At NOBRAC Group, the confidentiality and security of your personal data are central to our activities. We use your personal data exclusively for clearly defined purposes and in accordance with your data protection rights. Safeguarding the confidentiality and integrity of your personal data is one of our highest priorities.

Information We Collect

We collect personal data when you interact with our website, such as when you register, place an order for products or services, or engage with us via other channels. This also includes data collected when you voluntarily participate in surveys, use the chat tool, enter competitions, provide feedback, subscribe to newsletters, or communicate with us through email or phone.

Personal data we may collect include, but are not limited to:

• Name, address, telephone number, email address
• Taxpayer identification number (for commercial transactions)
• Identification document (for the exercise of certain rights)

By providing your personal data, you consent to its collection, use, and disclosure in accordance with this policy and applicable data protection laws.

We also collect non-personally identifiable information related to your use of our website through cookies. This includes:

• IP address
• Geographic location
• Browser type and version, operating system, screen resolution,language preferences
• HTTP header data, device agent information
• Search engine used to access our website
• Date and time of website interactions, pages visited, and links clicked

This information is anonymized wherever possible, and in cases where it may incidentally identify you, we ensure it is anonymized immediately.

How We Use the Collected Information

NOBRAC Group uses your personal data for the following purposes:

• Promotion of our products, services, and events
• Customer support
• Monitoring and enhancing website security

Personal data may also be used to manage your account and, if you have given consent, to send you promotional communications about products or services we believe may interest you. Information collected via the website helps to personalize your future visits.

We do not share your personal data with companies outside the NOBRAC Group for marketing purposes, nor do we transfer your data to any third country unless such transfer complies with GDPR requirements.

Legal Basis for Data Processing

The processing of your personal data is carried out based on:

• Your consent
• The necessity to fulfill contractual obligations (e.g., processing your order)
• Compliance with legal obligations (e.g., providing data to judicial authorities)
• The legitimate interests pursued by NOBRAC Group, where applicable

Data Sharing and Transfers

NOBRAC Group may share your personal data with:

• Departments within NOBRAC Group, including Customer Support, Human Resources, Quality, Pre-Sales, Commercial, and Technical Support teams
• Affiliates or subsidiaries within the NOBRAC Group, where necessary for service delivery
• Service providers acting on our behalf (e.g., vendors)
• Judicial or regulatory authorities, when required by law

We ensure that any such transfers comply with GDPR, and your data will only be shared with third parties under strict confidentiality agreements or as required by law.

Data Security

We employ technical and organizational security measures to protect your personal data from accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. Our security systems are designed to handle high-risk events while maintaining the availability, authenticity, integrity, and confidentiality of the data we process.

Your Rights as a Data Subject

In compliance with the GDPR, you have the following rights regarding your personal data:

• Access: Request information on how your data is processed and obtain a copy of the personal data we hold about you.
• Rectification: Correct inaccurate or incomplete data.
• Erasure ("Right to be forgotten"): Request the deletion of your personal data, where applicable.
• Restriction of Processing: Request the limitation of how your data is processed in certain circumstances.
• Data Portability: Obtain a copy of your personal data in a structured, commonly used format, or request that we transfer it to another data controller.
• Objection: Object to the processing of your personal data where it is processed based on legitimate interests or for direct marketing purposes.

You may also withdraw your consent at any time without affecting the lawfulness of prior processing activities based on consent.

To exercise your rights, please contact our Data Controller via email at inquiries@nobrac-group.com or by postal mail at Rua do Molha Pão, nº.15, 2405-012, Maceira, Portugal. We may require proof of identity to ensure your personal data is shared only with you.

If you believe your rights under GDPR have been violated, you have the right to lodge a complaint with your local supervisory authority. In Portugal, you may contact the National Data Protection Commission (CNPD) at www.cnpd.pt.

Automated Decision-Making

NOBRAC Group does not engage in automated decision-making processes, including profiling, based on the data collected via our website.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Once data is no longer required, it will be securely deleted or anonymized.

Last Updated: October 14th, 2024