Privacy Policy

A SDR Portugal – Packaging Association. (“SDR”) assumes as an essential value the respect for the privacy and personal data of all those with whom it relates, within the scope of the exercise of its activity, namely its customers and users.

In this context, with transparency as an essential principle and aiming to ensure that its users have a clear understanding of the personal data processing carried out, SDR approves and publishes this Privacy Policy, applicable regardless of the communication channel with SDR. This policy clarifies the personal data processing activities performed, as well as the rights of the respective data subjects.

SDR and its employees are committed to using users’ personal data strictly in accordance with this Policy and with complete confidentiality.

SDR seeks to provide information that is both as comprehensive and concise as possible, for the benefit of understanding. However, if there are any doubts or additional information is needed regarding privacy matters, you can contact us using the contact information available in the Site’s footer, with the subject ‘Personal Data and Privacy’.

I. Responsible

The processing of user data is carried out by SDR Portugal – Associação de Embaladores, a non-profit legal person of Private Law, with NIPC 516 554 999 and headquartered at Avenida da República, n.º 74, 1º Esq., Alvalade, 1600-205 Lisboa, as the data controller.

SDR can be contacted through any of the means identified in the Contacts available in the footer of the Site, recommending, for questions related to personal data, the identification of the Subject “Personal Data and Privacy”.

II. Data Subjects Covered and Processed Personal Data

SDR processes the personal data of its users, which it collects in the category of connection and navigation data, including IP addresses and accesses.

No special categories of data are processed.

There is no legal obligation for users to provide their personal data. However, the failure to provide such data may affect the ability to access the services provided.

III. Purposes, legal grounds, and storage periods

The personal data of users related to connection and navigation data, collected through cookies on the site, are processed for the following purposes and grounds: ensuring the operation of the site, analysing its usage, based on SDR’s legitimate interest in analysing the functionality of the platform and the consent of data subjects. These data are kept for a period of one year.

IV. Recipients

SDR communicates the personal data of users to third parties, namely [service providers, to ensure the operation of the site and analyse its usage], based on the fulfilment of legal obligations.

Furthermore, the data may be communicated to subcontractors, entities contracted by SDR to carry out the identified data processing, on its behalf and in its name. In this case, all the information in this Policy remains applicable, with SDR remaining responsible for the data processing carried out.

V. Data transfers to third countries

Whenever it is necessary to transfer data to third countries, particularly those located outside the European Union, to recipients of personal data as described, SDR ensures that such transfer is based on a decision of adequacy by the Commission, or if there is none, when adequate safeguards are provided, including using the standard contractual clauses adopted by the Commission.

VI. Data security

SDR adopts appropriate technical and organizational measures to ensure the security of its users’ data, ensuring its confidentiality, integrity, and availability.

Similar measures are required of subcontractors and third parties to whom users’ data is communicated.

If users wish to obtain additional information regarding the technical and organizational measures adopted or report any data and/or security breaches, they can do so through the contact information available in the Site’s footer, with the subject ‘Personal Data and Privacy’.

VII. Rights of data subjects

SDR recognizes the following rights to its users as data subjects:

i. Access – Users can, at any time, request from SDR confirmation that their personal data is being processed, access their data, and obtain information about the data processing carried out.

ii. Rectification – Users can, at any time, rectify their personal data by correcting inaccurate data, completing incomplete data, and updating outdated data. It is important to note that it is the user’s responsibility to provide correct data, and therefore, they are liable for any damages caused by communicating inaccurate, incomplete, or outdated information to SDR or third parties.

iii. Deletion – Whenever data processing is based on the user’s consent, and the user withdraws their consent, or if data processing has become unlawful, especially when the data is no longer necessary for the purpose for which it was collected, users can request their deletion from SDR.

iv. Limitation of Processing – Whenever the legality of data processing is in question or when, despite SDR not needing the data, the data subject wishes to have them retained for a longer period, they can request SDR to limit the processing.

v. Portability – Whenever data processing is based on consent or a contract and is carried out by automated means, users can request that the data they provided be made available to them and transmitted directly to another controller.

vi. Opposition – Whenever data processing is based on legitimate interests, users can object to the processing.

vii. Withdraw Consent – Whenever data processing is based on consent, users have the right to withdraw it at any time. The use of cookies can be configured or disabled in the browser’s “Preferences” or “Tools”.

viii. Lodge a Complaint with a Supervisory Authority – Users have the right to lodge a complaint with the competent supervisory authority. In Portugal, the competent supervisory authority is the National Data Protection Commission (https://www.cnpd.pt/).

These rights can be exercised directly by users through the contact information available in the Site’s footer, under the subject “Personal Data and Privacy.” O exercício destes direitos The exercise of these rights is free of charge.

VIII. Effective Date and Changes

This Policy in its current version was published on June 30, 2022. Any substantial changes will be notified to users through the means of contact available to SDR. Nevertheless, it is recommended to periodically review it to keep track of any changes.