Privacy Policy
Commitment
Carlos Natal, Lda. is a company that has been engaged, since 1975, in the wholesale of yarns and fabrics and in the retail sale of fabrics, ready-made garments and trimmings. Our values are the quality of our products, trust and transparency in our relationship with customers and users of our site, partners and suppliers.
The privacy and protection of the personal data you provide us with are of the utmost importance to us.
Under the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, applicable as of 25 May 2018, hereinafter referred to as the GDPR, this Privacy Policy identifies who we are, what data we collect, for what purposes we may use your data, grounds for collection and how we handle it, how long we keep it, your rights and ways to make use of them and how to contact us and with whom we share it, all considering that:
“Personal data” means information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
“Processing” means an operation or set of operations performed upon personal data or sets of personal data, by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or combination, restriction, erasure or destruction;
“Controller” means the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by European Union or Member State law, the controller or the specific criteria for its nomination may be provided for by European Union or Member State law;
“Processor” means a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller.
Controller
Carlos Natal, Ltd., legal person no. 500 054 630, headquartered at Avenida das Ferragens, No. 87 – Parque Industrial do Casarão, 3750-860 Borralha is the controller of personal data in the context of the GDPR.
Personal data category and purposes
Carlos Natal, Lda. collects the following categories of personal data, either personally or through the website, for the following purposes:
| Data category | Purposes |
|---|---|
| Customer identification data: Full name, address, phone number, and email address. |
Enforcement of contract to which the personal data subject is a party and invoice management. Pre-contractual inquiries at the request of the personal data subject. |
| Customer data: Full or short name, email. |
Reply to information requests. Sending newsletters and direct marketing communications. |
Grounds
Carlos Natal, Lda. will only process your personal data:
- For the execution of contracts, such as contracts for the supply of goods and services; contracts with suppliers and contracts with service providers;
- For customer support;
- With your consent to send newsletters and other marketing marketing communications;
- In pursuit of a legitimate purpose, namely for:
- Development and maintenance of our website;
- Preventing and detecting fraud;
- Ensuring the information and network security;
- To comply with legal obligations.
Retention periods
Our policy is to retain data only for the period necessary to fulfill the purposes for which they were collected. However, it is possible that in certain cases we may store data for longer periods, particularly when required by law.
Once the maximum retention period has been reached, your personal data will be anonymized or destroyed/deleted in a secure manner.
Rights
As a personal data subject, you have:
- The right of access to obtain confirmation as to whether or not data concerning you are being processed, and, as the case may be, to access your data and obtain information on the processing operations and/or transmission to other entities or recipients;
- The right to rectification whenever you consider your personal data to be incomplete or inaccurate;
- The right to erasure in the meaning that your personal data will be erased when one of the following situations arises:
- The personal data is no longer necessary for the purpose for which it was collected or processed;
- You have withdrawn the consent on which the data processing is based and there is no other legal ground for the processing;
- You have objected to the processing of the data and there are no overriding legitimate interests, to be assessed on a case-by-case basis, that justify the processing;
- The personal data has been unlawfully processed;
- The personal data must be erased under a legal obligation;
- The personal data has been collected in connection with the provision of information society services;
- The right to limitation of processing in the following cases:
- If you dispute the accuracy of your personal data for a period of time that allows the Company to verify its accuracy;
- If you consider that the processing is unlawful;
- If the Company no longer needs the personal data for the purposes of the processing, but the data is necessary for the establishment, exercise or defense of legal claims; or
- If you have objected to the processing and there is no overriding legitimate interest of the Company;
- The right to portability by requesting the delivery of the personal data provided by you, in a commonly used and machine-readable format; and may request that they be passed to another controller, provided that this is technically possible;
- The right to object to automated processing and decisions, although we may profile you in order to conduct targeted marketing campaigns, we will not generally make decisions that affect you based on purely automated processes;
- The right to withdraw consent when data is processed on grounds of consent, although such right shall not affect the lawfulness of processing carried out on the premise of consent previously given, nor the subsequent processing of the same data based on another lawful ground.
If you wish to exercise any of your rights, or have any questions about our use of your personal data, please contact us in writing, via the email comercial@carlosnatal.pt or by letter, sent to the address Parque Empresarial do Casarão, Avenida das Ferragens 97, 3750-860, Borralha, Águeda.
We will ensure that your requests are handled with due care to safeguard the effectiveness of your rights. You may, however, be asked to provide proof of your identity to ensure that personal data is only shared with the data subject.
You should be aware that in certain cases (e.g. due to legal requirements) your request cannot be granted immediately. In any case, you will be informed of the measures undertaken within one month from the time the request is made.
If you would like to, you can lodge a complaint about matters concerning the processing of your personal data with the National Data Protection Commission.
Sharing data with third parties
To fulfill the purposes outlined in this Privacy Policy, Carlos Natal, Lda. may disclose your personal data to subcontractors, requiring them to take appropriate security measures to protect your personal data.
Security and Confidentiality
The security and confidentiality of personal data is a priority of ours. Accordingly, we have adopted suitable technical and organizational measures to prevent the unauthorized disclosure, loss, misuse, change, processing or access, as well as any other form of unlawful processing, subjecting the security systems and policies to periodic evaluation of their compliance.
Privacy Policy Change
Carlos Natal, Lda. reserves the right to update its Privacy Policy whenever deemed appropriate and convenient. We recommend you to regularly check this document.
Borralha, October 15, 2022
