Responsible for Treatment

Mapril, Lda is a company dedicated to the commercialization of Chemical Products and Machinery for Industry. In order to carry out its business it needs to collect and process personal data from its customers, employees or third parties who have dealings with it, and as such it assumes the role of Data Controller with all the obligations that such a position entails.

We know how important personal data is to its owners and that is why we have made ourselves available so that you can easily and free of charge exercise all your rights by sending an e-mail to: mapril@mapril.pt

Identity and mission

Mapril, Lda's main focus is the satisfaction of its customers, from whom it needs to collect personal data. At the same time, it also collects and processes employee data. And although data processing is complementary to its activity, it guarantees that it will do so in strict compliance with the GDPR and the law.

We consider the privacy of our customers, employees and others to be an essential asset and one to which we will give the utmost protection.

Personal Data

Personal Data means all information, regardless of its nature or medium, relating to a perfectly identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, by means of an identifier, such as a name, identification number, location data, electronic identifier or other specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity that make it possible to identify that natural person.

What categories of personal data do we process?

In order to manage our business and provide our best services, we process identification data (name, gender, civil and tax identification number, nationality, date of birth, other personal data), your contact details (address, telephone number, e-mail address). With regard to our employees, we collect the same type of data as mentioned above, plus data relating to their marital status, household and educational qualifications, social security number.

Collection and Processing of Personal Data

The sole purpose of collecting and processing the data of our clients and employees is to provide the services that constitute our mission and to enter into employment contracts. Personal data is accessed directly, indirectly or even through direct contact with clients and employees.

What are the grounds and purposes for processing personal data?

The purposes for processing your personal data are to manage the contract (employment and service provision) and to provide the best service and comply with legal and contractual obligations.

As for the legal grounds for processing personal data, they are identified as (1) Consent (in relation to authorization to capture and disclose an image), (2) Performance of a contract or pre-contractual steps (when the processing of personal data is necessary for the conclusion, performance and management of the employment contract or provision of services), (3) Compliance with a legal obligation (when the processing of personal data is necessary to comply with a legal obligation to which the Foundation is subject, such as the communication of data to police, judicial, fiscal or regulatory entities, or (4) Pursuit of our legitimate interest (when the processing of personal data corresponds to a legitimate interest of Mapril), or (5) safeguarding the vital interests of clients or employees.

The data will be processed and stored in accordance with the purposes and for the minimum legal period necessary.

Responsibility of subcontractors

Your data may be processed by entities subcontracted by Mapril, and only the data necessary to perform the required service will be provided to these entities.

We apply the following data processing rules to all our activities and to third parties and subcontractors:

- personal data will be processed in compliance with the legal data processing regime, this privacy policy and with the guarantee of lawful, fair and transparent processing;

- the data collected is merely instrumental to our activity, intended to pursue a specific, specific and legitimate purpose, with no further processing incompatible with these purposes;

- we respect the principle of data minimization, collecting only the data considered adequate, relevant and necessary for the purposes of collection and processing;

- in compliance with the principle of accuracy, we will keep your data accurate and up-to-date whenever necessary, and we will adopt and make available to its owner all the necessary measures to guarantee its integrity;

- we assume the principle of preserving your data in such a way that it is possible to identify you only for the period necessary for the purposes for which the data is processed;

- we will process your data in accordance with the principle of security - protecting your data from possible illegal and unauthorized processing, preventing possible loss, destruction or unforeseen damage, adopting all appropriate technical and organizational measures for data processing that guarantees the security, integrity and confidentiality of the data;

- whenever you are asked to consent to the processing of data, we will provide the necessary information regarding the purposes of the processing and we will stick to these purposes.

Rights of the Holder

The holders of personal data have the following rights, which they can exercise easily and free of charge:

Right of Access - the right to obtain confirmation of what personal data is being processed and information about it.

The right to see or obtain a copy of, for example, invoices or written agreements.

Right of Rectification - the right to request the rectification of inaccurate personal data or to request that incomplete personal data be completed.

Right to erasure or "right to be forgotten" - the right to have your personal data erased, provided that there are no valid grounds for retaining it, such as when Mapril has to retain the data in order to comply with a legal obligation or to exercise a right.

Right to Portability - the right to receive the data you have provided in a commonly used, machine-readable digital format.

Right to Withdraw Consent - when data processing is based on the Client's agreement, the Client has the right to withdraw their consent at any time. Withdrawal of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given.

Right to object - in cases where the processing of data is carried out for the purposes of Mapril's legitimate interests, or the processing is carried out for the purposes of direct marketing or profiling based on your personal preferences or interests, you may also object to the processing of personal data at any time.

Right to restriction of processing - the right to request the restriction of the processing of your personal data, in the form of (1) suspension of processing or (2) limitation of the scope of processing to certain categories of data or processing purposes.

Right to lodge a complaint - the right to lodge a complaint with the supervisory authority, the National Data Protection Commission, in addition to being able to do so directly with Mapril, if you consider that your data is not being processed legitimately.

The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a fee may be charged. You should send your written communication to the following e-mail address: mapril@mapril.com

Technical and organizational guarantees for the protection of personal data

In order to guarantee the security of the data of users, employees and other holders, as well as maximum confidentiality, Mapril treats all personal data in an absolutely confidential manner, in accordance with its internal security and confidentiality policies and procedures, which are updated periodically according to needs, as well as with the terms and conditions provided for by law.

Depending on the nature, scope, context and purposes of the data processing, as well as the risks arising from the processing for the rights and freedoms of the data subjects, we apply the necessary and appropriate technical and organizational measures to protect the data, both at the time of defining the means of processing and at the time of the processing itself.

Mapril also undertakes to ensure that, by default, only the data that is necessary for each specific purpose of processing is processed and that this data is not made available without human intervention to an indeterminate number of people.

Applicable Laws and Jurisdiction

The Privacy Policy, as well as the collection, processing or transmission of Customer and Employee Data, are governed by the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 and by the applicable laws and regulations in Portugal. Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or which are related to the collection, processing or transmission of Customer data, shall be submitted exclusively to the jurisdiction of the courts of the district of Porto, without prejudice to the applicable mandatory legal rules.