The protection of privacy and personal data is a fundamental commitment of all the companies that make up Corktansa, based on the following principles for its processing:
- Personal data is processed lawfully, fairly and transparently;
- It is only collected for duly determined, explicit and legitimate purposes, in accordance with the applicable legislation;
- The data collected is limited to what is strictly essential and for the time necessary for the purposes for which it is processed;
- Only employees, collaborators and partners of the company whose duties so require have access to the personal data processed;
- Personal data is treated confidentially.
A. Personal Data
According to the General Data Protection Regulation i.e. Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter just "GDPR") - personal data is any information of any nature and on any medium relating to an identified or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an electronic identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
B. Data controller
The person responsible for processing personal data will be Corktansa, the entity responsible for the website www.corktansa.com, with which the data subjects have a relationship.
C. Conditions for processing
Corktansa will only process personal data if one of the conditions laid down in the aforementioned European regulations is met, namely:
If the data subject has given their consent to the processing of their personal data;
If the processing of personal data is necessary for the performance of a contract to which the data subject is a party, or for pre-contractual procedures at the request of the data subject;
When processing is necessary for compliance with a legal obligation to which Corktansa is subject;
If processing is necessary to ensure the legitimate interests of www.corktansa.com
CONSENT
When your consent is express (in writing, orally or by validating an option) and prior, and if that consent is free, informed, specific and unequivocal. Examples include your consent for Corktansa to analyze job applications or validate certificates of qualifications and specific training;
CONTRACT PERFORMANCE AND PRE-CONTRACTUAL PROCEDURES
When the processing of personal data is necessary for the conclusion, execution and management of the contract entered into with us, e.g. for the preparation of proposals or quotes, for the management of contacts, information and requests, for the management of invoicing, collection and payments;
COMPLIANCE WITH A LEGAL OBLIGATION
When the processing of personal data is necessary to comply with a legal obligation to which Corktansa is subject, e.g. the communication of identification data to police, judicial, tax or regulatory bodies;
LEGITIMATE INTEREST
When the processing of personal data corresponds to a legitimate interest of Corktansa or a third party and when our reasons for using it must prevail over your data protection rights.
D. Personal data retention period
In compliance with the principles set out above, personal data processed by Corktansa is kept for the time strictly necessary for the purposes for which it was collected. These periods are determined on the basis of information retention criteria defined and appropriate to each processing and in compliance with the legal and regulatory obligations incumbent on the company.
E. Rights of personal data subjects
Corktansa ensures that the data subject can exercise the rights conferred on them by the GDPR on data protection, namely:
- Right of access to personal data (the data subject can obtain confirmation as to whether their personal data is processed and access information about it);
- Right to rectification (the data subject can request that their data be rectified or completed);
- Right to erasure (the data subject may request that their personal data be erased) in the following situations:
i. if the personal data is no longer necessary for the purpose for which it was collected or processed;
ii. if the consent on which the processing of the data is based is withdrawn and there is no other legal basis for it;
iii. if the data subject objects to the processing and there are no overriding legitimate interests;
iv. if the personal data have been processed unlawfully;
v. if the personal data must be erased as a result of a legal obligation.
- Right to restriction of processing (the data subject has the right to request restriction of processing) when:
i. the data subject contests its accuracy, for a period of time that makes it possible to verify its accuracy;
ii. the data subject considers that the processing is unlawful;
iii. the data is no longer necessary for processing purposes, but it is necessary for the purposes of declaring, exercising or defending a right in legal proceedings;
- Right to data portability (where processing is based on consent or the performance of a contract and is carried out by automated means, the data subject may request that personal data concerning him/her which he/she has provided be delivered in a structured, commonly used and machine-readable format, as well as request that the personal data be transmitted to another controller, provided that this is technically possible);
- Right to object (the data subject has the right to object to processing) at any time when:
i. there is no overriding legitimate interest on the part of the controller;
ii. the processing is carried out for purposes other than those for which the data was collected;
- Right not to be subject to exclusively automated individual decisions (in certain situations, the data subject has the right to request human intervention when decisions are made on the basis of exclusively automated processing);
- Right to complain to the National Data Protection Authority (about any issues related to the processing of your personal data).
If you wish to exercise any of the above rights or clarify any issues relating to the protection of privacy and your personal data by Corktansa, you can contact us by letter addressed to the company's head office, for the attention of the Permanent Commission for the GDPR, or by e-mail to the following address: corkpassion@corktansa.com.
F. Security measures
Corktansa has at its disposal technical and organizational security measures to guarantee the protection of personal data against breaches ("personal data breach": a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored or otherwise processed) and against any other form of accidental or unlawful processing.
This commitment by Corktansa to the protection of personal data also implies that, whenever personal data is transmitted to other entities, they are obliged to adopt technical and organizational measures that guarantee the same level of protection.
Corktansa will carry out an impact assessment whenever data processing is likely to jeopardize the fundamental rights and freedoms of natural persons. Whenever we do so, we are committed to complying with Community and national guidelines on the matter, such as Regulation 1/2018 of the National Data Protection Commission.
G. Communication of Personal Data to Third Parties
In carrying out its activities, Corktansa may have to communicate or give access to personal data processed under its responsibility to other entities, always ensuring that they have technical and organizational measures that adequately protect personal data.
Personal data will only be accessed by or shared with the following entities:
H. Additional Information
The data subject may request information or clarification about the processing of their personal data by Corktansa at the following email address: corkpassion@corktansa.com
This document may be amended at any time. In this case, the changes will be duly announced and disclosed in the respective institutional media currently used by Corktansa.
What are cookies?
"Cookies" are small software "tags" that are stored on access devices through the browser, retaining only information related to preferences.
What are cookies for?
Cookies are used to help determine the usefulness, interest and number of uses of websites, enabling faster and more efficient browsing by eliminating the need to repeatedly enter the same information.
What kind of cookies are there?
There are two groups of cookies that can be used:
- Permanent cookies - these are cookies that are stored in the browser on access devices (PC, mobile and tablet) and are used every time you visit one of our websites again. They are used to direct browsing to the user's interests, allowing a personalized service to be provided.
- Session cookies - these are temporary cookies that remain in the browser's cookie file until you leave the website. The information obtained by these cookies is used to analyze web traffic patterns, making it possible to identify problems and provide a better browsing experience at the time.
What do we use cookies for?
- Strictly necessary cookies
They allow you to browse the website and use the applications, as well as access secure areas of the website. If you do not accept these cookies, we will not be able to provide the service in question.
- Statistical cookies
These are used anonymously to create and analyze statistics in order to improve the functioning of the website.
- Functionality cookies
They store the user's preferences regarding the use of the site, so that it is not necessary to reconfigure the site each time you visit it.
- Third-party cookies
They measure the success of applications and the effectiveness of third-party advertising.
- Advertising cookies
They target advertising according to the interests of each user, in order to direct advertising campaigns taking into account the tastes of users, and also limit the number of times you see the ad, helping to measure the effectiveness of advertising and the success of the organization of the website.
How can you manage cookies?
All browsers allow the user to accept, refuse or delete cookies, and also inform the user whenever a cookie is received. The user can configure cookies in the "options" or "preferences" menu of their browser.
Please note, however, that by disabling cookies, you may prevent some web services.
Last updated: 18/07/2023