This privacy and data processing policy applies specifically and exclusively to the activity of METALBRAS, owner of the website www.mcmetalbras.pt and expresses its total commitment to the processing of personal data that you transmit to us in accordance with the Privacy Policy and the Cookies Policy in force at any given time, so we suggest that you read these policies carefully in order to assess whether you agree with them.

Data collected, respective purposes and data processing

METALBRAS, through the website indicated above, may collect personal data for the following purposes:

• To fulfil requests or orders made through the website and e-mails;
• To publicise the launch of new products and/or services by means of a newsletter or direct communication;
• To analyse the functionality and quality of our products and services;
• To collect spontaneous applications;
• Specific job opportunities, which will be publicised through the website and/or through the company’s social media pages, and the collection and processing of data collected at that time and for that purpose will be duly clarified at that time.

All personal data or sensitive information sent by its Holders without the prior consent or request of METALBRAS will be deleted and will not be processed or transferred to third parties by METALBRAS. The Holder of this data must be aware that by sending this information voluntarily, spontaneously and unsolicitedly, METALBRAS cannot be held liable for the processing/deletion of this data.

METALBRAS does not intentionally collect personal information from minors under the age of 18. If METALBRAS detects that it is unintentionally collecting personal information from minors under the age of 18, it will take the necessary measures to delete the information as soon as possible, unless it is obliged by applicable legislation to retain it.

In any case, ARCO’s rights (Access, Rectification, Correction, Opposition) under the GDPR – General Data Protection Regulation will be scrupulously respected.

In order to exercise this right, you must send an e-mail to info@mcmetalbras.com detailing the information or action you wish to be provided or carried out.

METALBRAS frequently reviews its data collection, storage and processing policies to ensure that it only collects, stores and processes information that is indispensable for the provision or improvement of services.

On the METALBRAS website there is
– a newsletter subscription form asking for: name and e-mail address
This data will be collected after express consent and authorisation by the user, and for this purpose there is an authorisation box which the user must tick if they wish to subscribe to the newsletter. The data submitted will be processed and used exclusively for the purpose of publicising the newsletter. The data collected will not be passed on to third parties, except in situations related to legal imperatives.

– a contact form asking for: name, e-mail, contact and message
This data will be collected after express consent and authorisation by the user, with an authorisation box to be ticked by the user. The data submitted will be processed and used exclusively for the purpose of responding to the communication submitted by the user. The data collected will not be passed on to third parties, except in situations related to legal imperatives.

– a form for sending spontaneous applications: name, surname, e-mail address and contact details
This data will be collected after express consent and authorisation by the user, with an authorisation box to be ticked by the user. The data submitted will be processed and used exclusively for the purpose of analysing the spontaneous application submitted by the user. The data collected will not be passed on to third parties, except in situations related to legal imperatives.

Data recipients

METALBRAS may subcontract other companies to provide certain services, namely website maintenance companies and other digital services. In these cases, these entities may need access to certain information and user data. METALBRAS guarantees that, in these cases, these entities will have limited access to the information of users, restricted only to those data necessary for the execution of the contracted tasks.

Likewise, METALBRAS may communicate your Personal Data when required to do so by law, within the scope of legal proceedings or within the scope of investigations into suspicious activities.

Data may only be transmitted to third parties after obtaining the consent of the data owner, which must include reference to all the data to be transmitted that is authorised, the purpose for which it is to be transferred and the identification of the recipient of the data transmission. In these cases, it is up to the holder of the personal data to ensure that they know and agree with the data protection and processing policy of the entity that will receive the information after authorisation.

In the event that METALBRAS carries out international transfers of your data to international countries or organisations, these will be carried out with the appropriate guarantees for the protection of your personal data.

Data controller

METALBRAS is responsible for processing your personal data.
The user may contact METALBRAS using the means indicated on the “Contacts” page

Data storage

METALBRAS stores the Personal Data you provide on servers in a secure environment, protected from unauthorised access, use or disclosure. METALBRAS adopts the necessary and appropriate technical, electronic and organisational procedures to guarantee the security of your Personal Data and prevent its loss, misuse or improper access..

Personal data contained in written documents is preserved and stored on our premises and protected from unauthorised or controlled access by third parties.

METALBRAS adopts the appropriate procedures to ensure that your information is accurate, complete and up-to-date, but it is up to you to update or correct your personal information when necessary.

Since Personal Data is collected on an open network (Internet), it may circulate on the network without security conditions and may be viewed and/or used by unauthorised third parties, even though appropriate security measures have been taken against accidental or unauthorised destruction and accidental loss, as well as against unauthorised access, modification or dissemination.

METALBRAS does not make automated decisions.

User rights (ARCO rights)

In accordance with the applicable legislation, METALBRAS undertakes to respect the confidentiality of your personal information and guarantee the exercise of your rights, namely:

• Right to be informed: our visitors/customers have the right to obtain clear, transparent and comprehensible information on how METALBRAS uses their Personal Data.
• Right of access: in addition to the right to information, you can request access to your personal data that we process and store. To do so, you should contact METALBRAS at the e-mail address info@mcmetalbras.com. In this regard, the e-mail address you use to contact METALBRAS will be used exclusively to respond to your request. METALBRAS will provide you with a copy of the personal data being processed.
• Right to rectification: you have the right to rectify your personal data if it is incorrect, out of date or if you wish to complete it. To do so, you should contact METALBRAS via the e-mail address info@mcmetalbras.com. In this regard, the e-mail address you use to contact METALBRAS will be used exclusively to respond to your request.

• Right to erasure/right to be forgotten: you can ask us to delete your data. However, please note that this is not an absolute right, as we may have legal grounds or other legitimate interests for retaining your personal data.
• Right to object, including to direct marketing: you may unsubscribe from the newsletter at any time, and a link to this effect will be provided in each newsletter. This request can also be made to us by telephone, e-mail or website.
• Right to withdraw your consent to data processing at any time: you may withdraw your consent to data processing when such processing is based on your consent. Withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
• Right to data portability: you have the right to move, copy or transfer your data from our database to another.
• Right to restriction of processing: you have the right to request the restriction of the processing of your data in the following situations: if you dispute the accuracy of the data, if the processing is unlawful and you do not want to delete your data but only limit it, if the data is no longer necessary for METALBRAS but necessary for the visitor/customer or if you have exercised the aforementioned right to object, during the period of time in which METALBRAS analyses whether or not your legitimate interests for the processing prevail over that right.

How long we store the data

We only keep Personal Data for as long as necessary to fulfil the purpose for which it was collected, to respond to your needs or to comply with our legal obligations.
To determine the period for which we store your data, we use the criteria set out below. If several criteria apply at the same time, we will store your personal data in accordance with the criterion that means we will store your Personal Data for the longest period of time.

• When you contact us to ask questions, we will keep your personal data for the period of time necessary to resolve your enquiry;
• When you have consented to be sent the newsletter, we will keep your personal data until you unsubscribe or ask us to delete it;
• The period of time provided for in the applicable legislation; or
• Until the specific purpose applicable to certain data ceases to exist.

In any of the aforementioned situations, if there are legal or administrative offence proceedings pending, the data will be kept for the duration of the proceedings and for up to six months after the final judgement has been handed down.

We may also retain some of your personal data to the extent that it is necessary for us to fulfil our legal obligations, as well as to manage or enforce our rights, namely through recourse to the courts.

At the end of the retention periods mentioned above, the Personal Data will be securely deleted and/or erased.

Guarantees

The data subject guarantees that the Personal Data communicated to METALBRAS is correct and accurate and undertakes to notify any alteration or modification thereto and assumes sole responsibility for losses and damages caused by erroneous, inaccurate or incomplete communication of the data.

The data subject is expressly warned that by disclosing Personal Data on METALBRAS public media such as social networks, this information may be seen and used by third parties. METALBRAS does not read any personal communications published on its visitors’ own web pages.

METALBRAS reserves the right to modify the Privacy Policy in accordance with new legal and/or regulatory requirements, for security reasons or in order to adapt said Policy to the instructions of the data protection supervisory authorities.

METALBRAS is firmly committed to complying with the legislation in force at all times and to processing your personal data in accordance with this privacy policy.

Security breaches

METALBRAS continuously monitors its security and data protection policies. If for any reason there is an actual or potential security breach, the following measures will be taken:

• Immediate communication to the owners of the data affected or potentially affected by the security breach;
• Immediate communication to the competent authorities;
• Immediate containment of the security breach;
• Identifying the reasons for the security breach and implementing the appropriate solutions to resolve it immediately.