Policies
Privacy Policy
Confecções Cunha & Ribeiro, Lda. (hereinafter "Cunha Ribeiro", "we"), which develops and manufactures textile garments, respects the privacy and the protection of the personal data of everyone it deals with.
This is the Privacy Policy of the Cunha Ribeiro website. It applies specifically to the processing of personal data carried out through this website: contact requests, applications submitted through the website, newsletter subscriptions, cookies, statistics and the location map. The processing of data in other relationships, namely with employees, clients and suppliers, and to comply with legal and accounting obligations, is governed by its own data protection information, provided in those contexts.
Processing is carried out in accordance with the General Data Protection Regulation (GDPR), Regulation (EU) 2016/679, and Portuguese Law no. 58/2019, as well as with the principles of lawfulness, fairness, transparency, data minimisation and accountability. This policy is complemented by our Cookie Policy.
Data controller
The controller of personal data is:
- Confecções Cunha & Ribeiro, Lda.
- Registered office: Rua de Santa Maria 2647, 4800-675 Souto Santa Maria, Guimarães
- Tax number (NIPC): 501 860 266
- Commercial Registry Office of Guimarães (Conservatória do Registo Comercial de Guimarães), registration no. 501 860 266
- Share capital: €230,000.00
- Contact: geral@cunharibeiro.com
Contact for data protection matters
To exercise your rights or ask any question about the processing of your personal data, you can contact:
- Leonilde Freitas
- leonilde@cunharibeiro.com
- Telephone: +351 253 570 401
What data we process and how we collect it
Personal data means any information relating to an identified or identifiable natural person. In the context of this website, we may process:
- Contact data you provide through the website form: your name, email address, telephone number (when given) and the content of the message you send us.
- Data from applications submitted through the website: the data you send us when applying for a vacancy or sending an unsolicited application.
- Newsletter subscription data: the email address you provide to receive communications.
- Browsing and statistical data: information collected by cookies, only with your consent, as described in the Cookie Policy.
- Security data for the website's management area: when someone fails to sign in to the website's management area, the IP address the attempt was made from and the username entered.
The fields marked as mandatory on the forms are needed for us to review and answer your request or manage your subscription. If you do not provide them, we may be unable to follow up on your request. The telephone number is optional unless the form states otherwise.
Purposes and legal bases
We only process your data for specified, explicit and legitimate purposes, each with a legal basis:
| Purpose | Legal basis (GDPR) |
|---|---|
| Answering contact and information requests sent through the website form | Pre-contractual steps or legitimate interest, depending on the request (Art. 6(1)(b) and (f)) |
| Managing applications submitted through the website | Pre-contractual steps at the applicant's request and, for the recruitment pool, consent (Art. 6(1)(b) and (a)) |
| Sending the newsletter you subscribed to | Consent (Art. 6(1)(a)) |
| Website usage statistics (Google Analytics 4) and display of the location map (Google Maps) | Consent (Art. 6(1)(a)) |
| Protecting the website's management area against abusive access attempts, by temporarily blocking the address they come from | Legitimate interest in the security of the website and of the data it processes (Art. 6(1)(f)) |
On contact requests: we answer the requests we receive. Where a request aims at entering into a contract or taking pre-contractual steps requested by the data subject, processing is based on those pre-contractual steps. In all other cases, it is based on Cunha Ribeiro's legitimate interest in answering, following up and managing the requests received.
On applications: we process application data to assess the application and conduct the recruitment process, on the basis of pre-contractual steps at the applicant's request. If we wish to keep an application for future opportunities after the process has closed, we will ask for separate consent for that purpose.
Data is not used for purposes incompatible with those for which it was collected.
Who we share data with
We do not sell your personal data. We may use providers that process personal data on our behalf (processors), under a written contract that imposes obligations of confidentiality, security and processing only on our instructions. Some technology providers may, depending on the service and the applicable configuration, also process data under their own policies and terms. We may also disclose data where the law requires it. In particular, we use:
- The website hosting provider, which hosts the website and the associated technical data.
- The email service provider, where the messages sent through the contact form are received and stored.
- E-goi, the platform used to manage and send the newsletter, once you subscribe. E-goi is based in Portugal and processes data in the European Union.
- Google (Google Analytics 4 and Google Maps), only with your consent, as set out in the Cookie Policy.
- Authorities and public bodies, where there is a legal obligation to disclose data.
International transfers
The Google services mentioned may involve processing data outside the European Economic Area, namely in the United States. These transfers take place under the safeguards provided for in the GDPR, including the European Commission's adequacy decision on the EU-US Data Privacy Framework, to which Google has signed up. The other processors listed process data in the European Union.
How long we keep data
We keep data only for as long as necessary for the purposes for which it was collected:
- Contact requests: for 1 year after the request is closed, unless it leads to a contractual relationship or there is another legal obligation to keep it.
- Applications submitted through the website: during the recruitment process and for up to 1 year. Keeping an application in the recruitment pool for future opportunities depends on separate consent and lasts only for the period consented to.
- Newsletter subscription: for as long as you remain subscribed, plus the period strictly necessary to prove and manage your unsubscription or objection.
- Records of failed sign-in attempts: up to 60 days, after which they are deleted automatically.
Once these periods have ended, the data is deleted or anonymised.
Security of personal data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure or destruction. Access to the data is limited to authorised persons, who are bound by a duty of confidentiality.
Automated decisions and profiling
No decisions based solely on automated processing, including profiling, that produce legal effects or significantly affect data subjects are made.
Your rights
At any time, and under the GDPR, data subjects may exercise the following rights:
- Access to your personal data
- Rectification of inaccurate or incomplete data
- Erasure of data ("right to be forgotten"), where applicable
- Restriction of processing
- Objection to processing
- Data portability
- Withdrawal of consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal
To exercise these rights, use the contact given under "Contact for data protection matters". You also have the right to lodge a complaint with the supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt).
Cookies
This website uses cookies and similar technologies. Their purposes, legal bases and how to manage, accept or reject them are described in our Cookie Policy.
Changes to this policy
We may update this Privacy Policy whenever necessary, for example if we change the services we use or if the law requires it. The date at the top shows the last update. We recommend that you check it regularly.