Responsible for Treatment

Mapril, Lda is a company engaged in the marketing of Chemical Products and Machinery for Industry. In order to pursue its business activity, it needs to collect and process personal data of its customers, employees or third parties that have a relationship with it, assuming in this capacity the role of Data Controller with all the obligations that this position implies.

We know how important personal data is to its owners and therefore we have made ourselves available so that, easily and free of charge, you can exercise all your rights through the following e-mail address: mapril@mapril.pt

Identity and Mission

Mapril, Lda has as its main focus the satisfaction of its customers, from whom it needs to collect personal data. At the same time, it also collects and processes employee data. And although the processing of data is complementary to its activity, it guarantees that it will do so in strict compliance with the RGPD and the law.

We consider the privacy of our customers, employees and others an essential asset and one to which we will give the utmost protection.

Personal Data

Personal data shall mean any information, regardless of its nature or support, concerning a perfectly identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, through the use of an identifier, such as name, identification number, location data, electronic identifier or other specific elements of physical, physiological, genetic, mental, economic, cultural or social identity allowing the identification of that natural person.

What categories of personal data do we process?

In the management of our activity and in order to provide our best services, we process identification data (name, gender, civil and tax identification document number, nationality, date of birth, other personal data), your contact data (address, telephone contact, email address). Regarding our employees, we collect the same type of data mentioned above, to which we add data related to their marital status, household and educational qualifications, social security identification number.

Collection and Processing of Personal Data

The sole purpose of collecting and processing the data of our clients and employees is to provide the services that constitute our mission and to conclude employment contracts. Access to personal data is done directly, indirectly or even by direct contact with customers and employees.

What is the basis and purpose for processing personal data?

The Purposes of processing your personal data are the management of the contract (of employment and provision of services) and the provision of the best service and compliance with legal and contractual obligations.

As to the legal grounds for the processing of personal data, they are identified as (1) Consent (regarding the authorization to capture and disclose the image), (2) Execution of a contract or pre-contractual diligences (when the processing of personal data is necessary for the conclusion, execution and management of the work or service provision contract), (3) Compliance with a legal obligation (where the processing of personal data is necessary to comply with a legal obligation to which the Foundation is subject, such as the communication of data to police, judicial, tax or regulatory authorities, or (4) Pursuit of a legitimate interest of ours (where the processing of personal data corresponds to a legitimate interest of Mapril), and may also be caused by (5) safeguarding the vital interests of customers or employees.

The data will be processed and stored in accordance with the purposes and for the minimum legal period necessary.

Responsibility of Subcontracted Entities

Your data may be processed by entities subcontracted by Mapril, with only the data necessary for the execution of the required service being provided to such entities.

We guide all our actions and extend to Third Parties and Subcontractors the following data processing rules:

- personal data will be processed in compliance with the legal regime for data processing, with this privacy policy and with the guarantee of a legal, fair and transparent processing;

- the data collected is merely instrumental to our activity, being intended to pursue a determined, specific and legitimate purpose, with no further processing incompatible with these purposes;

- we respect the principle of data minimization, collecting only the data considered adequate, relevant and necessary for the purposes of collection and processing;

- in compliance with the principle of accuracy, we will keep your data accurate and updated whenever necessary, adopting and making available to its holder all the necessary measures to ensure its integrity;

- we assume the principle of concern for the conservation of your data in such a way that it is possible to identify you only for the period necessary for the purposes for which the data is processed;

- we will process your data in accordance with the principle of security - protecting your data from possible unlawful and unauthorised processing, preventing any loss, destruction or unforeseen damage and taking all appropriate technical and organisational measures for data processing which ensure data security, integrity and confidentiality;

- where you are asked for consent to the processing of data, we will provide the necessary information as to the purposes of the processing and stick to these purposes.

Rights of the Holder

Personal data subjects have the following rights, which they may exercise easily and free of charge:

Right of Access - the right to obtain confirmation of and information about which of your personal data is processed.

Right to see or obtain a copy of, for example, invoices or written agreements.

Right of Rectification - right to request that your personal data that is inaccurate be rectified or to request that incomplete personal data be completed.

Right to erasure of data or "right to be forgotten" - the right to obtain the erasure of your personal data, provided that there are no valid grounds for its retention, such as cases in which Mapril has to retain the data to comply with a legal obligation or to request the exercise of a right.

Right to Portability - the right to receive the data you have provided us with in a commonly used and machine-readable digital format.

Right to Withdraw Consent - when data processing is based on the Customer's agreement, the Customer has the right to withdraw his or her consent at any time. Withdrawal of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given.

Right to object - in cases where data processing is carried out for the purposes of the legitimate interests of Mapril, or processing is carried out for direct marketing or profiling purposes based on your personal preferences or interests, you may also object to the processing of your personal data at any time.

Right to Limitation of Processing - right to request the limitation of the processing of your personal data, in the form of (1) suspension of processing or (2) limitation of the scope of processing to certain categories of data or purposes of processing.

Right to lodge complaints - the right to lodge a complaint with the supervisory authority, the Comissão Nacional de Proteção de Dados, in addition to being able to do so directly to Mapril if you consider that your data is not being legitimately processed.

The exercise of your rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a fee may be payable. You should send your written communication to the e-mail address: mapril@mapril.com

Technical and organisational safeguards for the protection of personal data

In order to ensure the security of the data of users, employees and other data subjects, as well as maximum confidentiality, Mapril handles all personal data in an absolutely confidential manner, in accordance with its internal security and confidentiality policies and procedures, which are periodically updated as necessary, as well as with the terms and conditions provided for by law.

Depending on the nature, scope, context and purposes of processing as well as the risks of processing for the rights and freedoms of data subjects, we shall implement necessary and appropriate technical and organisational measures to protect the data, both when defining the means of processing and at the time of the processing itself.

Mapril further undertakes to ensure that, by default, only data that are necessary for each specific purpose of processing are processed and that such data are not made available without human intervention to an indefinite number of persons.

Applicable Laws and Jurisdiction

The Privacy Policy, as well as the collection, processing or transmission of Customer and Employee Data, are governed by the provisions of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016 and by the laws and regulations applicable in Portugal. Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or that are related to the collection, processing or transmission of Customer Data, shall be submitted exclusively to the jurisdiction of the judicial courts of the district of Porto, without prejudice to the applicable mandatory legal rules.