Privacy Policy
Figueira Castro, Lda has drawn up this Privacy Policy in order to demonstrate its commitment, transparency and respect regarding the privacy and personal data protection rules set out in the legislation in force concerning the protection and processing of personal data, namely REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 (GDPR), in its current version, relating to the protection of natural persons with regard to the processing of personal data and the free movement of such data, as well as the related legislation that may further define and supplement it domestically.
This Privacy Policy applies to all personal data processing activities carried out under the supervision and responsibility of Figueira Castro, Lda.
The Figueira Castro, Lda website ensures its users’ privacy and security regarding the data provided for the various services made available, with only the data necessary for the provision of the service being requested and collected, in accordance with the explicit indications on the website, namely within the terms and conditions of use and the user’s choices.
1 | What is personal data?
Personal data means any information, of any nature and in any format (physical, audio or image), relating to an identified or identifiable natural person.
A person is considered identifiable if they can be identified, directly or indirectly, for example through a name, identification number, location data, electronic identifiers or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
2 | What does the processing of personal data consist of?
In general, the Figueira Castro, Lda website may be visited without the need to disclose any personal information.
However, there is an area of the website where the user may provide their personal data in order to benefit from the services made available, namely contact requests, subscription to our newsletter and also within the scope of unsolicited applications and recruitment processes.
Figueira Castro, Lda is subject to a duty of confidentiality regarding the data to which it has access within the scope of the operations of its information systems, being fully aware of the importance of complying with the legal duty of secrecy and being responsible for compliance with this obligation of confidentiality.
The data provided by users will only be used in carrying out the service or request selected by them, for which the data was supplied, and will not be used to send information unrelated to the activities and services of Figueira Castro, Lda.
3 | What is the legal basis for and purpose of processing personal data?
Figueira Castro, Lda only processes personal data where there is a legal basis justifying such processing.
The legal bases for the processing of personal data of customers, suppliers and partners are the performance of a contract and compliance with legal obligations, as provided for in points (b) and (c) of Article 6 of the GDPR.
4 | What are the rights of personal data subjects?
Under the legislation in force concerning personal data protection, we inform you that data subjects are guaranteed the right to be informed; the right of access to personal data; the right to rectify, erase and block the personal data provided; the right to restriction of processing; the right to erasure of their data; and the right to data portability.
5 | Who is responsible for processing personal data?
The entity responsible for collecting and processing personal data is Figueira Castro, Lda, which, within this scope, decides which data is collected, the means of processing and the purposes for which the data is used.
6 | Who is the Data Protection Officer?
Figueira Castro, Lda has a Data Protection Officer who:
Monitors compliance of data processing with the applicable rules;
Acts as a point of contact with the User for clarifying issues relating to the processing of their data by Figueira Castro, Lda;
Cooperates with the supervisory authority;
Provides information and advice to the controller or processor regarding their obligations in the field of privacy and data protection.
7 | How can I contact the Data Protection Officer?
Data subjects may exercise their rights via the email address geral@fcastro.pt, as well as by post, by sending correspondence to Figueira Castro, Lda. with the following details:
Subject: Exercise of rights – personal data protection
FAO: Tomás Castro
Rua Capitão Pombeiro, no. 55
4250-373 PORTO
8 | To whom is personal data disclosed?
The personal data collected through the Figueira Castro, Lda website is not disclosed to third parties, except where such disclosure is necessary for compliance with legal obligations. Personal data may be shared between the internal departments of Figueira Castro, Lda for the purposes of responding to contact requests, recruitment and marketing communications.
9 | How long is personal data retained?
Figueira Castro, Lda only retains personal data in a manner that permits the identification of data subjects for the period necessary for the purposes for which the data is processed, without prejudice to the need to retain it for longer periods for compliance with legal obligations.
In particular, personal data is deleted after:
a) 6 months from submission of the request, where there has been no subsequent contact, in the case of contact requests;
b) 2 years from the date consent was obtained, in the case of personal data collected through Newsletter subscriptions;
c) 5 years, in the case of personal data collected through applications;
10 | How is data security guaranteed?
Figueira Castro, Lda undertakes to implement the appropriate technical and organisational measures to ensure and demonstrate that processing is carried out in accordance with the GDPR, taking into account the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of natural persons, the likelihood and severity of which may vary.