Who is responsible for collecting and processing data?
Imperalum – Sociedade Comercial de Revestimentos e Impermeabilizações S.A, henceforth Imperalum, is the entity responsible for the collection and processing of personal data. As part of its business activity, Imperalum may use subcontracted entities to carry out the purposes set out herein.
What is personal data?
Personal data is any information of any nature regardless of its format, including sound and images, relating to an identified or identifiable person. Any person who can be identified directly or indirectly, by reference to an identification number or one or more specific elements of his or her physical, physiological, psychological, economic, cultural or social identity, is considered identifiable.
Which personal data is collected and processed?
Imperalum collects and processes, among others, the following personal data:
- From Customers: name, email address, telephone number, address, method of payment;
- From Candidates for recruitment: name, email address, telephone number and resume;
- From Suppliers: name, email address, telephone number, address, IBAN for payment;
- From other data subjects, through technical and commercial queries: name, email address, telephone number, address.
By browsing the website, Imperalum may collect information about your computer, including the IP address, operating system and browser used, for administrative purposes and to gather information for statistical purposes and to improve its operation and user experience.
Imperalum assumes that the data has been provided by the data subject or that the user has given authorization to do so and presumes that the same is true and up to date.
How is your data collected?
Personal data may be collected by the following means:
- Email address
- Phone calls
- In person
The data collected is processed and stored in computerized form in strict compliance with personal data protection legislation and is stored in a specific database created for this purpose by Imperalum or by the contracted entities by Imperalum.
Some personal data collected on the website is mandatory and if this data is missing or incomplete, Imperalum may not be able to provide you with the services or information requested. In each case, Imperalum shall inform you of the mandatory nature of providing the personal data concerned.
What is the purpose of the data collected?
Your data is intended to integrate a personal data file that Imperalum may use for the following purposes:
- Invoicing and checking means of payment
- Provision of technical or commercial information required by the Subjects
- Completing satisfaction questionnaires related to our products and services
- Managing complaints and customer support
- Contact agenda
- Sending newsletters
- Sending marketing information
- Updating of technical or commercial information
- Disclosure of technical, product or service innovations
- Compliance with other legal or regulatory obligations
- Conducting market research, evaluation surveys and statistical analyses.
To achieve the purposes identified above, Imperalum may cross-reference the data collected for the purpose of updating and completing such data.
What is the basis for the processing of your data?
The data processing associated with the purpose set forth in item a) has its basis on the contractual relationship established between you and the company.
The data processing associated with the purposes set out in items b), c) and d) has its basis on your consent, or legitimate interest, if you are already our customer. In the latter case you will always have the possibility to oppose, in each marketing communication sent to you.
The data processing associated with purpose set out in item j) has its basis in compliance with legal obligations.
The data processing associated with the purposes set forth in items a), c), h) (in cases where you are our customer) and d), e), g), i) and k) has its basis on the legitimate interests of Imperalum.
The data processing associated with the purposes set out in items f) and l) has its bases on establishing pre-contractual relationships.
With whom is your data shared?
The data collected and held by Imperalum may be transmitted, with due respect for the duty of confidentiality and the purpose that led to their collection, to the following entities:
- Entities of the group to which Imperalum belongs;
- Judicial or administrative authorities, in cases where such assignment is mandatory;
- Recruitment and selection companies;
- Subcontractors who will process the data on behalf of Imperalum and for the purposes determined by Imperalum;
- Imperalum customers as service providers required by the data subject, in order to respond to their query in substitution of Imperalum;
- Computer platforms, or computer service providers, used to send surveys of opinion or customer satisfaction and massive sending of updated technical and commercial information
Cookies are small pieces of information that can help identify your browser and which can store information, for example, user settings and preferences.
Imperalum may store cookies on your device to personalize and facilitate browsing to the fullest, not providing those same reference cookies or the user’s personal data.
For more information read our Cookies Policy.
What are your rights?
Under the terms of the General Data Protection Regulation, we guarantee you the right to access, update, rectify, delete, transfer and erase your personal data. You may also submit complaints to the Portuguese National Data Protection Authority – Comissão Nacional da Proteção de Dados.
We also give you the right to object to the use of the data provided for marketing purposes, for sending information communications or to be included in lists or information services. If you did not do it when collecting the data, you can send a request later.
These rights should be exercised using the following email address: firstname.lastname@example.org
or the address:
Proteção de Dados
Zona Industrial Pau Queimado
2870-100 Montijo – Portugal
For how long is your data stored?
The length of time during which the data is stored and preserved varies according to the purpose for which the information is processed. Where there is no specific legal requirement, data shall be stored and retained only for the minimum period necessary for the purposes for which it was collected or later processed, after which time the data shall be deleted.
Is your data processed securely?
Imperalum is committed to protecting the security of your data. To this end, it has adopted several technical and organizational security measures to protect the personal data you make available to us, against unauthorized spread, loss, misuse, alteration, processing or access, as well as against any other form of illicit processing.
Imperalum requires its subcontractors and partners to adopt security measures equivalent to those it carries out.
Notwithstanding Imperalum’s security measures, the user must take additional security measures, such as ensuring that he or she uses properly configured security-enhanced equipment and a browser with an active firewall, anti-virus and anti-spyware, checking the authenticity of the websites visited, and avoiding websites whose reputation he or she does not trust.
Imperalum acknowledges that it may communicate the user’s data in the merging, acquiring and/or incorporating procedures in which it may be involved, and does not consider such communication a transfer of data to third parties, nor a subcontracted processing.
Imperalum may also transmit data to third parties as part of investigations, inquiries and judicial and/or administrative proceedings or of a similar nature, provided that it is duly ordered to do so by judicial order.
Transfer of data
In the event of data transfers to third countries outside the European Union or the European Economic Area, Imperalum shall comply with the law, in particular as regards the suitability of the destination country for the protection of personal data and the requirements applicable to such transfers. Personal data is not transferred to jurisdictions that do not provide security and protection guarantees.
The use of Imperalum’s social networks may involve the transfer of data to providers of social media services which may be based outside the European Union or the European Economic Area. Imperalum shall not be responsible for the data that the user makes available on social networks.