessary for the purpose for which it was collected or processed;
(ii) the consent holder withdraws its consent, where consent is the legal basis or the holder opposes the treatment and there are no prevailing legitimate interests justifying their maintenance.
VII. SECURITY IN THE PROCESSING OF PERSONAL DATA
CLIPOURO strives to implement all necessary precautions to preserve the confidentiality and security of personal data collected and processed. To this extent, technical and organizational security measures have been developed, especially with regard to information systems.
CLIPOURO informs that the said security measures are reviewed and updated according to the needs and demands of these matters.
If, for any reason, a breach of security provokes an accidental or unlawful destruction, loss, alteration, disclosure or access, not authorized, for the personal data collected, CLIPOURO undertakes, in accordance with the applicable legislation, the report to the National Data Protection Commission without undue delay and, whenever possible, within 72 hours of being aware of such occurrence. CLIPOURO also undertakes the report of the violation of personal data to the respective owner, in accordance with the applicable law.
In addition, despite the security measures adopted by CLIPOURO, it should be pointed out that users should also take additional security measures, in particular to ensure the existence of an up-to-date active firewall, antivirus and antispyware.
VIII. TRANSMISSION AND COMMUNICATION OF PERSONAL DATA TO THIRD PARTY INSTITUTIONS
CLIPOURO only transmits personal data to third parties in cases where it is necessary for the provision of services or compliance with legal obligations to which CLIPOURO is subject, namely, judicial, regulatory and other public entities, CLIPOURO’s services providers, such as those of information technologies, chosen by the fulfilment of high requirements and that are bound to comply with the applicable legal rules regarding the protection of personal data.
The transmission, when due to the fulfilment of its provision of services or compliance with legal obligations to which CLIPOURO is subject or as a consequence of the consent of the data subject, is done with limitation of the data transmitted to the strictly necessary to the fulfilment of such obligations and through appropriate security measures. Personal data will not be transmitted in any other case without the authorization of the data subject.
In the scope of its activity, CLIPOURO may use third parties to provide certain services (located inside or outside the European Union), which may in some cases entail access by those entities to the personal data of users.
This way, CLIPOURO commits to adopt the necessary and appropriate measures, in order to ensure that entities that have access to such personal data are reputed and offer high guarantees at this level, which will be duly established and safeguarded in a contract to be written and concluded between CLIPOURO and third entity(ies).
Accordingly, any entity subcontracted by CLIPOURO will treat the personal data of users, on their behalf, with the commitment of taking the necessary technical and organizational measures to protect personal data against accidental, unlawful destruction, accidental loss, alteration, dissemination or unauthorized access and against any other form of illicit treatment.
However, CLIPOURO will remain responsible for the processing of personal data.
Whenever necessary, and considering the contracting of third parties by CLIPOURO, personal data may be transferred to outside the European Union, under the terms and conditions allowed by the applicable law.
IX. ACCESS TO THIRD PARTY WEBSITES
The cookies used by CLIPOURO allow you to improve the performance and navigation experience of your users, increasing, on one hand, the speed and efficiency of response and, on the other, eliminating the need to repeatedly enter the same information.
The cookies used on the site by CLIPOURO, do not collect personal information that allows to identify the user, storing only generic information, namely the platform or place/country of access and the way the user uses the site, among others.
Cookies retain only information related to the user's preferences and the user may, at any time and through his browser, decide to be notified about the receipt of cookies as well as block their entry into its system. Each browser has its own configuration process for this purpose.
Please note, however, that by disabling cookies, the user may partially or totally affect its browsing experience on the website.