Privacy and Personal Data Protection Policy
1 – FRAMEWORK
This Privacy Policy establishes GD Oil’s commitment to its Clients in terms of personal data protection, with the aim of strengthening and consolidating its relationship of trust and proximity. Through this Privacy Policy, GD Oil informs its Clients about the treatment it carries out with their data, as well as the rights it recognizes them as holders of personal data. GD Oil acts in strict compliance with the principles described in this policy, Regulation (EU) 2016/679 (General Data Protection Regulation – RGPD) and applicable data protection legislation, in all personal data processing activities for which it is responsible.
1.1 Purposes
The Privacy Policy, as a communication tool, has as main objectives:
– To reinforce and consolidate GD Oil’s relationship of trust and proximity with its Clients;
– To demonstrate transparency in the processing of personal data performed by GD Oil;
– To inform Clients of their rights, as holders of personal data, and of the way in which they can exercise them;
– To inform Clients how they can request the exercise of their rights, or clarify how their personal data are treated;
1.2 Scope of application
The Privacy Policy applies exclusively to the processing of personal data carried out by GD Oil, in the context of its intended purposes. For the purposes of this Privacy Policy, any and all information relating to an identified or identifiable natural person is considered personal data. The Client can be identified directly or indirectly, namely through an identification number or through specific characteristics of his/her physical, physiological, genetic, cultural or social identity.
2. PRIVACY POLICY
2.1 Our commitment
The protection of your personal data is a priority for GD Oil.
We are committed to only processing your personal data that is strictly necessary to provide you with the best service, ensuring transparency in the information and application of best practices in the field of security and protection of personal data.
Whenever your personal data is processed by contracted entities, GD Oil will require these entities to provide the same level of privacy and security guarantees in terms of personal data protection.
We want to earn your trust and that you feel that your personal data is safe with us, as we will always be committed to protecting your privacy by taking our responsibilities with great seriousness and commitment with regard to the protection of your personal data.
Whenever you have any questions about the treatment of your personal data, we will be available to help you, through the form available in the Contact area of our website, or other means of contact that we make available to you.
2.2 Purposes of the processing of personal data
GD Oil undertakes to process personal data only for the following purposes: i. Processing of orders; ii. Communication with clients and clarification of doubts; iii. Processing requests for information; iv. Processing of complaints; v. Statistical analysis activities; vi. Verifying, maintaining and developing statistical systems and analysis; vii. Direct marketing communications (if you have consented to the processing of your personal data for this purpose); viii. Fraud prevention and combat; ix. Request for comments on products or services purchased; x. Conducting satisfaction surveys.
GD Oil guarantees the confidentiality of all data provided by its clients. Although GD Oil collects and processes data in a secure manner that prevents it from being lost or manipulated, using the most advanced techniques for this purpose, we inform you that open network collection allows personal data to circulate without security conditions, at the risk of being seen and used by unauthorised third parties.
If you do not agree with the above conditions, GD Oil cannot contract with you through its website.
2.3 Storage time
The period of time for which data are stored and retained varies according to the purpose for which the information is processed and in accordance with any applicable legal obligations and requirements, and which require the data to be retained for a minimum period of time.
Thus, and where there is no specific legal obligation, data will be stored and retained only for the minimum period necessary for the purposes for which they were collected or further processed, at the end of which they will be deleted.
We expressly remind you that at any time you may request the deletion of all your personal data from our databases. This request must be sent using the form available in the Contact area of our website, or other means of contact that we make available to you.
2.4 Communication of data to other entities
As a rule, GD Oil does not share users’ personal data with third parties with whom it has not entered into a contractual relationship providing for the confidential treatment of such data in accordance with GD Oil’s privacy statement.
GD Oil may disclose your personal data to third parties provided that you have unequivocally obtained the consent of the data subjects or when: i. The transmission is made in compliance with a legal obligation, a resolution of the National Data Protection Commission or a court order or ii. The communication is carried out in order to protect the vital interests of the Data Holders or any other legitimate purpose provided for by law.
GD Oil shall take appropriate measures to ensure that the entities having access to the data are reputable and offer the highest guarantees at this level, which shall be duly enshrined and secured in a contract to be signed between GD Oil and the third party(ies).
Thus, any entity subcontracted by GD Oil will process the personal data collected and processed on behalf and for the account of GD Oil in the obligation to take the necessary technical and organisational measures to protect the personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorised disclosure or access and against any other form of unlawful processing.
In any event, GD Oil remains responsible for the personal data collected.
2.5 Exercise of rights
As a rule, the holder of personal data has the following data protection rights: right of access, right of rectification, right of erasure, right of limitation, right of portability, right to object and right not to be subject to automated decisions. If you have given your consent to certain processing of your personal data, you may withdraw it at any time. To exercise any of these rights, you must do so by the following means: – R. Fialho de Almeida 14 2º Esq., 1070-129 Lisboa – E-mail: info@gd-oil.pt – Form available in the Contact area of our website, indicating the subject “Personal Data”.
Should it be necessary, the holder of personal data may also file a complaint with the National Commission for Data Protection (CNPD).
2.6 Cookies
GD Oil uses cookies on its website to improve the performance and browsing experience of our users, on the one hand increasing the speed and efficiency of response and on the other hand eliminating the need to repeatedly enter the same information. The placement of cookies not only helps the website to recognise the user’s device the next time they visit us, but will also be essential to the operation of cookies. The cookies used by GD Oil on its website do not collect any personal information that would identify the user, but only store generic information, namely the way and/or place of access of the user and the way he/she uses the websites. Cookies only retain information related to the preferences of the User.
Session Cookies: These are temporary cookies that remain in the browser’s cookie file until the browser abandons the web page, so there is no record on the user’s hard disk. The information collected by these cookies serves to analyze traffic patterns on the site. Ultimately, this allows us to improve the content and usability of the site.
Analysis cookies: These are those that are well handled by us or by third parties, allowing us to quantify the number of users and perform the measurement and statistical analysis of how users use the service offered. We examine your navigation on our site with the aim of improving the supply of products or services that we make available to you.
Advertising Cookies: They are those that are well treated by us or by third parties, allowing us to manage in a more effective way the offer of advertising spaces that exist on the site, being able to analyze your browsing habits and show you advertising related to your browsing profile.
2.7 Security Measures
GD Oil declares that it has implemented and will continue to implement the necessary technical and organisational security measures to ensure the security of personal data provided to it in order to prevent its alteration, loss, processing and/or unauthorised access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.
GD Oil guarantees the confidentiality of all data provided by its clients either in the registration or in the purchase/order process of products or services. The collection and processing of data takes place in a secure manner and prevents their loss or manipulation. All data will be entered into a Secure Server which encrypts/encodes it (transforms it into a code). The user can check that his browser is secure if the lock symbol appears or if the address starts with https instead of http.
Personal data is processed with the legally required level of protection to ensure its security and prevent its alteration, loss, processing or unauthorized access, taking into account the state of technology, the user being aware and accepting that security measures on the Internet are not impregnable.
GD Oil, whenever it accesses any personal data, undertakes to: – To store them by means of legally required security measures of a technical and organizational nature that guarantee their security, thus avoiding alteration, loss, treatment or unauthorized access, in accordance with the state of technology at all times, the nature of the data and the possible risks to which they are exposed; – To use the data exclusively for the purposes previously defined; – To make sure that the data is processed only by its employees whose intervention is necessary for the provision of the service and that they are bound by the duty of secrecy and confidentiality. If the information may be disclosed to third parties, they shall be obliged to keep it duly confidential in accordance with the provisions of this document.
2.8 Updates to this Privacy Policy
This Privacy Policy may be reviewed and updated, which will be disclosed through our website.