Privacy

Privacy Policy

The rules set out in this Privacy Policy complement the provisions regarding the protection and processing of personal data contained in the “General Terms and Conditions of the www.alumicaleira.com store,” which regulate the offering of our products and are duly published on the website, being accepted by the Customer.

This Privacy Policy applies exclusively to the collection and processing of personal data carried out by ALUMICALEIRA L.M. FERREIRA LDA.

Who are we?

Your data will be processed by ALUMICALEIRA L.M. FERREIRA LDA, a private limited company headquartered at Travessa dos Petigais, 185 – 2400-835 Barosa, Portugal, registered under tax number 502951796 (hereinafter referred to as ALUMICALEIRA).

ALUMICALEIRA is responsible for the processing of your personal data, within the meaning of the General Data Protection Regulation (GDPR).

What are personal data?

Personal data are any information of any kind, regardless of the medium, including sound and images, relating to an identified or identifiable natural person.

A person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, electronic identifiers, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

What type of personal data do we collect?

In the course of its activity, ALUMICALEIRA will collect and process the personal data necessary for the sale and delivery of goods purchased by the Customer, including name, address, telephone number, email address, payment information, Internet Protocol (IP) address, and tax identification number.

Why do we process your information?

Your personal data may be collected and processed by ALUMICALEIRA for the following purposes:

a) Compliance with legal obligations to which ALUMICALEIRA is subject, including invoicing of purchased goods;
b) Fulfilment of contractual obligations of ALUMICALEIRA, particularly for the logistics process of delivering purchased goods;
c) Management of contacts and complaints;
d) Contact purposes within ALUMICALEIRA’s marketing strategies, including sending newsletters and commercial communications.

Failure to provide personal data for purposes a) and b) results in ALUMICALEIRA being unable to fulfil contractual and legal obligations, constituting grounds for not entering into the sales contract, without any right to compensation.

ALUMICALEIRA will inform you of the mandatory nature of the data.

On what basis do we process your information?

The processing of your personal data is based on the execution of the sales contract with ALUMICALEIRA and strict compliance with legal obligations, particularly tax legislation (see points b) and c) of Article 6(1) GDPR).

For the purpose outlined in point c) above, processing is based on the legitimate interests pursued by ALUMICALEIRA and the Customer (see point f) of Article 6(1) GDPR).

Additionally, the lawfulness of processing personal data for the purpose in point d) above is based on your consent granted to ALUMICALEIRA (see point a) of Article 6(1) GDPR).

How long do we keep your information?

Unless otherwise required by law, regulation, or court order, personal data will be kept only for the minimum period necessary for the purposes for which it was collected or subsequently processed.

Key retention periods for personal data are as follows:

i. Transaction management – legal period of 10 years;
ii. Customer management in loyalty programs – 3 years;
iii. Marketing – 2 years (plus the current year) from the last interaction;
iv. Website or platform user management – 1 year (plus the current year) after last access;
v. Home deliveries – 2 years;
vi. Warranties and after-sales support – 2 years or equal to the warranty period if longer;
vii. Record and proof of remote sales contracts – 6 months after the contract period;
viii. Service management – 2 years from last service.

To whom may we disclose your personal data?

ALUMICALEIRA may share your personal data with:

a) Organizations or companies affiliated with ALUMICALEIRA, provided they adhere to an equivalent data protection policy;
b) Public authorities to which ALUMICALEIRA is legally required to provide information, including DGCI – Directorate General of Taxes;
c) Subcontractors providing services related to your personal data under contract, including website hosting, email services, and marketing providers;
d) Competent authorities in cases of legal obligation, judicial proceedings, or technical/security issues.

Are your data transferred outside the European Union?

Your personal data collected by ALUMICALEIRA will generally not be transferred to entities outside the European Union.

Exceptionally, ALUMICALEIRA may transfer data outside the EU under applicable law for data hosting, storage, technical outsourcing, backup, recovery, or service development purposes. ALUMICALEIRA ensures that personal data are not transferred to countries lacking adequate protection under the GDPR.

What are your rights?

Under the GDPR, you may at any time request:

a) Access to your personal data;
b) Rectification of inaccurate data;
c) Erasure of your personal data, where applicable;
d) Restriction of processing under certain circumstances;
e) Objection to processing for legitimate interests;
f) Data portability in structured, commonly used, machine-readable format, where applicable.

Excessive or manifestly unfounded requests may lead ALUMICALEIRA to charge a reasonable fee or refuse to act on the request.

You also have the right to withdraw consent at any time without affecting the lawfulness of processing based on prior consent and to lodge a complaint with the National Data Protection Commission.

How can you opt out of marketing communications?

You may object at any time to the use of your personal data for marketing purposes, including newsletters or informational communications, by contacting ALUMICALEIRA at geral@alumicaleira.com or through your account settings on the website.

Security and Confidentiality

We apply appropriate technical and organizational measures to ensure the security of your personal data. Transmission via the Internet cannot be completely secure, and ALUMICALEIRA cannot guarantee absolute security of information transmitted through the website.

We respect the confidentiality of your information and do not sell, distribute, or commercially make it available to third parties. ALUMICALEIRA commits to keeping your information confidential in accordance with this Privacy Policy and applicable law.

Questions and Exercise of Rights

For any questions about the processing of your personal data or to exercise your rights, contact us at:

geral@alumicaleira.com
Address: Zona Industrial da Barosa – Travessa dos Petigais, nr. 185, 2400-835 Barosa – Leiria, Portugal.

Please note that ALUMICALEIRA may update this Privacy Policy from time to time, so we recommend reviewing it periodically.

Last updated: 9 January 2026