Privacy Policy
OBJECTIVE
This Privacy Policy aims to provide information on the identification of personal data collected when you interact with the website https://manfercan.com or when you intend to do or do business with the company, how the data is collected, its purpose, processing, as well as information about the security measures adopted to protect the identity of the personal data subject and their respective personal data.
In compliance with the General Data Protection Regulation (GDPR), we guarantee the privacy of the personal data subject, ensuring confidentiality, appropriate treatment, and protection of the data obtained, for strict compliance with the legislation in force.
This Privacy Policy does not apply to the personal information of employees, candidates, or commercial partners.
To understand our practices regarding personal data, we recommend reading this Privacy Policy carefully and entirely.
GLOSSARY
Personal data: Under the GDPR, personal data is considered any information relating to an identified or identifiable natural person (referred to as the “personal data subject”). A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, IP address (internet protocol), cookies, electronic identifiers, or to one or more specific factors of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person. A set of distinct pieces of information that can lead to the identification of a specific person also constitutes personal data.
Personal data subject: The personal data subject is the natural person to whom the data relates.
Processing of personal data: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction.
Data controller: The legal entity which, individually or jointly with others, determines the purposes and means of the processing of personal data.
Data processor: A natural or legal person, public authority, agency, or other body which processes personal data on behalf of the data controller.
Third party: A natural or legal person, public authority, agency, or body other than the data subject, data controller, data processor, and persons who, under the direct authority of the data controller or data processor, are authorized to process personal data.
Personal data breach: A breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.
DATA CONTROLLER
The entity responsible for the collection, processing, and protection of personal data is MANUEL FERNANDES CANAS, LDA., corporate entity no. 500701202, headquartered at Zona Industrial de Assequins, 3750-304 Águeda, telephone contacts +351 234 622 881 / +351 234 623 466 and e-mail manfercan@manfercan.com, which, within the context of the relations it maintains with the personal data subject, establishes, always under a lawful and legitimate basis, which data is collected, the means of processing, and the purposes of such collection and processing.
SCOPE, INFORMATION AND CONSENT
This Privacy Policy applies to personal data collected through:
- Online services: website managed by the data controller, web and mobile applications, social media pages, and e-mail messages;
- Offline interactions: when you contact our customer service or intend to do or do business with the company.
This Privacy Policy applies to information collected by us and does not extend to information that the personal data subject may have submitted on other websites, platforms, or services managed by other entities or organizations.
The submission of personal data for the purposes indicated below causes the data controller to assume its ownership, as well as your acceptance of its collection and processing under the terms described in this Privacy Policy, given that by providing your personal data you declare that you know and accept the conditions contained herein and its processing for the lawful and legitimate purposes provided by Law.
CATEGORIES OF PERSONAL DATA
We collect the following categories of data:
- Identification data: name, identification document, and tax identification number;
- Contact data: e-mail address, physical address, telephone, mobile phone;
- Billing data: bank account.
On the website, we collect the following categories of data:
- Identification data: name;
- Contact data: e-mail address and mobile phone;
- Automated technologies and interactions: hardware device characteristics and IP; browser characteristics; date and time of the visit, page views, application activity; geographical location from which the visitor accesses our website; pages and URLs that refer visitors to our website; search terms that visitors use to access our website.
COLLECTION
We collect personal data through:
- Direct collection: in person, by telephone, by e-mail, and through the website.
On the website https://manfercan.com, personal data is only collected when the Personal Data Subject uses or activates certain services or features regarding: Contact form and Cookies.
Regarding personal data, we guarantee that they are:
- Processed lawfully, fairly, and in a transparent manner in relation to the data subject;
- Collected for specified, explicit, and legitimate purposes;
- Adequate, relevant, and limited to what is necessary in relation to the purposes for which they are processed;
- Accurate and kept up to date;
- Kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed;
- Processed and stored securely, using appropriate technical or organizational measures that prevent unauthorized or unlawful processing and access, and against accidental loss, destruction, or damage.
PURPOSES AND LEGAL BASES
We use your data based on the following purposes and legal bases described by law:
- Presentation of quotes, products, or clarifications: Pre-contractual procedures.
- Commercialization of products and provision of services: Performance of a contract (or legitimate interest if the subject is not a party to the contract).
- Personalized communications, customer support, and contact management: Consent.
- Billing and Complaints management: Legal obligation.
- Marketing (Prospecting activities, fairs, and commercial visits): Legitimate interest.
- Marketing (Commercial communications): Consent.
- Website management (Profile and connection analysis): Consent.
- Website management (Implementation of improvements): Legitimate interest.
RETENTION PERIOD OF PERSONAL DATA
We retain personal data for the time necessary to fulfill the purposes for which they were collected, taking into account the nature of the data and legal or fiscal requirements:
- Pre-contractual procedures: Stored as long as the possibility of doing business is not frustrated;
- Performance of a contract: Throughout the duration of the contractual relationship and, once terminated, for a period of four years;
- Billing data: Stored for a period of 10 years or until the respective legal obligation is fulfilled;
- Legitimate interest: Stored until the end of that interest;
- Consent: Stored until consent is withdrawn (which can be done at any time on the Website or via the unsubscribe link in e-mails).
TECHNICAL, ORGANIZATIONAL AND SECURITY MEASURES
The data controller will do everything to keep your personal data updated, preserved, and protected, observing the best practices and adopting technical and organizational measures appropriate to the risk to protect them against dissemination, loss, alteration, or unauthorized access. We are committed to raising awareness among employees and perform regular audits.
Data collection forms (digital or paper) are securely stored in our physical archives and in the cloud. However, when providing personal information online, there is always a risk of interception by third parties, which is at the user’s own risk.
TRANSMISSION OF PERSONAL DATA
Third Parties: Manuel Fernandes Canas, Lda. does not transmit your personal data to third parties other than data processors, except within the strict compliance of legal obligations.
Data Processors: We use the following partners to process personal data on our behalf:
- Activity support software companies: Administrative, economic, and accounting management of client, supplier, and service provider billing;
- IT service provider companies: System maintenance, as well as website management;
- Security and/or surveillance companies: Photo-surveillance for the safety of people and property.
RIGHTS OF THE PERSONAL DATA SUBJECT
The personal data subject may, at any time, exercise their rights to:
- Access and Rectification of their information;
- Erasure (when the data is no longer necessary, consent is withdrawn, or there is opposition without overriding legitimate interests);
- Restriction of processing (in case of accuracy contestation, unlawful processing, or need for data in legal processes);
- Portability and Objection to processing;
- Withdraw consent at any time.
Procedure for exercising rights:
You must contact Manuel Fernandes Canas, Lda. in writing via e-mail at manfercan@manfercan.com or by physical mail at Zona Industrial de Assequins, 3750-304 Águeda. Proof of identity may be requested. The exercise of these rights is free of charge, except in cases of manifestly unfounded or excessive requests. We intend to respond within one month (or longer if the request is complex, in which case the subject will be notified).
Right to lodge a complaint: The data subject also has the right to lodge a complaint with the CNPD – Comissão Nacional de Proteção de Dados (Av. D. Carlos I, 134, 1º, 1200-651 Lisbon | geral@cnpd.pt).
CLARIFICATIONS AND LIABILITY
In case of doubt, please contact us through the usual channels. Our Website is not intended for children, so we do not intentionally collect data relating to children. If information is provided by third parties, ensure that you have obtained authorization from the personal data subject. You will be responsible for any false or inaccurate information provided.
By using our website or doing business with us, the personal data subject declares that they have read and agree to this Privacy Policy.
Manuel Fernandes Canas, Lda. reserves the right to change the Privacy Policy at any time, and regular consultation of this document is advised.