Privacy Policy

Fábrica de Tintas 2000, S.A. complies with legal rules regarding the protection of personal data of its employees, job applicants, trainees, customers and suppliers (Natural Persons), namely those arising from national and EU legal provisions and resolutions of the National Data Protection Commission, including the General Data Protection Regulation (GDPR).

SCOPE OF APPLICATION
The GDPR framework applies to all natural persons who have any relationship with Fábrica de Tintas 2000, S.A., regardless of their link to the company, in order to ensure data protection and the free movement of such data.

DATA SUBJECT CONSENT
By accepting the terms of this Privacy Policy, you are giving consent for the use of your data. The GDPR requires consent as a free, specific, informed and explicit expression of will.
If you do not agree with the terms of our Privacy Policy, please do not provide us with personal information.

PERSONAL DATA OF EMPLOYEES
The processing of employee personal data in the employment relationship arises from contractual content and from compliance with legal obligations before Tax Authority, Social Security, Authority for Working Conditions and other official entities.

The processing of employee personal data is reserved to the Data Controller designated at each moment, with duly justified limited access under the law, always safeguarding confidentiality.
At any time, the employee may request access to protected data and request amendment or correction in case of error or incompleteness.

1. Purpose of processing employee personal data
Employee personal data may be collected and processed by Fábrica de Tintas 2000, S.A. for: administrative management; payroll calculation and payment; mandatory or optional withholdings; execution of court decisions; handling employee requests regarding their data; processing other salary and allowance matters; issuing training certificates internally or by external entities; issuing travel tickets, visas and documents required for travel; attendance/access records and control; and compliance with legal obligations in occupational health and safety.

2. Categories of personal data to be collected
Strictly for the above purposes, the company may collect and process personal data and originals/copies of supporting documents including: identification data; family status; professional activity data; remuneration and payment data; and other data necessary to comply with the previous article.

3. Recipients of employee personal data
Potential recipients are entities to whom data must be disclosed by law or at the data subject request; financial institutions managing payroll accounts; pension/previdency managers; insurance companies for work/personal accident coverage (if applicable); training entities issuing certificates; travel agencies/transport companies for travel documents; accounting and HR departments for payroll/accounting obligations; audit entities in certification processes; external consultants; occupational medicine and safety entities; and entities ensuring IT management of personal data.

External entities (Processors) to whom employee data is disclosed under this regulation are contractually bound to comply with legal data protection obligations applicable to the Data Controller.

OCCUPATIONAL MEDICINE
The processing of employees clinical data follows the regime for sensitive data and is therefore exclusively accessible to the company doctor or certified medical team, with access by the employee upon direct prior request to the occupational doctor.
By signing the employment contract and throughout its execution, the employee consents that personal data may be securely stored in digital form, processed and accessed as previously or specifically defined.

DATA RETENTION PERIOD
For the purposes above and to comply with legal obligations, after individual voluntary data collection, Fábrica de Tintas 2000, S.A. will retain data within legally established periods.

PHOTOGRAPHS / FILMING / RECORDINGS
It is prohibited to photograph, film, record, copy and/or reproduce personal documents without the data subject consent, except in cases provided by law or duly authorized by a competent authority.

PERSONAL DATA OF JOB APPLICANTS
Fábrica de Tintas 2000, S.A. safeguards the right to data protection of job applicants whose data is voluntarily provided and authorized by the data subject, and will process it confidentially under applicable law. The applicant will be asked to authorize insertion of personal data in the database for due purposes and should sign the Informed Consent - spontaneous application or job offer application.

PERSONAL DATA OF TRAINEES AND TRAINERS 
The processing of trainees and trainers personal data derives from contractual content and compliance with legal obligations before official entities.

The processing of trainees and trainers personal data is reserved to the designated Data Controller, with duly justified limited access under the law and confidentiality safeguards.

At any time, trainees/trainers may request access to protected data and request amendment or correction in case of error or incompleteness.

Trainees/trainers enjoy, under the law, rights of information, access and opposition regarding personal data processing. To exercise these rights, a written request must be submitted to the entity Data Controller.

By signing the training contract and throughout its execution, trainees/trainers consent that personal data may be securely stored in digital form, processed and accessed under previously or specifically defined terms.

Regarding personal data of customer-trainees in training matters, the Personal Data Consent Template - Customer Training may be consulted. 

PERSONAL DATA OF CUSTOMERS AND SUPPLIERS
The entity collects, uses and stores personal data provided by Customers and Suppliers under applicable law, namely GDPR, as appropriate for executing the contractual relationship and upon consent.

Within contractual/commercial relationship and legitimate interest in pursuing activity, the Customer and/or Supplier authorizes insertion of personal data in the company database so it may be used for technical data sheets, safety sheets, technical/commercial information, product/system declarations from external entities, marketing actions, event/new product communications and financial documents.

The Customer and/or Supplier must immediately notify Fábrica de Tintas 2000, S.A. if personal data changes affecting the contractual relationship occur.

Personal data may be stored and used even after process/contract termination, under legal terms and until invoicing and/or legal obligations arising from commercial/contractual relationship are completed.

WEBSITE USE
If you are, or intend to become, a user of our Website through user registration (username-password), your data will be stored in a specific user control database solely for that purpose.

You may request deletion at any time by written request to our official address on our Website. Data deletion means you will no longer be able to use the Website as a registered user unless you create a new account.

If you use our Website without registration and contact us through forms, data requested in those forms may be stored and used only for that purpose. You may also request deletion and continue using our Website normally.

1. When we collect this information
We collect information when users register on our website, place an order, subscribe to the newsletter, respond to forms or use live chat.

2. How we use your information
We may use your information when you register, make a purchase, subscribe to newsletter, answer a survey, browse the website, or use certain features:
- Personalize your experience and deliver content types that are more relevant to your interests;
- Improve the website to better serve you;
- Provide better service by responding to customer requests;
- Manage contests, promotions or surveys;
- Process your requests more quickly;
- Follow up your requests (live chat, email or phone)

3. How we protect your information
Our website is regularly checked for security flaws and known vulnerabilities to keep it as safe as possible.

Your information is contained in secure networks and can only be accessed by a limited number of people with special access rights, who are required to keep this information confidential. In addition, the entire website is protected with SSL encryption to securely transfer private information and personal data online.

We have implemented security measures when users place orders, submit information or access information to keep personal information safe.

All payments are processed by an external entity and payment data is never hosted on our server.

4. Newsletter sending
All personal information obtained through your consent will be recorded, used and protected in accordance with applicable EU data protection legislation, GDPR and this Privacy Policy of Fábrica de Tintas 2000, S.A.

Collected information is intended for sending newsletters and other information by email regarding our products and services, when requested by the participant.

If you no longer wish to receive emails, contact us by email or letter to our address and request withdrawal of consent previously given.

It is also possible to remove your email address from the database by following the instructions at the end of each newsletter.

USE OF COOKIES
Under GDPR, cookies are small text files with relevant information that your access device loads through the browser when you visit our Website.

Thus, we use cookies only to collect information about your visits to our Website and improve your experience.

If you wish, you may disable all cookies by adjusting browser settings, if previously enabled. For more information, please consult our COOKIE POLICY.

PRIVACY OF MINORS (CHILDREN AND YOUNG PEOPLE)
Fábrica de Tintas 2000, S.A. is committed to protecting children privacy and does not intend to collect personal data from minors.

It is the responsibility of parents/guardians to regularly control and supervise children use of email and other online activities.

RIGHTS OF THE DATA SUBJECT
All natural persons enjoy, under GDPR, the following rights:

Right of access
The data subject has the right to know whether personal data concerning them is being processed. They may receive a copy of personal information in our possession.
Although access is generally free, the entity may charge a fee where requests are excessive or unfounded.

Right to rectification
The data subject has the right to obtain from the Controller rectification of outdated, incorrect or incomplete personal data.

Right to erasure 
The data subject has the right to be forgotten and request the Controller to erase data when:
- Data is no longer necessary for purposes for which it was collected/processed;
- The data subject withdraws consent where processing is based on consent and no other legal basis exists;
- The data subject objects to processing of personal data used for automated purposes and/or profiling;
- Personal data has been unlawfully processed.

Right to restriction of processing
In parallel with erasure right, the law provides the data subject right to restrict processing in certain situations:
- Contest accuracy of personal data;
- Processing is unlawful and data subject opposes erasure and requests restriction instead;
- Controller no longer needs data for processing purposes but data is required for legal claims;
- The data subject has objected to processing pending verification whether Controller legitimate grounds override those of the data subject.

Right to data portability
The data subject has the right to request from the Controller personal data in a commonly used format and transfer it to another Controller, where feasible.

Right to object 
The data subject has the right to object at any time, on grounds relating to their particular situation, to processing of data concerning them.

To exercise these rights, submit a written request to the Data Controller of Fábrica de Tintas 2000, S.A.

FINAL PROVISIONS - OBLIGATIONS ON PERSONAL DATA PROTECTION
Fábrica de Tintas 2000, S.A., individually or jointly with another (Processor), determines purposes and means of data processing as the Controller and must ensure, among other aspects, that:
- Personal data is collected for specified, explicit and legitimate purposes and not further processed incompatibly;
- Only personal data that is adequate, relevant and not excessive is collected;
- Collected personal data is accurate and up to date;
- Personal data is kept only for the period necessary for collection/processing purposes;
- Data subjects are provided all information related to processing, with rights of access, rectification, deletion and objection under law;
- Data subjects may use the proper form [Exercise of Data Subject Rights] to request exercise of rights from the entity Controller;
- Data subject consent is obtained for processing where required;
- Data processing complies with all legal provisions;
- Authorized employees accessing personal data are bound by confidentiality duty;
- Contracts with processors regarding personal data include written confidentiality and privacy safeguards;
- Appropriate technical and organizational measures have been implemented to protect personal data against accidental/unlawful destruction, alteration, unauthorized access/disclosure and any unlawful processing;
- Records of personal data processing activities are maintained under legal terms.

Privacy Policy Review
This privacy policy may be changed at any time, with changes becoming effective from the latest indicated change date. 

If you have any questions or comments regarding our Website and/or our Privacy Policy, you may contact us using the information below:

www.tintas2000.pt
Rua Joaquim Silva Vicente
4470-434 Maia
229436800
tintas2000@test.tintas2000.pt