At CORDEIRO CAMPOS & Cª LDA we respect your privacy, we strive to safeguard your security and we believe in the need to protect the privacy of the personal information you share with us.

In this privacy policy we explain who we are, what we use your data for, how we collect them, how we store them, with whom we share the data, the length of time we keep them, as well as providing all our contact details to allow you to exercise your rights.

Your data will be processed by CORDEIRO CAMPOS & Cª LDA, tax no. 501278559, with head office at Rua do Gaioso, no. 126, Parque Industrial de Roriz, 4750 – 658 Roriz – Barcelos, Portugal, which undertakes to process the personal data in accordance with the General Data Protection Regulation.

To clarify any issue related to the processing of your personal data, please contact us by the following means:

Telephone: 253886010

Address: Rua do Gaioso, no. 126, Parque Industrial de Roriz, 4750 – 658 Roriz – Barcelos, Portugal

E-mail: carlos@cordeirocampos.pt

Or directly contact our Data Protection Officer

Name: Daniel Azevedo

E-mail address: daniel.azevedo.2011@gmail.com

1. How do we collect your personal data?

Your personal data will be collected and processed in the following situations:

  1. If you apply to work for us, through the collection of data for the recruitment process;
  2. If you work for us, through the collection of data for the employment contract;
  3. If you are our client, supplier or service provider, through the personal data supplied to us with a view to acquiring services/products.

2. For what purposes and on what basis can your personal data be used?

Your personal data will be collected and used when:

  1. it is necessary to sign a contract with us or fulfil the contract;
  2. the data must be processed to comply with legal regulations that CORDEIRO CAMPOS & Cª LDA are subject to;
  1. the processing of the data is necessary to pursue a legitimate interest and our reasons for using them prevail over your data protection rights;
  2. the processing of the data is necessary for us to declare, exercise or defend a right in a judicial action.

Your data will be stored for this purpose for the legally required time or for the time strictly necessary.

3. How do we keep your personal data secure?

We use a range of security measures to help protect and maintain the security, integrity and availability of your personal data.

Despite the fact that data transmitted through the internet or websites cannot guarantee complete security against intrusion, we and our service providers and business partners make every effort to implement and maintain physical, electronic and procedural security measures to protect your personal data in compliance with the applicable data protection requirements.

Among others, we implement the following measures:

  1. Restricted personal access to your data based on the “need to know” criteria and only within the scope of the purposes communicated;
  2. Transfer of personal data to external entities using encryption systems;
  3. Protection of the information technology systems using firewalls, with a view to preventing non-authorised access to your personal data;
  4. Permanent monitoring of access to the information technology systems with a view to preventing, detecting and impeding the improper use of your personal data.

4. How long do we store your personal data for?

We store your data only for the period of time necessary for the purpose for which they were collected.

Upon reaching the maximum storage time, your personal data will be securely destroyed.

For the purposes described in this Privacy Policy, your personal data will be stored for the legally required period of time or up to a maximum time limit of 5 years counting from when you granted consent or when the most recent contract was signed (whichever is most recent) and if, within this period, your consent has not been withdrawn.

5. With whom may we share your personal data and how do we keep them secure?

Your personal data may be processed by outsourcers subcontracted by CORDEIRO CAMPOS & Cª LDA to provide services, and the judicial, tax and regulatory authorities for the purpose of complying with legal regulations.

The outsourcers shall be supplied only with the personal data needed to provide the service in question.

Your personal data are stored in the protected servers of our suppliers/service providers and are accessed and used exclusively in accordance with our policies and standards (or the equivalent policies and standards of our suppliers/service providers). In compliance with the GDPR, CORDEIRO CAMPOS & Cª LDA has signed contracts with all the outsourcers subcontracted which include clauses that guarantee their commitment to compliance with the GDPR.

6. Your rights

At any time you may ask us to:

  1. Provide access to the information we have about you;
  2. Rectify the information if it is incorrect or incomplete;
  3. Delete or limit the processing of your personal data;
  4. If the processing depends on your consent or agreement and this is gathered through automated means, you are entitled to the delivery of the personal data supplied beforehand in a structured, commonly used and computer readable format.

Your requests will be processed extremely carefully to guarantee we uphold your rights. We may ask you to prove your identity in a secure way to make sure the personal data are shared only with the data subject.

If you exercise any of these rights, we will analyse your request and respond within 1 (one) month whenever possible. You should be aware that in certain cases (e.g. due to legal requirements) your request may not be satisfied immediately.

If you are not satisfied with how we use your personal data or with our response after exercising any of these rights, you may make a complaint to our Data Protection Officer and/or the Data Protection National Commission.

Right of access

Data subjects are entitled to obtain confirmation from CORDEIRO CAMPOS & Cª LDA about whether their data will be processed or not, and if so, to obtain access to the personal data and the information outlined in law.

Right to rectification

Data subjects are entitled to demand that CORDEIRO CAMPOS & Cª LDA, with no unjustified delay, rectifies inaccurate or incomplete data pertaining to them.

Right to be forgotten (deletion of data)

Data subjects are entitled to request CORDEIRO CAMPOS & Cª LDA to delete their data, with no unjustified delay, and CORDEIRO CAMPOS & Cª LDA undertakes to delete the personal data when applicable, in particular for one of the following reasons:

  1. The personal data are no longer needed for the purpose that led to their collection or processing;
  2. The data subject withdraws his/her consent to process the data (in cases where the processing is based on consent) and there are no further grounds to process the data.
  3. The data subject objects to the processing of the data and there are no prevailing legitimate interests that justify the processing;
Right to limitation of the processing

Data subjects are entitled to demand that CORDEIRO CAMPOS & Cª LDA limits its processing of the data, if applicable, in particular in one of the following situations:

  1. Contesting the accuracy of the personal data for a period that allows CORDEIRO CAMPOS & Cª LDA to check their accuracy;
  2. The processing of the data is legitimate and the data subject objects to the deletion of his/her personal data and requests, instead, limitation in the use of the data;
  3. CORDEIRO CAMPOS & Cª LDA no longer needs the personal data for processing, but these data are required by the data subject for the purpose of declaring, exercising or defending a right in a judicial action;
  4. If the data subject has opposed the processing, until the legitimate reasons of the processing entity prevail over the data subject’s reasons.
Right to portability of the data

If the processing depends on the consent of the data subject and this consent has been granted by automated means, the data subject is entitled to receive his/her personal data supplied to CORDEIRO CAMPOS & Cª LDA in a structured, currently used and computer readable format.

Right to object

The Data Subject has to right to object to the processing of his/her personal data in cases in which the data is processed for:

  1. direct marketing purposes;
  2. definition of profiles,

The data subject may also, at any time, object to the processing of his/her personal data provided that it is done in compliance with point 2.

Withdrawal of Consent

If consent is legally necessary to process the personal data, the data subject is entitled to withdraw this consent at any time, although this right does not compromise the legality of the processing based on the consent originally provided or the subsequent processing of the same data, based on other legal grounds, such as compliance with the contract or any legal obligations that CORDEIRO CAMPOS & Cª LDA are subject to.

If you intend to withdraw your consent, you may contact us by letter, telephone or e-mail.

7. Recruitment

The information and personal data contained in the Curriculum Vitae or other similar documents sent by any applicant to an employment position, by e-mail or other means, shall be processed automatically, for the purpose of recruitment and selection of applicants.

By providing the above-mentioned information and personal data to the company, the applicant is granting consent that such information and data be processed by the company.

The supply of any sensitive data shall be processed for the purpose of recruitment and selection of applicants if they are relevant and pertinent for such purposes, and it is considered that the data are supplied based on the data subject’s consent.

Applicants are entitled, at any time, in accordance with the current law, to have access to, rectify, delete, limit or object to the processing of their data. To do so, they should use the area provided for the purpose on the company website or send an e-mail to: geral@cordeirocampos.pt. Applicants also have the right to withdraw their consent at any time, under the terms of the Law and to make complaints to the supervisory authority.

The company shall store the applicants’ personal data for the time needed to fulfil the purposes for which they were collected. The collection of data within the scope of this privacy policy does not comprise fulfilment of a legal or contractual obligation. However, if the applicant is selected, the personal data shall be used to draw up the respective contract. The data collected will not be the object of automated decisions. The data may be used to define the profile with the sole aim of selecting the successful candidate, whereby the final decision to select or not select the applicant will not be automatic and will be subject to human intervention. If the applicant does not authorise being subject to a decision based on the profile, he/she shall expressly declare this desire or refrain from sending an application. The company has implemented appropriate technical and organisational measures to protect the personal data against destruction, whether accidental or illicit, alteration, non-authorised access and disclosure and against any form of illegal processing. Employees authorised to access the personal data are bound by a duty to confidentiality.

8. Use of cookies and similar technology

The CORDEIRO CAMPOS & Cª LDA website does not use cookies.

Occasionally, CORDEIRO CAMPOS & Cª LDA will update this Privacy Policy.

We request that you re-read this document on a regular basis to stay up to date.