Privacy Policy (GDPR)

What is our commitment?

Prodiplás, Lda, as part of its commercial activity, needs to collect and process personal data.

However, the protection of privacy and personal data is a fundamental commitment of Prodiplás, Lda, to all those who interact with it within the scope of its activity.

Prodiplás, Lda, has adopted this Privacy Policy with the intention of making its principles known in the care it gives to personal data.

Believing that fair and transparent data processing is one of the main factors of trust in a business relationship, Prodiplás, Lda undertakes the following commitment to all those who interact with it:

  1. To handle personal data in a fair, lawful and transparent manner and only for specific, explicit and legitimate purposes;
  2. Only process data that is appropriate, relevant and necessary for the purposes for which it is collected;
  3. Keep data up to date;
  4. Keep the data in a secure and confidential manner and only for as long as is necessary to fulfill the purposes for which they are collected;
  5. Not commercialize customer data;
  6. Not pass them on to third parties, except when necessary to fulfill the purposes for which they are collected or by legal imposition.

Through its Privacy Policy, Prodiplás, Lda also intends to share, in a clear and transparent manner, how it collects, processes, shares and protects the personal data of its customers when purchasing its products, using its services or visiting its website.

If you have any questions regarding this Privacy Policy or the processing of personal data by Prodiplás, Lda, you can contact us using the following methods:

Letter: To Head Office: Prodiplás, Lda

Travessa do Bairro Social, 169 3885-523 Esmoriz

Email: lojaonline@prodiplas.com

Who is responsible for processing personal data?

Insofar as it determines the purposes and means with which it processes your personal data, within the scope of its commercial activity, Prodiplás, Lda is the entity responsible for its processing within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter GDPR).

What kind of data is collected and processed?

The personal data collected and processed by Prodiplás, Lda within the scope of its activity is limited to that which is strictly necessary for the fulfillment of the purposes for which it is collected, namely: identification data, contact data, billing data, website navigation data, as well as that which is strictly necessary for the supply of products and services or the provision of requested information.

When and for what purposes is the data collected?

Personal data may be requested, for example, when purchasing products or services in one of the Prodiplás, Lda stores or through the website, when creating a customer account on the Prodiplás, Lda website, when joining the loyalty program or to follow up on any question or request you may have.

When purchasing products and/or services from Prodiplás, Lda (e.g. issuing invoices, home deliveries, installation of items, etc.), some personal data may be required (e.g. VAT number, address, telephone number) for its provision, otherwise it will not be possible to provide the services or goods requested. When this is the case, Prodiplás, Lda will inform you of this obligation.

Prodiplás, Lda is not responsible for processing data that is provided incorrectly or inaccurately by the data subject.

The collection and processing of personal data by Prodiplás, Lda is essentially for the following purposes

RECORDING TELEPHONE CALLS:

As part of its commercial activity, Prodiplás, Lda communicates with its customers through telephone channels it makes available to its customers, either to provide assistance when purchasing goods or services, to provide information on their availability and/or characteristics, or to clarify any other issues raised by its customers.

In the interests of transparency and protecting the interests of the parties, Prodiplás, Lda keeps a record of these communications, in particular to enable the legitimacy of the information provided during the contractual relationship to be ascertained, as well as to assess the quality of the service provided:

Purpose Legal basis Retention period
Communications made in the context of a contractual relationship. Consent of the data subject.

90 days

Monitoring service quality.

 Consent of the data subject. 30 days

RECRUITMENT:

Prodiplás, Lda collects and processes the personal data of its candidates during the staff selection and recruitment process and/or when carrying out internships.

Purpose Legal basis Retention period
Selection and Recruitment Consent of the data subject. 1 year
Sending information about new job opportunities and/or internships Consent of the data subject. 1 year

REQUESTS FOR INFORMATION AT THE CLIENT'S REQUEST:

In addition to the purposes described above, personal data may also be collected and processed to answer questions, suggestions or respond to complaints submitted by the respective holder to Prodiplás, Lda.

Transfer of data to third countries

The personal data collected by Prodiplás, Lda will preferably be processed within the European Union.

Whenever there is a need to transfer data to a third country, this will be done under the terms and conditions imposed by law, namely the General Data Protection Regulation (GDPR).

The right to obtain from the data controller the restriction of processing if one of the following situations applies:

  1. To contest the accuracy of personal data;

With whom can Prodipás, Lda share your data?

The sharing of personal data will only be carried out under the terms permitted by the legislation that regulates the processing of personal data, with these entities being obliged to a duty of secrecy and to guarantee the security and confidentiality of the data and will be carried out exclusively under a commitment not to process this data for any other purpose, or for their own benefit, or to relate it to other data they hold.

Personal data may also be made available to third parties, namely tax authorities, courts, other public and/or police entities/authorities, in strict compliance with the law.

What rights do data subjects have?

The General Data Protection Regulation (GDPR), as well as Law no. 58/2019, of August 8, which ensures its implementation in Portugal, grant the data subject a set of rights, namely:

Right of access:

The right to obtain confirmation from the controller as to whether or not personal data concerning you is being processed and, if so, the right to access your personal data and how it is processed.

Right to rectification:

The right to obtain, without undue delay, from the controller, the rectification of inaccurate and/or incomplete personal data concerning you.

Right to erasure ("right to be forgotten"):

The right to obtain from the controller, the erasure of your personal data, where:

  1. The data is no longer necessary for the purpose for which it was collected or processed;
  2. The data subject has withdrawn their consent, unless there is another legal basis for the processing;
  3. The data subject opposes the processing, unless there are overriding legitimate interests justifying the processing;
  4. The personal data has been processed unlawfully;
  5. By legal obligation.

 

Right to restriction of processing:

The right to obtain from the controller the restriction of processing if one of the following applies:

  1. To contest the accuracy of the personal data;
  2. The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of its use instead;
  3. The controller no longer needs the personal data for processing purposes, but such data is required by the data subject for the purposes of declaring, exercising or defending a right in legal proceedings;
  4. If you have objected to the processing of the data, until it is established that the legitimate grounds of the controller prevail over those of the data subject.

 

Right to data portability:

The right to receive personal data concerning you that you have provided to the controller when:

  1. The processing is based on consent or the performance of a contract; and
  2. The processing is carried out by automated means.

Right to object:

The right to object at any time to the processing of personal data concerning you, including profiling, when:

  1. when the data is processed for direct marketing purposes;
  2. the processing is based on a legitimate interest of the controller;
  3. when the data is processed for purposes other than those for which it was collected. 

 

Automated individual decisions, including profiling:

The right not to be subject to any decision taken solely on the basis of automated processing, including profiling, unless the decision:

  1. Is necessary for entering into, or the performance of, a contract between the data subject and a controller;
  2. Is based on the consent of the data subject;
  3. Is permitted by law.

 

Withdrawal of Consent:

The right to withdraw your consent at any time. Withdrawal of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given.

How can you exercise your rights?

In order to exercise any of the rights granted to you by law, you must use the following means:

Letter: To head office address: Prodiplás, Lda

Travessa do Bairro Social,169 3885-523 Esmoriz

Email: lojaonline@prodiplas.com

Requests addressed to Prodiplás, Lda must be made in writing, clearly identify the sender and be duly substantiated, in order to enable Prodiplás, Lda to take the best possible action.

Once the request has been received in the terms described above, Prodiplás, Lda undertakes to deal with it without undue delay, within a maximum period of 1 month from the date of receipt. In view of the complexity of the request, this period may be extended, with prior notice, by up to two months.

Prodiplás, Lda would like to point out that for justified reasons (e.g. legal obligation or execution of a contract), the request may not be fully or partially satisfied. Nonetheless, this circumstance will always merit a reasoned response.

The Data Protection Officer

In order to ensure that its values and commitments regarding the processing of personal data are effectively complied with, Prodiplás, Lda has appointed a Data Protection Officer, to whom the data subject can turn, for example:

  1. when he/she does not agree with the answer given by Prodiplás, Lda, following a request made for the purpose of exercising rights;
  2. when Prodiplás, Lda does not respond, in due time, to a request submitted for the purpose of exercising rights, nor justifies the lack of response.

You can contact the Data Protection Officer of Prodiplás, Lda, through the following means:

Letter: Data Protection Officer:

Travessa do Bairro Social,169 3885-523 Esmoriz

Email: lojaonline@prodiplas.com

The National Data Protection Commission (CNPD)

In addition to the means of contact that Prodiplás, Lda makes available to you, you can also use the services of the data protection regulator (the National Data Protection Commission) to obtain any clarification, make a statement or submit a complaint about the way your data is processed.

Data security and confidentiality

As one of its commitments, Prodiplás, Lda makes every effort to guarantee a high level of security in the processing of data.

To this end, it has adopted various physical, logical and technical organizational security measures, especially with regard to information systems, in order to protect personal data against its dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of illicit processing.

However, Prodiplás, Lda cannot and does not control all the risks related to the use of the Internet, and hereby warns of the possible existence of risks associated with its use and operation, and consequently, with the sharing of personal data via this route.

Notwithstanding the security measures adopted by Prodiplás, Lda, the owner of the data must keep the access codes secret and not share them with third parties, and must also follow the recommended security practices, in particular the installation and updating of the necessary security applications, namely antivirus.

Sign in

Megamenu