Privacy Policy

I – Our Commitment

Oberthur Feerica, S.A. is a public limited company dedicated to the production and sale of industrial innovation and security equipment.

Oberthur Feerica, S.A. is deeply committed to respecting the privacy of its regular and occasional customers, employees, as well as users of its various services, platforms and supports, whether physical or digital, particularly paper and digital records and websites, regarding the processing and circulation of their personal data.

The company complies with all applicable legislation relating to personal data protection and is committed to protecting such data in accordance with the GDPR – General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016), Law no. 67/98 – Personal Data Protection Law, and all other applicable legislation in force.

Through this document, Oberthur Feerica, S.A. intends to inform its Customers, Suppliers and Partners about the way in which it processes the personal data provided to it.

Customers and website users should carefully read this Privacy Policy before freely and knowingly deciding to provide their personal data to Oberthur Feerica, S.A.

II – Data Controller

Oberthur Feerica, S.A. is responsible for the processing of personal data relating to its customers and/or potential customers, suppliers and partners.

Any communication regarding the protection of your personal data should be addressed to the Data Controller through the following contact details:

Email: dpo@oberthurfeerica.com

Address:
Av. Dr. Francisco Sá Carneiro,
NEM, Pavilhão 1
2640-486 Mafra, Portugal

III – Scope of Application

Within the scope of its activity, Oberthur Feerica, S.A. collects and processes, namely:

1. Personal data necessary to provide and/or receive services and/or supply products to customers and/or suppliers, including data such as name, taxpayer number, address, telephone number and email address, among others, strictly when necessary.
2. Personal data necessary for the execution of employment contracts or service agreements entered into with employees, including data such as name, identification document number, taxpayer number, household composition, social security number, telephone number, email address and health-related data, among others, strictly when necessary.
3. Personal data necessary to comply with legal obligations before public or private entities, including data such as name, identification document number, taxpayer number, household composition, social security number, address, telephone number and email address, among others, strictly when necessary.
4. Personal data necessary for customer and supplier management, contractual relationship management, provision of services tailored to customer needs and interests, including the sending of suggestions, information and marketing communications, advertising campaigns, promotions and service and/or product news, carrying out market studies and/or satisfaction surveys, and complaint management, including data such as address(es), telephone number and email address, among others, strictly when necessary.
5. All personal data necessary for the exercise of Oberthur Feerica, S.A.’s rights within the scope of the relationships referred to above and within the exercise of its activity and legitimate interests, namely accounting, tax and administrative management, litigation management, fraud detection, revenue protection and auditing, network and systems management, information security control, physical security and facility security.

Without prejudice to compliance with legal obligations or lawful orders from competent authorities relating to the retention and transmission of data, Oberthur Feerica, S.A. only processes personal data necessary for its activity, strictly to the extent required by the nature of the contractual or other relationship established with the data subject, or based on the prior, lawful, informed and legitimate consent of the latter, whenever applicable.

IV – How and When We Collect Your Personal Data – Legal Basis for Processing

Oberthur Feerica, S.A. collects personal data in person, in writing, by telephone or through its website.

As a rule, personal data is collected when a contractual or other necessary relationship or collaboration is initiated between Oberthur Feerica, S.A. and the data subject.

Some personal data is mandatory and necessary for the beginning, normal development and legal continuation of the aforementioned relationship or collaboration. Therefore, in the absence or insufficiency of such data, the relationship cannot begin or continue, and in such cases Oberthur Feerica, S.A. will inform the data subject of the mandatory nature and necessity of such data.

In addition to data of this nature, publicly available data and data that may be used under the legitimate interests of Oberthur Feerica, S.A., your data will only be collected and processed if and for the purposes you have previously authorised, freely, specifically, knowingly and unequivocally, through written or oral declaration or option validation, namely through subscription to newsletters or marketing communications, to which the remaining rules of this Privacy Policy apply.

If you wish to stop receiving such communications, you may object at any time.

The data collected will be documented either on paper or digitally, in strict compliance with personal data protection legislation, and stored in paper files and/or specific databases created and managed for these purposes, with restricted access exclusively granted to employees of Oberthur Feerica, S.A. who necessarily need to process such data in the course of their duties.

Under no circumstances will the collected data be used for purposes other than those for which consent was given, where applicable, or for the lawful and legitimate purpose of collection.

V – Purposes of the Collection and Processing of Personal Data

In general, the personal data collected is intended for customer, supplier and employee management, contractual management, provision and receipt of contracted services/supplies, adaptation of services/supplies to customer needs and interests, sending suggestions, information and marketing communications, advertising campaigns, promotions and updates regarding services and/or products, conducting market studies and/or satisfaction surveys, claims management, accounting, tax and administrative management, litigation management, judicial evidence, fraud detection, revenue protection and auditing, network and systems management, information security control and physical security, facility security, compliance with legal obligations and for other purposes for which the Law recognises a legitimate interest to Oberthur Feerica, S.A.

Whenever data is collected, or upon request, you will be informed in more detail about the processing carried out on your data.

VI – Retention Period of Personal Data

Whenever there is a specific legal requirement obliging the retention of data for a minimum period of time, Oberthur Feerica, S.A. will comply with such obligation.

Oberthur Feerica, S.A. will keep your personal data stored for the minimum period strictly necessary for the purpose for which the information was collected and processed, after which it will be deleted.

VII – Right of Access, Rectification, Erasure, Restriction, Portability and Objection

Under the General Data Protection Regulation, Oberthur Feerica, S.A. guarantees data subjects the right of access, rectification, erasure, restriction, portability and objection regarding their personal data.

These rights may be exercised through telephone number +351 261 812 203, by written communication sent to:

Av. Dr. Francisco Sá Carneiro,
NEM, Pavilion 1
2640-486 Mafra, Portugal

or by email to: geral@oberthurfeerica.com

Without prejudice to the above, data subjects who have provided their personal data may also lodge a complaint with the National Supervisory Authority (Comissão Nacional de Proteção de Dados – CNPD), whose contact details are available at: CNPD

VIII – Data Transmission and Disclosure

Oberthur Feerica, S.A. guarantees that personal data will not be disclosed to third parties, except in the context of subcontracting relationships and always subject to prior commitments ensuring adequate safeguards for such data.

IX – Measures Taken to Ensure the Security of Your Personal Data

Oberthur Feerica, S.A. follows best practices by adopting technical and organisational measures appropriate to the risk in the field of personal data security and protection.

The company has approved and implemented a strict compliance plan aligned with legal obligations and the interests of data subjects, capable of protecting the data provided by all those who in any way interact with the company, against disclosure, loss, misuse, alteration, unauthorised processing or access, as well as any other unlawful form of processing.

The form(s) used for collecting personal data, whether digital or paper-based, either at the physical premises of Oberthur Feerica, S.A. or on the website (which requires encrypted browser sessions), are securely stored in physical archives and digital systems.

All personal data you provide is stored on servers belonging to Oberthur Feerica, S.A. or subcontractors operating under all physical and logistical security measures deemed indispensable for the protection of your personal data.

Despite these security measures, users browsing the Internet should adopt additional security measures, including using updated computers and browsers with active firewalls, antivirus and antispyware software, and ensuring the authenticity and reliability of websites they visit.

Whenever, in the legitimate and lawful exercise of its activity, Oberthur Feerica, S.A. adopts monitoring measures concerning employees, namely regarding access control, working hours, tasks and productivity, travel and transportation, employees will be informed in advance about the implementation of such measures and, whenever legally necessary and lawful, their consent will be requested. Employees will also be informed of how the tools used ensure the same level of protection and security for the personal data collected and processed.

This security and compliance plan includes the appointment of a Data Protection Officer responsible for verifying this Privacy Policy, maintaining clear rules regarding personal data processing and communication with supervisory authorities, ensuring that all individuals entrusting Oberthur Feerica, S.A. with the processing of their personal data are effectively informed about how such data is processed and about their rights in this regard.

X – Changes to the Terms and Conditions and Privacy Policy

Oberthur Feerica, S.A. reserves the right to amend or adjust these Terms and Conditions and Privacy Policy at any time.

Such amendments and adjustments will be duly published on the website.