Privacy Policy

Privacy and Personal Data Processing Policy

To conduct its business, Marimoldes needs to collect and process personal dataon its employees, customers and suppliers (e.g. name, taxpayer ID, email address and others).

Marimoldes is committed to safeguarding the privacy of all those who interact with it. As such, its Privacy and Personal Data Processing Policy is intended to specify which data may be collected under a professional and/or business relationship, and how this data is processed and protected.

What is personal data?

“Personal data” means any information, regardless of its nature or format, including sound and image, related to an identified or identifiable individual (data owner). A person who can be identified directly or indirectly, namely by reference to an identification number or other specific aspects of his or her physical, physiological, psychological, economic, cultural or social identity, is considered “identifiable”.

What data may be collected?

As an employer, the company will collect all personal data solely and exclusively needed to fulfil its obligations under the contractual relationship.

As a customer and/or supplier, the company will collect data needed to validate the compliance of other companies’ activities, along with contact information and other identification data needed for the business relationship between the parties.

This data will be collected at the start of the contractual relationship, or at the time of unsolicited application for purposes of recruitment, with the assurance that this data will only be used for the purposes described at the time of its collection.

This data is processed manually or by computer, in compliance with applicable legislation and the conditions laid out by the Portuguese Data Protection Authority (“CNPD”).

Who is responsible for processing personal data?

Marimoldes is responsible for processing personal data.

Subcontractors, disclosure and transfer of personal data

Personal data may be disclosed to other companies with which Marimoldes interacts.

Employee data can be shared with outside companies under the situations referred to in the declaration of consent.

The companies with which Marimoldes interacts as a customer/supplier, pursuant to legislation governing the processing of personal data, are obliged to maintain confidentiality and ensure security with regard to data accessible by them for this purpose, and may not use this data for any other purpose or to their own benefit, nor link it to other data in their possession.

Personal data may also be transmitted to the courts and other competent authorities, in strict compliance with the law, namely when needed for settling disputes or investigating criminal offences.

What is the retention period for personal data?

Personal data is kept for the time needed under the contractual relationship between the parties and for compliance with associated legal obligations.

Personal data security

Marimoldes is committed to respecting legislation on protecting the privacy of personal data in its possession, processing this data only for the purposes for which it was collected, and ensuring that this data is processed with adequate degrees of security and confidentiality, pursuant to applicable legislation and the conditions laid out by the CNPD.

Applicability.

Generally speaking, this Privacy and Personal Data Processing Policy applies to all services provided by Marimoldes, notwithstanding other policies, agreements and legislation applicable to more specific contexts of collecting and processing personal data.

Changes to this policy

Marimoldes may modify its Privacy and Personal Data Processing Policy whenever deemed justifiable. Such changes will apply to new personal data processing. However, if the changes impact the processing of previously collected personal data, data owners will be notified so that they may act accordingly within the limits of applicable law.