Privacy Policy

Palbit S.A. is aware of the implications and of its responsibility to comply with the changes introduced with regard to the protection of personal data, in particular with the taking effect on 25 May 2018 of the General Data Protection Regulation, approved by Regulation (EU) 2016/679 of 26 April 2016.

Palbit S.A., therefore, undertakes to ensure the protection of all personal data made available to it, having adopted various technical and organizational security measures to protect personal data against any form of unlawful processing.

Palbit S.A. also undertakes to continuously improve the set of procedures and techniques implemented for the protection of personal data, counting also to this end on all suggestions that the users of this website may send us.

This Privacy Policy applies exclusively to the processing of personal data by Palbit S.A. collected through its website in commercial and promotional actions.

1. Purpose of processing:

Personal data are collected exclusively for the following purposes:

- To respond to requests for contact from customers or potential customers;
- Commercial management;
- Improvement or personalization of our services;
- Sending newsletters and other promotional actions. Customers may cancel their subscription to the newsletter service by e-mail, by clicking on the link in the newsletter that we send by e-mail.

2. Personal data collected:

The data collected is limited to name, e-mail address, telephone number, address, and date of birth, and is used for the purposes set out in this policy and may be obtained through:

- Contact form of the site;
- Spontaneous application forms.

3. Consent:

Before the first promotional message or newsletter is sent, the data owner's express consent will be requested for the sending of this type of message.

4. Conservation period:

The personal data collected will be kept for as long as there is the consent of the holders, in those personal data where their collection requires their consent, and all others will be kept for as long as their conservation is legally mandatory or necessary for the performance of the contract.

5. Sharing of personal data:

Personal data collected may be shared for hosting and backup in servers located at EM 505 - Rua das Tílias, 3854-908 Palhal, Branca, Albergaria-a-Velha, Portugal.

6. Rights of holders:

In accordance with current legislation on the protection of personal data, we inform you that the owner of the data is guaranteed:

Right to be informed:
- At the time of collection of personal data:

> The contact details of the controller
> The purpose(s) of treatment
> The conservation time limit
> Your rights as owner of personal data
> The possibility of recourse to the supervisory authority for lodging a complaint (and its contacts)
> The (possible) existence of automated decisions and/or profiling.

- Ask what information Palbit S.A. has about them and why;
- To know where they are stored, and how their data are processed;
- To be informed of how Palbit S.A. meets its data protection obligations.

Right of access:
- Confirmation of whether or not your personal data have been processed;
- To ask how to obtain access to your data;
- Making available a copy of the personal data processed, preferably in exportable format.

Right to correct, delete and block:
- Be informed about how to keep them up to date;
- To obtain rectification of outdated, incorrect, or incomplete data;
- The possibility of deleting personal data is no longer required for the purpose;
- To block the processing of such data to verify accuracy or opposition.

Right to correct, delete and block:
- Be informed about how to keep them up to date;
- To obtain rectification of outdated, incorrect, or incomplete data;
- The possibility of deleting personal data is no longer required for the purpose;
- To block the processing of such data to verify accuracy or opposition.

Right to limitation:
- Dispute the accuracy of personal data for a period of time that allows the controller to verify their accuracy.

Right to removal/forgetting:
- Request the removal of your data and the definitive deletion of those which do not conflict with legal obligations.

Right to portability:
- To request the portability of your data;
- The possibility to request your personal data in a format of frequent or common use, in order to operate the transfer to another organization, even if competing.

The exercise of the rights by the holders can be done through the e-mail address, as well as by post, addressing a message with the data below:
Subject: Exercise of rights - protection of personal data
A/C: Palbit S. A.
EM 505 - Rua das Tílias, 3854-908 Palhal, Branca, Albergaria-a-Velha, Portugal.

7. Third Parties:

In general, personal data collected on the Palbit S.A. website are not transferred to third parties, unless in fulfillment of a legal obligation.

In the event of transmission of data to third parties, Palbit S.A. will retain responsibility together with its subcontractors for the fair, lawful and transparent processing of personal data. The subcontractor may only process personal data in accordance with the instructions defined by Palbit S.A. and always in strict compliance with the law and the purposes entrusted to him/her in the context of the contract concluded.

The transmission of personal data to subcontractors shall only be carried out within the framework of contractual relations established with Palbit S.A. and only and only when there is a basis for it.

In order to guarantee the confidentiality and security of the data, Palbit S.A. will take the legally provided measures to ensure that the subcontracted entity provides sufficient guarantees for the protection of personal data, that it is a reputable entity and that it has sufficient technical and organizational security measures in place to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access and against any other form of unlawful processing agreed upon, in particular by formalization by contract between Palbit S. A. and the sub-contractor in which the latter undertakes to act only on the instructions of the former with regard to the processing of personal data.

The sub-contractors of Palbit S.A. shall only process the personal data for the purposes defined and agreed upon between the parties and shall ensure that the conservation of the data, where necessary and applicable, complies with the time limits established by law and/or contractually.

The owners of the personal data must be informed at the time of collection of their data about their possible sharing with Palbit S.A. sub-contractors whenever possible with identification of the organization and respective contact, as well as the purpose of such sharing.

If the data are transferred to a subcontractor of Palbit S.A. which is in a third country outside the European Union, the latter must maintain a level of data protection equivalent to the protection afforded by the legislation in force in the European area, in particular, that provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

In the context of international data transfers, at least one of the following procedures must be followed:

- Individual contract or standard contractual clauses adopted directly by the European Commission or a supervisory authority;
- Participation of the sub-contractor in a certification system or standard accredited or recognized by the EU to ensure an adequate level of protection;
- Recognition that the binding corporate rules of the sub-contractor guarantee an adequate level of data protection, issued by the supervisory authorities.
- The existence of an adequacy finding with respect to the specific third country, territory, or sector of that third country, or with respect to the international organization concerned.

The rules for cross-border data transfers shall not apply where operations are occasional and necessary for the performance of a contract or in the context of legal proceedings (judicial, administrative, or before regulatory bodies or the like).

8. Principles, security, and rights:

These are internal security and privacy rules:

- Process data in a lawful and fair manner, collecting only the necessary information relevant to the purpose for which it is intended;
- Not to use the data collected for a purpose incompatible with that of the collection;
- Ensure the explicit consent of the data subject where required;
- Guarantee the right to delete the data used free of charge when requested by the data subject;
- Have security systems in place that prevent consultation, modification, or destruction of the data by a person not authorized to do so and that allow detection of intentional or unintentional misappropriation of information.

9. Links to partner sites

The Palbit S.A. website may contain links to third-party/partner websites. These sites are not under the control of Palbit S.A. and Palbit S.A. is not responsible for the content of any such site. Users of the Palbit S.A. website are advised, when accessing other websites, to consult the pages within those websites which refer to their own pages.

10. Cookies:

When browsing the Palbit website, cookies are used but do not collect information that identifies the user. Generic information is collected, such as how users arrive and use the sites. The information collected is used for the purpose of monitoring the number of visits and statistical studies, as well as to ensure that the site functions correctly and to facilitate navigation and improve the user experience.

The use of cookies enables the navigation of the site to be constantly optimized in order to provide a high-quality experience and surpass the quality obtained in the previous visit by the user. You can consult our cookie policy available on our website.

11. Changes to the Terms and Conditions of Privacy:

This Privacy Policy may be subject to change or revision, without prior notice, depending on legislative or regulatory requirements.

As this Privacy Policy may be revised at any time, Palbit S.A. recommends its users review them periodically.