1. Data controller

The data controller is ConterKasas, which will collect, store, and process personal data necessary for the fulfilment of legal obligations.

2. Data collection and processing

The collection of personal data provided by the data subject during the service, whether in person or through digital platforms made available by ConterKasas, including requests, petitions, complaints, forms, and other forms of communication, will result in internal processing, as well as external use, always in strict compliance with legal obligations.

3. Purpose of data processing

We use personal data for the following purposes:

• Marketing – to inform about news that may be of interest;
• Management of website users;
• Fulfilment of legal obligations, including those to our shareholders;
• Recruitment of employees for ConterKasas;
• Fulfilment of obligations arising from contracts with our partners.

ConterKasas ensures that personal data is processed only for the purposes for which it was collected, and does not disclose or share it for other purposes, including commercial or advertising purposes.

4. Recipients of personal data

ConterKasas may communicate or share personal data with other entities in certain cases, within the scope of services they provide or due to contractual obligations. In such cases, we require that each entity to whom we disclose data has appropriate security measures to protect the personal data. When required by law, we may also be obligated to disclose personal data to authorities or third parties, in which case our control over how the personal data is protected is limited.

5. Retention period for personal data

Personal data is retained for the minimum period defined by law for the filing and retention of administrative documents, without prejudice to the rights of the data subject during the respective period of validity.

6. Rights of data subjects

Data subjects have the right to:

• Request access to their personal data held by ConterKasas, as well as its correction or deletion, the limitation of its processing, or the right to object to its processing, as well as the right to data portability, in legally admissible cases;
• If the data processing was based on consent, the data subject has the right to withdraw their consent at any time, without prejudice to the lawfulness of the processing carried out under the respective authorisation;
• File a complaint with a supervisory authority, without prejudice to any other available administrative or extrajudicial remedy, as well as the right to legal action.

7. Security measures

ConterKasas is committed to ensuring the protection of the security of the personal data provided to it, applying the necessary technical and organisational measures to ensure an appropriate level of security against the risk of destruction, loss, alteration, disclosure, and unauthorised access, or any other accidental or unlawful processing, in accordance with the legislation in force on the matter.

In the event of a personal data breach, ConterKasas will notify the National Data Protection Commission of the breach in accordance with the terms and deadlines established by applicable legislation.

8. Changes to the privacy policy

ConterKasas reserves the right to change the Privacy and Data Protection Policy at any time, with such changes coming into effect from the date of their publication.

9. Final provisions

In all cases not covered by this document, the applicable legislation shall apply, namely the General Data Protection Regulation, adopted by Regulation (EU) 2016/679 of the European Parliament and of the Council.

10. Datap rotection officer

The appointed Data Protection Officer can be contacted via the following means:

• Email: geral@conterkasas.com
• By postal mail to:

ConterKasas
A/C: Encarregado de Proteção de Dados
Zona Industrial Ervosas,
Rua Tomé Barros Queirós, nº 96,
3830-252 Ílhavo