Toscca is committed to protecting the privacy of all its customers and suppliers and has therefore drawn up this policy to demonstrate its commitment to defending the rights of personal data subjects, in accordance with the General Data Protection Regulation and other applicable legislation.
Toscca respects the best practices in the field of security and protection of personal data, and to this end has developed and implemented a demanding set of technical and organizational measures, capable of safeguarding the protection of the data made available to us by all those who in any way relate to the Company.
In this context, Toscca has a Personal Data Protection Officer who is responsible for implementing and verifying this Privacy Policy, as well as defining clear rules for processing personal data, ensuring that all those who entrust us with the processing of their personal data are aware of how the company processes the data and what rights they have in this regard.
Toscca is responsible for protecting and processing the personal data of all its customers and/or potential customers, suppliers and subcontractors, from whom we process data lawfully.
Any communication regarding the collection and processing of your personal data should be addressed to:
TOSCCA - Equipamentos em Madeira, Lda e-mail rgpd@toscca.com and/or address: Zona Industrial Lote 82, 3680-171 Oliveira de Frades 232 762 487
Scope of application
This data protection policy applies to all natural persons who hold personal data collected and processed by Toscca:
- Pre-contractual due diligence at the request of the data subject;
- Customers with whom a contractual relationship has been established for the provision of services or supply of products marketed by Toscca;
- Suppliers with whom a contractual relationship has been established for the provision of services or goods;
- Subcontractors of the Toscca company, to whom we make personal data available under a subcontractor agreement;
- Data subjects who have given their explicit consent to the collection and processing of their personal data for the purposes of marketing, advertising, evaluating satisfaction with the service provided and any other duly identified purposes.
Fundamento para o tratamento
Your personal data will be collected and processed in the following situations:
- Execution of pre-contractual procedures, when the collection and processing of personal data is necessary for the preparation and presentation of proposals for services and supply of products and respective contacts made in the context of commercial follow-up to the proposal(s) presented;
- Execution of contract and contractual relations, when the collection and processing of personal data is necessary for the conclusion of the contract, execution and management of the contract and/or contractual relationship (e.g. address of delivery or provision of the service, management of contacts, information and requests, management of invoicing, collections and payments);
- Compliance with legal obligations to which Toscca is subject;
- If you are a supplier to Toscca;
- If you are a subcontractor of Toscca;
- If you have given your consent to the collection and processing of your personal data and that consent is free, informed, specific and unambiguous.
Finalidade da recolha e tratamento
Our main objective is to ensure that all the data collected is completely appropriate for its purpose and is not subsequently processed in a way that is incompatible with that purpose.
The data collected depends on its purpose and is always limited to what is strictly necessary.If you send us data that we do not need, we will delete it and/or return it to the owner of the personal data, or the person responsible for the personal data.
Since all the data requested is limited to the purpose for which it is requested, it must be provided, and if this data is missing or insufficient, Toscca will not be able to provide the services in question, so Toscca will inform those involved of the mandatory nature of providing the data.
When the collection and processing of personal data is not based on a legal basis, we request the consent of the holders of the personal data for specific purposes, in a clear, informed and explicit manner, so that the consent is a clear positive act, indicating a clear, free, specific, informed and unequivocal/explicit manifestation that the holder of the data consents to the processing of the data concerning him/her.
The personal data collected is processed by computer and in strict compliance with the legislation on the protection of personal data. It is stored in a specific database created for this purpose and, under no circumstances, will the data collected be used for any purpose other than that for which the data subject has been informed or for which consent has been given by the data subject.
Categorias de dados
Conservação de dados
Toscca processes and stores personal data in accordance with the purposes for which they are processed.Personal data is processed by Toscca only for the period necessary to fulfill the defined purpose or in accordance with applicable legislation or until you exercise your right to object, to be forgotten or to withdraw your consent.
As such, Toscca will process and keep personal data for as long as it maintains a contractual relationship with the data subject, although we may have to keep personal data beyond the contractual relationship, either based on the consent of the data subject, or to ensure rights or duties related to the contract, or because it has legitimate interests that justify it, but always for the period strictly necessary to fulfill the respective purposes and in accordance with the guidelines of the CNPD.
In the context of pre-contractual activity, we keep your data until you inform us that you do not wish to purchase our products and/or services or in the absence of a response within 5 years of the start of the pre-contractual relationship, if you have given us consent to keep your personal data, it will be kept until you withdraw your consent.
Personal data collected and processed with the consent of the data subject will be kept for a period of 5 years, after which the data subject will be asked to give their consent again if they have not withdrawn their consent within this period.
After the respective retention period has elapsed, Toscca will delete or anonymize the data whenever it should not be kept for a different purpose that may still exist.
Direito de acesso e gestão de dados
Under the terms of the General Data Protection Regulation, the data subject is guaranteed the right to access, rectify, erase, limit and port their personal data.
Subject to certain conditions, you may have the right to ask us:
- Availability of additional information about our use of your personal data;
- A copy of the personal data you have provided us with;
- That we provide your personal data to another data controller at your request;
- Updating any inaccuracies in the personal data we hold;
- Deletion of personal data whose use is no longer legitimate;
- Limiting how we use your personal data until the complaint is investigated.
- Opposition to the processing of personal data concerning you, provided there are no compelling legitimate reasons for the processing.
The exercise of your rights is subject to certain exceptions intended to safeguard the public interest (prevention or detection of crimes) or our interest (maintenance of professional secrecy) or the legislation to which the Toscca company is subject.
If you exercise any of these rights, we will analyze them and respond, hopefully, within 30 days.
How to exercise your rights
The exercise of your rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a fee of €25.00 may be charged.
The information must be provided in writing, but if you request it, it can be provided orally, and your identity must be demonstrated by means other than verbal.
Exerça os seus direitos através de:
TOSCCA – Equipamentos em Madeira, Lda
E-mail rgpd@toscca.com e/ou morada:
Zona Industrial Lote 82,
3680-171 Oliveira de Frades
Toscca does not subject data subjects to any decision taken solely on the basis of automated processing, including profiling.
Data subjects have the right to lodge a complaint with a supervisory authority, if you are dissatisfied with our use of your personal data or with our response after exercising any of these rights, you have the right to lodge a complaint with your supervisory authority (Comissão Nacional de Proteção de Dados - CNPD | Rua de São Bento, n.º 148, 3º, 1200-821 Lisboa | Tel: 351 213928400 | Fax: +351 213976832 | e-mail: geral@cnpd.pt).
In the event of a personal data breach, and if this poses a high risk to the rights and freedoms of the data subject, the data subject will be informed:
- the nature of the personal data breach;
- the categories of personal data;
- number of data subjects affected;
- approximate number of records of the personal data in question;
- Likely consequences of personal data breaches;
- Measures adopted and/or proposed by the Data Controller with a view to remedying the personal data breach, and if applicable, measures to mitigate any negative effects.
Consent
A empresa Toscca solicita o consentimento do titular dos dados, que o deverá dar, caso assim o entenda, através de ato positivo, que indique uma manifestação clara, livre, especifica, informada e inequívoca/ explicita de que consentiu o tratamento dos dados que lhe digam respeito. Sempre que a empresa Toscca solicite o seu consentimento, caso necessite de qualquer informação adicional à recebida no momento da recolha do seu consentimento, poderá solicitá-la ao Responsável pela Recolha e Tratamento de Dados Pessoais para o e-mail rgpd@toscca.pt.
Sempre que pretenda receber campanhas de marketing, publicidade dos nossos serviços, deverá dar autorização para tal.
You can change or withdraw your consent at any time, with effect for the future.To do so, please send a letter or e-mail to the above contacts.
Segurança dos seus dados pessoais
A empresa Toscca tem implementadas rigorosas medidas técnicas e organizativas, necessárias e suficientes para proteger os seus dados pessoais, contra a sua difusão, perda, uso indevido, alteração, tratamento ou acesso não autorizado, bem como contra qualquer outra forma de tratamento ilícito.
Compliance with these rules is an unquestionable obligation of all those who legally access them.We use a variety of security measures, including encryption and authentication tools, to help protect and maintain the security, integrity and availability of your personal data.
Although the transmission of data via the internet or website cannot guarantee total security against intrusions, we and our subcontractors make every effort to implement and maintain physical, electronic and procedural security measures designed to protect your personal data in accordance with applicable data protection requirements. Among others, we have implemented the following:
- Restricted personal access to your personal data on a "need to know" basis and only within the scope of the purposes communicated;
- All accesses are limited and defined according to the exclusive need, for the performance of the function and implementation of the service, which gave rise to the need to collect the personal data of natural persons, guaranteeing their confidentiality;
- All Toscca employees, especially those who have access to and process the personal data of individuals, are subject to confidentiality rules and are fully aware, sensitized, informed and trained on the application of the General Data Protection Regulation;
- Means of protecting data by design (privacy by design) and a set of privacy-friendly preventive measures (privacy by default);
- Transfer of data collected only in encrypted form;
- Protection of information technology systems through firewalls to prevent unauthorized access to your personal data;
- The existence of a strict policy on access to computer systems and information and recording of actions carried out by Toscca employees on the personal data of customers, suppliers and subcontractors (logging);
- Permanent monitoring of access to information technology systems in order to prevent, detect and stop the misuse of your personal data;
- Audit and control mechanisms to ensure compliance with security and privacy policies;
- An information and training program for employees.
Transfer of data to subcontractors
Your data may be passed on to subcontractors for processing in the name and on behalf of Toscca.When this happens, Toscca takes the appropriate measures to ensure that the subcontractors who have access to personal data are in compliance with the General Data Protection Regulation and offer the highest guarantees in this regard, which will be duly stipulated and safeguarded in a contract signed between Toscca and the subcontractor.
Toscca reserves the right to make adjustments or changes to this Privacy Policy at any time, and such changes shall be duly published on the Company's website.