Privacy Policy
Catari's Privacy Policy.
Mission and Commitment
This policy aims to define the general principles and rules applied by Catari Indústria, S.A. to the Personal Data collected, considering the General Data Protection Regulation, Regulation (EU) 2016/679.
Catari Indústria, S.A. has an Internal Code of Conduct that binds its employees (workers and service providers) to comply with personal data protection.
Collection and Processing of Personal Data
1. When Personal Data is collected
Catari Indústria, S.A. collects your Personal Data through the following means:
- When you contact our company for the first time, in person, via phone, or through our website/social media.
- When you enter into a service provision contract/employment contract with Catari.
- When referred by competent authorities.
- When you send a letter/email/form for unsolicited applications.
2. Purpose for which Personal Data is collected
Catari only collects and processes Personal Data when:
- The Data Subject has given consent for the processing of their Personal Data for one or more specific purposes (where required);
- Processing is necessary for the performance of a contract or for the taking of pre-contractual steps;
- Processing is necessary for compliance with a legal obligation to which the company is subject;
- Processing is necessary for the purposes of the legitimate interests of the company, unless these interests override the interests or fundamental rights and freedoms of the Data Subject.
3. Retention Period
Catari Indústria, S.A. will retain Personal Data in accordance with retention periods imposed by applicable legislation:
- Personal data will be kept for a period of 5 years after the resolution of the service contract;
- Data necessary for billing will be retained for the 10-year period required by tax legislation;
- Data related to unsolicited applications or responses to job advertisements will be kept for a period of one year;
- Data collected in the context of employment relationships will be kept for a period of 5 years;
- Data collected for communication and marketing purposes, without a contractual arrangement, will be kept as long as there is legitimate interest.
After these periods, all data will be deleted from Catari Indústria, S.A.’s database.
4. Rights of Data Subjects
The Data Subject has the right to request access, rectification, deletion, and transfer of their Personal Data, as well as to restrict and object to the processing of their Personal Data.
When processing is based on the Data Subject’s consent, they have the right to withdraw their consent at any time.
In their own interest, the Data Subject should seek to keep their data up to date.
If the Data Subject wishes to exercise their rights and/or update their Personal Data, they may do so by contacting via email at dpo@catari.pt.
Data Subjects have the right to file a complaint with the National Data Protection Commission in case of violation of the applicable rules regarding the protection of Personal Data.
Privacy Notice
The personal data collected and processed is intended solely and exclusively for compliance with legal, contractual, or Catari’s legitimate interests.
The provisions regarding the processing of personal data are described in this Privacy Policy.
In the event of a confirmed Personal Data breach, Catari Indústria, S.A. will notify the National Data Protection Commission within a maximum period of 72 hours, as well as the Data Subject concerned.
Changes to the Privacy Policy
The Personal Data Protection Policy may be amended by Catari Indústria, S.A. whenever necessary or due to legislative changes. A notice of such amendments will be published in a revised version of the current Policy, which will come into effect upon its publication.
Catari Indústria, S.A. will notify Data Subjects of any changes to the policy through the contact details provided by them.
Contact and Data Protection Officer
If you have any questions regarding this Privacy Policy, you may contact us via email at dpo@catari.pt
Catari has appointed a Data Protection Officer (DPO), who plays a key role in promoting a culture of data protection within the organisation and in ensuring compliance with the GDPR. The DPO can be contacted at dpo@catari.pt