1. Fresbeira - Indústria de Carnes, Lda. (Fresbeira), as far as it collects and processes data from its employees, collaborators, customers, suppliers and other individuals, assumes the role of Data Controller for Personal Data, with all the rights, duties, and obligations resulting from the General Data Protection Regulation. Processing personal data is not the object of our activity, but it is necessary to provide the best service to our customers. Therefore, knowing how important personal data is to its owners, we are committed to its processing, provided that it is strictly necessary and essential to achieve our goals, without ever compromising the interests of the owners.
2. The few personal data collected from its employees, customers, suppliers and other individuals are solely intended for the sale of our products with the best quality and knowledge of our customers. When entering into contracts, collecting data associated with the customer card, when entering into contracts with employees and suppliers, or even through registration in the App, website, or other means of collection, we collect and process data, and we are committed to respecting the purpose of the collection and processing it for the legal and contractual purposes intended.
In all cases where we collect data, we have legitimacy to process it based on explicit consent, the need to process it for contractual purposes, compliance with legal obligations, or even based on the legitimate interest pursued by us, as provided for in points a), b), d), and e) of paragraph 1 of Article 6 of the GDPR. We are available to clarify all doubts and comply with all rights of data owners, and for this purpose, we have appointed a General Data Protection Officer (DPO) with the Portuguese National Data Protection Commission (CNPD).
3. Any data owner can easily and free of charge exercise their rights through the email geral@fresbeira.com or by sending a letter to the address: Fresbeira - Indústria de Carnes, Lda., Zona Industrial São Miguel de Poiares, 3350-214 Vila Nova de Poiares.
4. The data processed follows the principle of data minimization, with only the data considered relevant, adequate, and necessary for the provision of our activity being collected. We collect data from our employees such as name, gender, date of birth, fixed and mobile phone numbers, email, address, tax identification number, family composition data, IBAN, and other data arising from legal and contractual requirements. With our customers and potential customers, we reduce the list of requested data to Full Name, Postal Code, City, Email, Contact, and Taxpayer Number.
Essential data for the realization of the contracted partnership is also collected from our suppliers, partners, and third parties, although generally, as it concerns legal entities, this data is not covered by the GDPR. All data, despite being important for the quality of our work, are accessory and instrumental to our activity, not being the central object of our work.
5. In addition to the principle of data minimization, we also comply with the principle of minimizing access, as only those for whom data processing constitutes their work object have access to the data.
6. Fresbeira adopts a policy of rigor, secrecy, and confidentiality in the processing of all personal data, not disclosing, transferring, or using it for a purpose other than that for which it was collected and processing it legally and contractually. We are guided by the principles of transparency, clarity, and information and will always be available to provide the necessary clarifications about the data processing carried out.
7. Whenever the processing of personal data requires the consent of its owner, such consent shall be prior, freely given, informed, specific, and unambiguous, expressed in an unequivocal manner, and the owner shall be aware that they may withdraw their consent for processing at any time, in accordance with Article 7(3) of the GDPR.
8. The personal data provided by the customer or generated by the use of the service will be processed and stored electronically, intended for use by Fresbeira for marketing and sales, customer management and service provision, accounting, tax and administrative management, litigation management, fraud detection, revenue protection and auditing, network and systems management, information and physical security control, operator management and compliance with legal obligations.
9. All personal data will be kept only for the legally required period, respecting their preservation, the guarantees of confidentiality, integrity, and confidentiality advocated by the GDPR, regardless of the medium in which they are located.
10. Data subjects are guaranteed access to personal data concerning them, as well as their rectification or erasure, the restriction of processing, the right to object to processing, and the right to data portability. For this purpose, a specific document may be requested to exercise these rights. The exercise of rights can be requested by telephone contact: +351 239 423 091 or by written request sent to the address: Fresbeira - Indústria de Carnes, Lda., Zona Industrial São Miguel de Poiares, 3350-214 Vila Nova de Poiares or to the email address: geral@fresbeira.com.
11. Fresbeira reserves the right to use subcontractors for the processing of personal data, particularly for customer management, service provision, billing, and litigation management, ensuring that they develop appropriate technical and organizational measures to protect the data and ensure the defense of the owner's rights. Under certain circumstances, certain personal data may have to be communicated to public authorities, such as the tax authority, courts, and law enforcement agencies.
12. Any data subject may obtain complete and updated information on Fresbeira's privacy and personal data processing policy, available at www.fresbeira.pt, particularly regarding the categories of data processed, the purposes and legitimacy for processing, retention periods, and the exercise of rights.
13. The data subject, if they believe that the GDPR has been violated, may file a complaint with the National Data Protection Commission (CNPD).
14. The previous sections aim to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April (General Data Protection Regulation), and therefore will only be applicable from 25 May 2018.
