Serratec
Your Privacy is Important to Us
This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, serratec.pt. By using our website, you agree to the terms of this Privacy Policy.
1. Who Are We?
SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. aims to be one of the leading companies in the machining processes of components.
Committed to excellence and customer satisfaction, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. distinguishes itself through the quality of its products.
We believe that quality, precision, skills enhancement, trust, integrity, sustainability, and innovation are the foundation of our success.
2. Why This Privacy Policy?
This Policy aims to inform Customers about the general rules for the processing of personal data by SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA., which are collected and processed in strict compliance with the provisions of the personal data protection legislation in force at any given time, namely Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 ("GDPR") and Law No. 58/2019, of 8 August 2019.
SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. adheres to the best practices in the field of security and personal data protection, having implemented the necessary technical and organisational measures to comply with data protection legislation and ensure that the processing of personal data is lawful, fair, transparent, and limited to authorised purposes.
SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. is committed to the protection and confidentiality of personal data, having adopted measures deemed appropriate to ensure the accuracy, integrity, and confidentiality of personal data, as well as all other rights granted to the respective data subjects.
The rules set out in this Personal Data Protection Policy complement the provisions regarding the protection and processing of personal data outlined in the contracts Customers enter into with SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA., as well as the rules stipulated in the terms and conditions governing the offer of various products and services, which are duly published on the respective website.
What Are Personal Data?
Personal data are any information, of any nature and regardless of its format, including sound and image, relating to an identified or identifiable natural person.
An identifiable person is one who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, online identifiers, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
3. What Does the Processing of Personal Data Consist Of?
The processing of personal data consists of an operation or set of operations performed on personal data or sets of personal data, whether through automated means or not, such as collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure, or destruction.
4. Who Is Responsible for Data Processing?
The entity responsible for the processing of personal data is the company SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA., which determines the purposes and means of processing.
For this purpose, if the data subject needs to contact the data controller, they may send a written communication addressed to the controller at the following address:
Zona Industrial de Neiva, 1st Phase, Rua A 4935-231 Neiva (Viana do Castelo)
Email: rgpd@serratec.pt
5. Data Covered by This Privacy Policy
This privacy policy describes the privacy practices of SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. for data that we collect:
- through websites operated by SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. and other websites owned or controlled by SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA.;
- through software applications provided by SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. for use on or through computers and mobile devices;
- through social media pages controlled by SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. from which you are accessing this privacy policy;
- through email messages that SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. sends containing the link to this privacy policy and through communications established online or in person;
- from third parties, such as Authorised Licensees, Strategic Business Partners, Proprietors, and other Sources, such as public databases, marketing partners, and third parties.
6. General Principles Applicable to the Processing of Personal Data
SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. is committed to ensuring that the personal data it processes are:
- Processed lawfully, fairly, and transparently in relation to the data subjects;
- Collected for specific, explicit, and legitimate purposes, and not further processed in a manner that is incompatible with those purposes for which they are processed;
- Accurate and updated whenever necessary;
- Retained in a manner that allows the identification of the data subjects only for the period necessary for the purposes for which they are processed;
- Processed in a way that ensures their security, including protection against unauthorised or unlawful processing and against accidental loss, destruction, or damage, by implementing appropriate technical or organisational measures.
DATA WE COLLECT AND HOW WE PROCESS IT
SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. may have access to your data through our websites, client platform, forms, equipment, and/or social media. The data collected is strictly necessary for the purposes for which it is intended, namely:
- For contractual purposes, when we provide you with one of our products.
- When using the contact form, the data collected is solely intended to respond to the information requested by the Customer, manage their requests, and monitor the quality of our products;
- When using our Internal Whistleblowing Channel;
- To enforce applicable terms of use, establish or safeguard the right or legal defence to prevent fraud or other illegal activities, including attacks on the information systems of SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA.;
- To ensure compliance with legal obligations (such as tax data, customs obligations, obligations arising from financed projects);
Thus, we can state that we only process your personal data in the following cases:
- When you have given us your consent;
- In the performance of a contract – for example, for enrolment in a training session or request for a service;
- When it concerns the legitimate interest of SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. – i.e., to protect our tools, ensuring they are secure and protected;
- In cases where processing is mandatory by law.
7. Data Transfer
As a rule, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. does not transfer your personal data, and will only do so when it is necessary for one or more of the following options, always ensuring an identical level of protection for your data:
- If we have your consent to do so;
- If we are authorised to do so under the law;
- SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. may also transfer your personal data to other Group companies or third parties, but only if and to the extent that such transfer is necessary for the purposes for which it is intended. In cases where Group companies are located outside the European Economic Area, in third countries, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. will take all necessary measures to ensure the security and confidentiality of such data, namely through the legal procedure of "standard contractual clauses" adopted and recommended by the European Commission.
- When legally permitted, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. may also transfer your personal data to courts, law enforcement authorities, regulators, or lawyers if this is necessary to comply with the law or to establish, exercise, or defend a legal claim.
- In cases where the recipients of personal data may be located in “third countries”, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. undertakes to ensure the same level of protection for your data.
We never sell your data!
8. Why do we collect your data? (Legal basis)
| PURPOSE |
DESCRIPTION OF ACTIVITIES ASSOCIATED WITH THE PURPOSE |
LEGAL BASIS |
| Acquisition |
There are various activities associated with this purpose, such as:
- Responding to inquiries
- Processing payments
|
- Execution of the contract with the customer purchasing our products:
- Legal obligations related to financial transactions, such as invoicing and record-keeping obligations.
- Legitimate interest in the case of responding to an inquiry.
|
| Request for Information (Contact Form) |
Handling customer requests, inquiries, and complaints; |
Legitimate interests, such as respecting customer preferences. |
| Internal Whistleblowing Channel |
Compliance with tax obligations under the legal framework Law No. 93/2021 of December 20. |
- Legitimate interest in preventing and addressing irregularities within the company;
- Legal obligations.
|
| Compliance with Legal Obligations |
- Legitimate interest in preventing and addressing irregularities within the company;
- Legal obligations.
There are various activities associated with this purpose, such as:
- Complying with applicable laws;
- Compliance with legal processes;
- Responding to requests from public and governmental authorities;
- Meeting national security or law enforcement requirements;
- Enforcing our terms and conditions;
- Protecting our operations;
- Safeguarding the rights, privacy, security, or property of SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA., customers, visitors, and other relevant individuals;
- Pursuing available legal remedies and limiting damages that SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. may suffer.
|
- Legal obligations, such as compliance with legal processes;
- Legitimate interests, such as enforcing terms and conditions for the protection of trademarks;
|
Other Uses and Disclosures:
We will use and disclose the Personal Data that we deem necessary or appropriate:
(a) to comply with applicable law, including laws outside your country of residence;
(b) to comply with legal processes;
(c) to respond to requests from public and governmental authorities, including authorities outside your country of residence and to meet national security or law enforcement requirements
(d) to enforce our terms and conditions;
(e) to protect our operations, such as in the case of any reorganization, merger, sale, assignment, transfer, or other disposition of all or any part of the business, assets (including bankruptcy or similar proceedings);
(f) to protect the rights, privacy, security, or property of you or others;
and (g) to allow us to pursue available remedies or limit the damages that we may suffer.
We may use and disclose other data for any purpose, except where we are prohibited from doing so by applicable law.
Your Rights
1. Right to be Informed - You have the right to obtain clear, transparent, and easily understandable information about how we use your data and what your rights are. This is why we provide you with all this information in this Privacy Policy.
2. Right of Access - You have the right to obtain a copy of your data and certain information about how your data is processed. This right allows you to know and confirm that we use your data in accordance with data protection laws. We may refuse to provide you with the requested information whenever doing so would reveal Personal Data of another person or negatively impact the rights of another person.
3. Right to Rectification - If your data is incorrect or incomplete, you may ask us to rectify/correct it.
4. Right to Data Erasure - Allows you to request the deletion of your data, provided there are no valid grounds for us to continue using it or its use is unlawful. This is not a general right to erasure, as exceptions apply (for example, whenever that data is necessary for the defense of a right in legal proceedings).
5. Right to Restrict Processing - You have the right to “block” or prevent the future use of your data while we assess a request for rectification or as an alternative to erasure. Whenever processing is restricted, we can still store your data, but we cannot use it further. We keep lists of individuals who have requested the “blocking” of the future use of their data to ensure that this restriction is respected in the future.
6. Right to Data Portability - You have the right to obtain and reuse certain Personal Data for your own purposes across different organizations. This right applies only to data that you have provided to us and that we process with your consent, which is processed by automated means.
7. Right to Object - You have the right to object to certain types of processing, for reasons related to your particular situation, at any time when that processing is occurring, for the purposes of the legitimate interest of SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. or third parties. We may continue to process that data if we can demonstrate “overriding legitimate grounds for the processing which override your interests, rights, and freedoms” or if that data is necessary for the establishment, exercise, or defense of a right in legal proceedings.
You may exercise the rights enshrined in the Data Protection Law and other applicable legislation at any time in writing by contacting us at: rgpd@serratec.pt
8. Right to Lodge a Complaint with the Supervisory Authority - if you believe that your data is not being processed lawfully by SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA., under the applicable legislation and this Policy. Under the law, you are also guaranteed the right to withdraw your consent for the processing of data for which consent constitutes the basis of legitimacy for that processing. For this purpose, you have the right to withdraw your consent at any time, which does not affect the lawfulness of the processing carried out up to that date based on the previously given consent. These rights can be exercised at any time by the User, through the following email: rgpd@serratec.pt. SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. will respond in writing (including by electronic means) to the User's request within a maximum of one month from the receipt of the request, except in cases of special complexity, where this period may be extended. If the requests made by the User are manifestly unjustified or excessive, particularly due to their repetitive nature, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. reserves the right to charge administrative costs or refuse to follow up on the request.
9. Retention Period of Personal Data
We retain Personal Data only for the period of time necessary to fulfill the specific purposes for which it was collected. However, we may be required to store certain Personal Data for a longer period, taking into account factors such as:
- legal obligations, under applicable laws, to retain Personal Data for a specific period;
- statute of limitations, under applicable laws;
- litigation;
- guidelines issued by competent data protection authorities.
During the period of processing Personal Data, we ensure that it is processed in accordance with this Privacy Policy. Once the Data is no longer necessary, we will proceed to its secure deletion. Regarding consent, the withdrawal of consent does not invalidate the processing carried out up to that date based on the consent previously given.
10. Confidentiality
We acknowledge that the information you provide may be of a confidential nature. In the course of its activities, SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. does not sell, rent, distribute, or otherwise commercially make Personal Data available to any third party, except in cases where it is necessary to share information with Service Providers for the purposes set out in this Policy or with Third Parties to fulfil its legal obligations. We will preserve the confidentiality of your data and protect it in accordance with our Privacy Policy and all applicable laws.
11. Changes to This Privacy Policy
The SERRATEC – PRODUÇÃO DE COMPONENTES INDUSTRIAIS, SA. will periodically update this Privacy Policy. Whenever this occurs, the new version will be published on the website and will come into effect immediately, so we advise you to consult it regularly.
Contact
If you need further information, please contact us via the following email:
rgpd@serratec.pt