GENERAL DATA PROTECTION REGULATION

R3Natura, Lda, hereinafter referred to as "R3 Natura", has as its fundamental mission its commitment to the rules of privacy and protection of the personal data of its customers, suppliers, employees and others.
Browsing this website does not necessarily imply the provision of personal data.
We have therefore adopted a number of security measures in order to protect the personal data made available to us through the use of the website against its dissemination, loss, misuse, alteration, unauthorised processing or access, or any other form of unlawful processing.

DATA CONTROLLER

R3 Natura, VAT number 508844770, with registered office at Centro de Negocios de Oleiros Rua do Monte Fracção M, Oleiros, Vila Verde, telephone number 253 320 110  and e-mail address info@r3natura.ptis responsible for processing any personal data requested of it, in accordance with the rules set out in this privacy policy.

PERSONAL DATA

Personal data is any information relating to a living person, identified or capable of being identified, directly or indirectly, namely by reference to an identifier. Examples of identifiers are the name, identification numbers, electronic identifiers, location data and/or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of the natural person.

HOW AND WHEN YOUR PERSONAL DATA IS COLLECTED

Your personal data may be collected: 
a. When you send/deliver an application to collaborate with the company;
b. Pre-contractual due diligence, execution of the contract or management of the contractual relationship with the client, supplier and employee, to the extent necessary for this purpose;
c. Compliance with various legal obligations, to the extent necessary for this purpose;

GROUNDS AND PURPOSES FOR PROCESSING PERSONAL DATA

The grounds that legitimise the processing of your personal data by info@r3natura.ptare as follows:
a. Consent: Your personal data may be processed by means of a free, specific, informed and explicit expression of will, under which you accept, by means of a declaration, or an unequivocal positive act, that your personal data will be processed by R3 Natura. In relation to application processes, we will ask for your consent to keep your data collected for consideration in future applications.

b. Legitimate Interest: your personal data may be necessary for carrying out certain activities related to R3 NAtura's business. We will process your data on the basis of legitimate interest, except in cases where your privacy and data protection rights prevail.

c. In the context of a contractual obligation: we process your personal data to the extent strictly necessary for the provision of the services you have contracted.

d. In the context of a legal obligation: to fulfil a legal obligation under EU or national law or when processing is necessary for the performance of a task carried out in the public interest.

RETENTION PERIOD OF YOUR PERSONAL DATA

R3 Natura will keep your data for the duration of the commercial or labour relationship with the data subject. After the end of the contract, R3 Natura will keep your personal data for the periods of limitation or expiry relating to the rights arising from it or for the fulfilment of legal obligations to which R3 Natura is subject.

TRANSMISSION OF YOUR DATA

R3 Natura may communicate personal data to entities to which the data must be communicated by virtue of a legal provision or to entities it has contracted to provide services that include the processing of personal data for one or more of the aforementioned purposes. These entities should only carry out this processing on instructions from R3 Natura.

PRINCIPLES APPLICABLE TO THE PROCESSING OF PERSONAL DATA

- Principle of lawful data processing The GDPR states that the processing of personal data may take place when at least one of the following conditions is met:

- It is necessary for the fulfilment of a legal obligation to which the controller is subject 
- Source of legitimacy: Legal;
- necessary for the performance of a contract (or pre-contractual steps) to which the data subject is a party
- Source of legitimacy: Contractual;
- There is consent from the data subject. In this regard, it should be noted that the GDPR defines consent as a manifestation of will, which must be free, specific, informed and explicit, i.e. that translates into a positive action, in the sense of expressly accepting that personal data concerning him or her will be processed, with the result that tacit consent will be invalid
- Source of legitimacy: Express consent of the data subject;
- It is necessary for the defence of the vital interests of the data subject or another natural person;
- It is necessary for the performance of duties in the public interest or the exercise of public authority;
- It is necessary for the purposes of the legitimate interests pursued by the controller or by third parties;
- Principle of specification and purpose limitation

The legitimacy for the collection of personal data will depend on the purpose of the processing (as mentioned above, this legitimacy may result from the law, the execution of a contract, or the express consent of the data subject), which must be specific, explicit and legitimate, and such data may not subsequently be processed in a manner incompatible with those purposes;
- Principle of data minimisation and accuracy
The data must be adequate, relevant, not excessive in relation to the purposes for which it is collected and updated whenever necessary;
- Principle of data retention limitation
Data must be kept in such a way that data subjects can be identified for no longer than is necessary to fulfil the purposes for which it was collected or for which it is further processed;
- Principle of integrity and confidentiality
Data must be processed in a way that guarantees its security, safeguarding against unauthorised processing, which is why it will be necessary to have suitable equipment, to inform employees of the security rules for processing data, particularly with regard to the confidentiality duties to which they are subject, and to check that the security measures are being put into practice and are sufficient (audits);
- Principle of responsibility
Obligation to implement appropriate technical and organisational measures to ensure and prove that data processing is carried out in accordance with the GDPR.

OWNERS' RIGHTS

You have the right to ask the data controller:
1. access to personal data concerning you: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, the right to access your personal data and the information provided for in the General Data Protection Regulation.

2. rectification of their data: The data subject has the right to obtain, without undue delay, from the controller the rectification of inaccurate personal data concerning him or her.

3. the erasure of your data: The data subject has the right to obtain from the controller the erasure of his or her personal data without undue delay, and the controller has the obligation to erase personal data without undue delay where one of the following grounds applies in particular:
a. the personal data is no longer necessary for the purpose for which it was collected or processed;
b. the data subject withdraws the consent on which the processing of the data is based (when the processing is based on consent) and if there is no other legal basis for the processing;
c. the data subject objects to the processing and there are no overriding legitimate interests justifying the processing;

4. restriction of processing in respect of the data subject: The data subject has the right to obtain from the controller restriction of processing if one of the following situations applies:
a. contest the accuracy of the personal data, for a period enabling the controller to verify its accuracy;
b. the processing is unlawful and the data subject opposes the erasure of the personal data and requests, instead, the restriction of its use;
c. the controller no longer needs the personal data for processing purposes, but such data is required by the data subject for the purposes of the establishment, exercise or defence of legal claims;
d. has objected to the processing, until it is established that the legitimate reasons of the controller prevail over those of the data subject.

5. Objection to processing: Where processing is carried out for the purposes of the legitimate interests pursued by R3 Natura, the data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her. The controller shall cease processing the personal data unless the controller has compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or for the establishment, exercise or defence of legal claims.

6. The right to data portability: The data subject shall have the right, under the terms and conditions laid down by law, to receive personal data concerning him or her which he or she has provided to a controller in a structured, commonly used and machine-readable format and the right to transmit such data to another controller without the controller to whom the personal data were provided being able to prevent this, if:
a. The processing is based on consent or a contract;
b. Processing is carried out by automated means

7. the right to withdraw consent at any time: If the processing of data is based on consent, the data subject has the right to withdraw their consent at any time, without jeopardising the lawfulness of the processing carried out on the basis of the consent previously given.
We also guarantee that under no circumstances will your personal data be processed in an exclusively automated way, namely for profiling purposes.

These rights can be exercised through the following channels:
-by email info@r3natura.pt;
-letter sent to Oleiros Business Centre Rua do Monte Fracção M, Oleiros, Vila Verde.
The data subject may also lodge a complaint with the National Supervisory Authority (Comissão Nacional de Protecção de Dados) whenever they consider it appropriate.

INTELLECTUAL PROPERTY

The content of this website, including brands, designs, logos, text, images, audio and video materials, is the property of R3 Natura, unless otherwise indicated by a reference to its source, and is protected under the general terms of the law and by national and international legislation on the protection of intellectual property. You may not display, reproduce, distribute, modify, transmit or use the content of this site in any way, for any public or commercial purpose, without the prior express written consent of R3 Natura.

LINKS TO OTHER WEBSITES

The website has no links to other websites.

DATA SECURITY

R3 Natura has technical and organisational procedures in place to prevent breaches of security and improper access to personal data, as well as their destruction or unlawful use.