Privacy Policy

Palbit SA is aware of the implications and its responsibility to comply with the changes introduced in terms of personal data protection, in particular with the entry into force on 25 May 2018 of the General Data Protection Regulation, approved by Regulation (EU) 2016/679 of 26 April 2016.

Palbit SA is therefore committed to ensuring the protection of all personal data made available to it, having adopted various security measures, of a technical and organizational nature, in order to protect personal data against any form of unlawful processing.

Palbit SA is also committed to continually improving the set of procedures and techniques implemented for the protection of personal data, also taking into account all suggestions that users of this website send us for this purpose.

This Privacy Policy applies exclusively to the processing of personal data by Palbit SA collected through its website in commercial and promotional activities.

1. Purpose of processing:

Personal data is collected exclusively for the following purposes:

- Response to contact requests from customers or potential customers;
- Commercial management;
- Improvement or personalization of our services;
- Sending newsletters and other promotional activities. Customers can unsubscribe from the email newsletter service by clicking the newsletter link we send via email.

2. Personal data collected:

The data collected is limited to name, email address, telephone number, address, date of birth, and is used for the purposes set out in this policy and may be obtained through:

- Website contact form;
- Spontaneous application forms.

3. Consent:

Before the first promotional message or newsletter is sent, the data subject will be asked for express consent to send this type of message.

4. Conservation Period:

The personal data collected will be kept as long as the data subject consents, for personal data where their collection requires their consent, and all other data will be kept as long as their conservation is legally required or is necessary for the execution of the contract.

5. Sharing of personal data:

The personal data collected may be shared for hosting and backing up on servers located at EM 505 - Rua das Tílias, 3854-908 Palhal, Branca, Albergaria-a-Velha, Portugal.

6. Rights of holders:

In accordance with current legislation on the protection of personal data, we inform you that the data subject is guaranteed:

Right to be informed:
- At the time of collecting personal data:

> Contact details of the data controller
> Purpose(s) of processing
> Conservation time limit
> Your rights as holders of personal data
> The possibility of appealing to the supervisory authority to file a complaint (and respective contact details)
> The (possible) existence of automated decisions and/or profiling.

- Ask what information Palbit SA has about them and why;
- Know where your data is stored and how it is processed;
- Be informed of how Palbit SA complies with its data protection obligations.

Right of access:
- Confirmation of whether or not your personal data is being processed;
- Ask how to get access to your data;
- Provision of a copy of the personal data processed, preferably in an exportable format.

Right to correct, delete and block:
- Be informed on how to keep them updated;
- Obtain rectification of outdated, incorrect or incomplete data;
- Possibility of deleting personal data that is no longer necessary for the purpose;
- Block the processing of this data to verify accuracy or object.

Right to correct, delete and block:
- Be informed on how to keep them updated;
- Obtain rectification of outdated, incorrect or incomplete data;
- Possibility of deleting personal data that is no longer necessary for the purpose;
- Block the processing of this data to verify accuracy or object.

Right to limitation:
- Contestation of the accuracy of personal data, for a period that allows the data controller to verify its accuracy.

Right to erasure/forgetfulness:
- Request the removal of your data and the definitive deletion of those that do not conflict with legal obligations.

Right to Portability:
- Request portability of your data;
- Possibility of requesting your personal data in a frequently used or commonly used format, in order to transfer it to another organization, even a competitor.

The exercise of rights by the holders may be done via the email address rgpd@palbit.pt , as well as by post, sending a letter with the data below:
Subject: Exercise of rights - protection of personal data
A/C: Palbit SA
IN 505 - Tílias Street, 3854-908 Palhal, Branca, Albergaria-a-Velha, Portugal.

7. Third Parties:

In general, personal data collected on the Palbit SA website is not transferred to third parties, unless it is in compliance with a legal obligation.

If data is transmitted to third parties, Palbit SA, together with its subcontractors, is responsible for processing personal data fairly, lawfully, and transparently. The subcontractor may only process personal data in accordance with Palbit SA's instructions and always in strict compliance with the law and the purposes entrusted to it under the contract.

The transmission of personal data to subcontractors will only be carried out within the scope of contractually established relationships with Palbit SA and only when there is a basis to justify it.

In order to guarantee the confidentiality and security of data, Palbit SA will take the legally required measures to ensure that the subcontracted entity offers sufficient guarantees for the protection of personal data, that it is a reputable entity and that it has sufficient technical and organizational security measures in place to protect personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access and against any other form of unlawful processing, agreed, in particular, through the formalization of a contract between Palbit SA and the subcontracted entity in which the latter undertakes to act only upon the instructions of the former with regard to the processing of personal data.

Palbit SA 's subcontractors will only process personal data for the purposes defined and agreed between the parties, and must ensure that data retention, when necessary and applicable, complies with the time limits established by law and/or contractually.

Holders of personal data must be informed at the time their data is collected about its possible sharing with Palbit SA subcontractors, whenever possible, identifying the organization and its contact details, as well as the purpose of such sharing.

If data is transferred to a Palbit SA subcontractor located in a third country outside the European Union, the latter must maintain a level of data protection equivalent to the protection provided by legislation in force in the European area, in particular that provided for in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

In the context of international data transfers, (at least) one of the following procedures must be followed:

- Individual contract or standard contractual clauses adopted directly by the European Commission or a supervisory authority;
- Participation of the subcontractor in a certification system or standard accredited or recognized by the EU to guarantee an adequate level of protection;
- Recognition that the subcontractor's binding corporate rules ensure an adequate level of data protection, issued by the supervisory authorities.
- Existence of an adequacy decision concerning the third country, the specific territory or sector of that third country, or concerning the international organization concerned.

The rules for carrying out cross-border data transfers will not apply whenever occasional operations are involved and necessary for the fulfilment of a contract or within the scope of contentious proceedings (judicial, administrative, or those underway with regulatory bodies or similar).

8. Principles, security and rights:

These are internal security and privacy standards:

- Process data lawfully and fairly, collecting only the information necessary and relevant to the purpose for which it is intended;
- Do not use the data collected for a purpose incompatible with that for which it was collected;
- Ensure the express consent of the data subject whenever required;
- Guarantee the right to delete the data used free of charge when requested by the holder;
- Have security systems that prevent unauthorized persons from consulting, modifying or destroying data and that allow for the detection of intentional or unintentional information breaches.

9. Links to partner sites

The Palbit SA website may contain links to third-party/partner websites. These websites are not under the control of Palbit SA , and Palbit SA is not responsible for the content of any of these websites. Users of the Palbit SA website are advised to consult the pages within those websites that refer to their privacy policies when accessing other websites.

10. Cookies:

When browsing the Palbit website, cookies are used, but they do not collect information that identifies the user. Generic information is collected, specifically how users access and use the websites. The information collected is used to monitor the number of visitors and conduct statistical studies, as well as to ensure the website functions properly, facilitate navigation, and improve the user experience.

The use of cookies allows for continuous optimization of website navigation to provide a high-quality experience that surpasses the quality of the user's previous visit. You can consult our cookie policy available on our website.

11. Change of Privacy Terms and Conditions:

This Privacy Policy may be subject to change or revision, without prior notice, depending on legislative or regulatory requirements.

Since this Privacy Policy may be revised at any time, Palbit SA recommends that its users review it periodically.