ISOPOR Azores respects the privacy of data subjects and has therefore prepared this Privacy Policy in order to demonstrate its commitment to and respect for the rules regarding privacy and the protection of personal data collected and processed in compliance with personal data protection legislation.

SCOPE OF APPLICATION
This Privacy Policy applies exclusively to the collection and processing of personal data carried out by ISOPOR Azores so that it may perform the activities necessary to respond to Information Requests from data subjects and to provide ISOPOR Azores services.

PERSONAL DATA
Personal data refers to information of any nature and in any format, including sound and image, relating to an identified or identifiable natural person. A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural, or social identity. ISOPOR Azores only processes personal data that is strictly necessary to comply with legal and regulatory obligations, and to establish, manage, and execute contracts arising from its own activity, organization, and internal management.

DATA CONTROLLER
ISOPOR Azores is the entity responsible for collecting and processing the USER’S personal data, determining the categories of data collected, the manner in which they are processed, and the purposes for which they are used.

TYPES OF DATA COLLECTED
In the provision of services, ISOPOR Azores processes various categories of personal data, such as first name, surname, contact details, and others, after obtaining the data subject’s consent. Such data is processed in accordance with applicable legislation, namely through storage in properly secured and protected databases, and shall under no circumstances be used for purposes other than those for which consent was obtained.

PURPOSES OF PROCESSING
The personal data collected by ISOPOR Azores is intended for the provision of ISOPOR Azores services.

DATA RETENTION PERIOD
ISOPOR Azores stores and retains data for the period considered sufficient and necessary for the purposes that motivated its collection and processing. However, the retention period may vary depending on the purpose for which the information is processed, and there may be legal requirements obliging the retention of data for a minimum period, after which the data will be deleted.

DATA SUBJECT RIGHTS
With regard to the processing of your personal data, you are entitled to the rights of access; rectification; erasure; restriction of processing; data portability; objection; not being subject to exclusively automated individual decisions; withdrawal of consent; and the right to lodge complaints with the supervisory authority.

All rights, obligations, and requests for clarification may be submitted by email to geral.isopor-azores@isopor.pt or by post to the company’s address.

These same channels may also be used whenever you have any questions regarding the processing carried out by ISOPOR Azores concerning your personal data or the information provided to you, as well as matters related to the exercise of your rights.

We will respond to requests as promptly as possible and in accordance with the applicable legal framework.

SECURITY MEASURES
ISOPOR Azores ensures the security of personal data made available through the adoption of various technical and organizational security measures to protect personal data against dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.

DISCLOSURE OF DATA TO OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)
ISOPOR Azores may use third parties to provide certain services, such as maintenance, technical support, or marketing, and such entities may have access to some personal data, namely the data necessary for the contracted purposes.

ISOPOR Azores may disclose your personal data to third parties provided that it has unequivocally obtained the USER’S consent for that purpose or when:

• The transfer is carried out in compliance with a legal obligation, a decision of the National Data Protection Commission, or a court order; or
• The disclosure is necessary to protect the vital interests of Data Subjects or for any other legitimate purpose provided by law.

ISOPOR Azores takes appropriate measures to ensure that entities with access to the data are reputable and provide the highest guarantees regarding data protection, which shall be duly established and safeguarded in a contract to be signed between ISOPOR Azores and the third-party entity(ies).

Accordingly, any entity subcontracted by ISOPOR Azores shall process the personal data collected and processed on behalf of ISOPOR Azores, being required to adopt the necessary technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and against any other unlawful form of processing.

In all cases, ISOPOR Azores remains responsible for the personal data collected.

CHANGES TO THE PRIVACY POLICY
ISOPOR Azores reserves the right, at any time, to revise or amend this Privacy Policy. We therefore recommend that you regularly consult the website, where this information will always be kept up to date.