{"id":904,"date":"2026-08-11T10:52:11","date_gmt":"2026-08-11T10:52:11","guid":{"rendered":"https:\/\/decorpita.pt\/privacy-anda-data-protection-policy\/"},"modified":"2026-08-30T15:13:42","modified_gmt":"2026-08-30T15:13:42","slug":"privacy-and-data-protection-policy","status":"publish","type":"page","link":"https:\/\/decorpita.pt\/en\/privacy-and-data-protection-policy\/","title":{"rendered":"Privacy and data protection policy"},"content":{"rendered":"

[vc_row][vc_column][vc_column_text]Last updated: 01.09.2026[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”vc_default” full_width=”stretch_row” gap=”40px” css_animation=”none” css=”.vc_custom_1787770952835{padding-top: 5vh !important;padding-bottom: 5vh !important;background-color: #4E4E50 !important;}”][vc_column width=”1\/2″][vc_tta_accordion style=”modern” active_color=”#FFFFFF” color=”#0A6689″ active_title_color=”#0A6689″ inactive_title_color=”#FFFFFF” spacing=”16px” c_icon=”chevron” collapsible_all=”true” active_section=”30″ css_animation=”none” el_class=”TxtAccordeon”][vc_tta_section title=”1. Purpose and scope” tab_id=”1786225101899-970d6813-bc06″][vc_column_text]This Privacy and Data Protection Policy explains how DECOR PITA \u2013 MATERIAIS DE CONSTRU\u00c7\u00c3O, S.A.<\/strong>, hereinafter referred to as \u201cDecorpita<\/strong>\u201d, collects, uses, retains, discloses and protects personal data processed in connection with:<\/p>\n

a) Access to and use of the website www.decorpita.pt, hereinafter referred to as the \u201cWebsite<\/strong>\u201d;<\/p>\n

b) Use of the chatbot made available through the Website;<\/p>\n

c) Communications submitted through the email addresses, telephone numbers and other communication channels published on the Website;<\/p>\n

d) Technical data required for the operation, maintenance, security and protection of the Website;<\/p>\n

e) Other digital interactions directly related to the use of the Website.<\/p>\n

 <\/p>\n

This Policy applies to Website visitors and Users and to natural persons who contact Decorpita through the communication channels published on the Website.<\/p>\n

As at the publication date of this Policy, the Website does not provide:<\/p>\n

a) Contact forms;<\/p>\n

b) Online quotation request forms;<\/p>\n

c) Newsletter subscriptions;<\/p>\n

d) Restricted areas for customers or trade professionals;<\/p>\n

e) User registration or account creation;<\/p>\n

f) Online job applications or curriculum vitae submissions;<\/p>\n

g) Facilities for uploading plans, photographs, designs or other documents;<\/p>\n

h) Online purchasing or payment functionality.<\/p>\n

 <\/p>\n

The future introduction of any such functionality will require this Policy to be reviewed and, where necessary, specific privacy information to be provided at the point at which personal data are collected.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”2. Data controller” tab_id=”1786445080970-9e14cf92-481e”][vc_column_text]The controller responsible for the processing of personal data is:<\/p>\n

DECOR PITA \u2013 MATERIAIS DE CONSTRU\u00c7\u00c3O, S.A.<\/strong><\/p>\n

Registered office:<\/strong>
\nEstrada do Casal da Coxa, no. 2
\n2600-056 Rondulha
\nVila Franca de Xira
\nPortugal<\/p>\n

Corporate and taxpayer identification number<\/strong>: 503 150 541
\nTelephone<\/strong>: +351 263 287 320
\nGeneral email<\/strong>: geral@decorpita.pt
\nWebsite<\/strong>: www.decorpita.pt<\/p>\n

Decorpita\u2019s full corporate details are available in the Legal Notice and Corporate Information<\/strong>.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”3. Data protection contact” tab_id=”1786445112619-39349ad9-ffd7″][vc_column_text]For any matter relating to the processing of personal data or the exercise of data subject rights, Decorpita may be contacted at:<\/p>\n

Email<\/strong>: privacidade@decorpita.pt<\/p>\n

Postal address:<\/strong><\/p>\n

DECOR PITA \u2013 MATERIAIS DE CONSTRU\u00c7\u00c3O, S.A.
\nFor the attention of: Data Protection
\nEstrada do Casal da Coxa, no. 2
\n2600-056 Rondulha
\nVila Franca de Xira
\nPortugal<\/p>\n

As at the publication date of this Policy, Decorpita has not formally appointed a Data Protection Officer.<\/p>\n

The email address privacidade@decorpita.pt is a functional Decorpita contact for privacy and data protection matters. It does not, in itself, constitute the contact address of a formally appointed Data Protection Officer.<\/p>\n

The appointment of a Data Protection Officer is mandatory for companies only under certain circumstances set out in the GDPR. Assessing this need is the responsibility of the data controller.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”4. Meaning of personal data” tab_id=”1786445142771-95f5eeb8-cd44″][vc_column_text]Personal data means any information relating to an identified or identifiable natural person.<\/p>\n

Personal data may include:<\/p>\n

a) Name;<\/p>\n

b) Postal address;<\/p>\n

c) Telephone number;<\/p>\n

d) Email address;<\/p>\n

e) Company and professional role, where linked to a natural person;<\/p>\n

f) The content of communications submitted to Decorpita;<\/p>\n

g) IP address;<\/p>\n

h) Session or device identifiers;<\/p>\n

i) Technical browser or device information;<\/p>\n

j) Access and usage logs;<\/p>\n

k) The content of messages submitted through the chatbot;<\/p>\n

l) Any other information that directly or indirectly identifies a natural person.<\/p>\n

 <\/p>\n

Information relating exclusively to a legal entity does not, in itself, constitute personal data. However, information relating to its representatives, employees or professional contacts may constitute personal data.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”5. How personal data are collected” tab_id=”1786445192760-21ad0a86-a414″][vc_column_text]Decorpita may collect personal data as follows:<\/p>\n

 <\/p>\n

5.1. 5.1. Directly from the data subject<\/strong><\/p>\n

Personal data may be collected where the data subject:<\/p>\n

a) Contacts Decorpita by email;<\/p>\n

b) Contacts Decorpita by telephone;<\/p>\n

c) Uses the chatbot made available through the Website;<\/p>\n

d) Requests information concerning products, services, showrooms, brands or business areas;<\/p>\n

e) Requests a commercial contact;<\/p>\n

f) Otherwise communicates with Decorpita in connection with information published on the Website.<\/p>\n

 <\/p>\n

5.2. 5.2. Automatically through use of the Website<\/strong><\/p>\n

Certain technical data may be collected when the Website is accessed, including:<\/p>\n

a) IP address;<\/p>\n

b) Date and time of access;<\/p>\n

c) Browser type and version;<\/p>\n

d) Operating system;<\/p>\n

e) Device type;<\/p>\n

f) Pages viewed;<\/p>\n

g) Referral source;<\/p>\n

h) Technical session logs;<\/p>\n

i) Information required to prevent, detect and investigate security incidents;<\/p>\n

j) Information relating to cookies and similar technologies, in accordance with the Cookie Policy.<\/p>\n

 <\/p>\n

5.3. 5.3. Through technology service providers<\/strong><\/p>\n

Certain personal data may be processed through service providers responsible for:<\/p>\n

a) Website hosting;<\/p>\n

b) Technical maintenance;<\/p>\n

c) The security of their systems;<\/p>\n

d) Email services;<\/p>\n

e) The technology used to operate the chatbot;<\/p>\n

f) Website usage analytics, should an analytics tool be implemented.<\/p>\n

 <\/p>\n

Such service providers may only process personal data to the extent required to provide the relevant services and in accordance with the contractual terms established by Decorpita.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”6. Categories of personal data processed” tab_id=”1786445277813-dd9bdcd4-de17″][vc_column_text]Depending on the relevant interaction, Decorpita may process the following categories of personal data:<\/p>\n

 <\/p>\n

6.1. 6.1. Identification data<\/strong><\/p>\n

Name and other identification details voluntarily provided by the data subject.<\/p>\n

 <\/p>\n

6.2. 6.2. Contact details<\/strong><\/p>\n

Email address, telephone number, postal address or other contact details provided by the data subject.<\/p>\n

 <\/p>\n

6.3. 6.3. Professional information<\/strong><\/p>\n

Company, job title, professional activity and relationship with the represented organisation.<\/p>\n

 <\/p>\n

6.4. 6.4. Communications data<\/strong><\/p>\n

The content of messages, enquiries, questions, responses, the subject matter of the communication and the history of communications with Decorpita.<\/p>\n

 <\/p>\n

6.5. 6.5. Chatbot data<\/strong><\/p>\n

The content of messages submitted, the date and time of the interaction, technical session data and other identifiers required for the operation and security of the tool.<\/p>\n

 <\/p>\n

6.6. 6.6. Technical and usage data<\/strong><\/p>\n

IP address, device type, browser, operating system, pages viewed, session duration, security logs and other technical data required for Website operation.<\/p>\n

Decorpita does not intend to collect personal data through the Website that are not adequate, relevant or necessary for the purposes identified in this Policy.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”7. Data protection principles” tab_id=”1786445329751-2a3de257-a5dd”][vc_column_text]Decorpita processes personal data in accordance with the following principles:<\/p>\n

a) Lawfulness, fairness and transparency;<\/p>\n

b) Purpose limitation;<\/p>\n

c) Data minimisation;<\/p>\n

d) Accuracy;<\/p>\n

e) Storage limitation;<\/p>\n

f) Integrity and confidentiality;<\/p>\n

g) Accountability.<\/p>\n

 <\/p>\n

Only personal data that are adequate, relevant and necessary for the purposes identified in this Policy will be processed.<\/p>\n

These principles derive from the GDPR and the Portuguese legislation ensuring its implementation within the national legal order.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”8. Purposes and legal bases for processing” tab_id=”1786445378791-647f9c6e-b235″][vc_column_text]8.1. 8.1. Technical operation of the Website<\/strong><\/p>\n

Purposes:<\/strong><\/p>\n

a) Providing access to and navigation of the Website;<\/p>\n

b) Correctly displaying Website content;<\/p>\n

c) Ensuring that pages and functionalities operate correctly;<\/p>\n

d) Diagnosing technical errors or failures;<\/p>\n

e) Carrying out updates and maintenance;<\/p>\n

f) Ensuring compatibility with different devices and browsers.<\/p>\n

 <\/p>\n

Legal basis:<\/strong><\/p>\n

Decorpita\u2019s legitimate interests in providing a functional, secure and accessible Website.<\/p>\n

 <\/p>\n

8.2. 8.2. Website and systems security<\/strong><\/p>\n

 <\/p>\n

Purposes:<\/strong><\/p>\n

a) Preventing unauthorised access;<\/p>\n

b) Detecting attempted intrusions;<\/p>\n

c) Preventing fraud and misuse;<\/p>\n

d) Investigating technical or security incidents;<\/p>\n

e) Protecting Decorpita\u2019s systems, networks and information;<\/p>\n

f) Maintaining security logs.<\/p>\n

 <\/p>\n

Legal basis:<\/strong><\/p>\n

Decorpita\u2019s legitimate interests in protecting its systems, information and Users and compliance with applicable statutory security obligations.<\/p>\n

 <\/p>\n

8.3. 8.3. Responding to communications<\/strong><\/p>\n

 <\/p>\n

Purposes:<\/strong><\/p>\n

a) Receiving and responding to messages;<\/p>\n

b) Providing information concerning Decorpita;<\/p>\n

c) Responding to questions concerning products, services, brands, showrooms or business areas;<\/p>\n

d) Referring the enquiry to the appropriate department;<\/p>\n

e) Requesting further information;<\/p>\n

f) Maintaining a record of the communication;<\/p>\n

g) Following up on the matter submitted.<\/p>\n

 <\/p>\n

Legal basis:<\/strong><\/p>\n

a) Taking steps at the request of the data subject prior to entering into a contract, where the enquiry relates to a potential purchase, proposal or commercial relationship;<\/p>\n

b) Decorpita\u2019s legitimate interests in receiving, organising and responding to communications submitted to it;<\/p>\n

c) Compliance with a legal obligation, where applicable.<\/p>\n

 <\/p>\n

8.4. 8.4. Initial commercial enquiries<\/strong><\/p>\n

 <\/p>\n

Purposes:<\/strong><\/p>\n

a) Understanding the requirements submitted;<\/p>\n

b) Identifying the relevant business area or team;<\/p>\n

c) Enabling a Decorpita representative to contact the interested party;<\/p>\n

d) Preparing a potential meeting or commercial response;<\/p>\n

e) Following up on the commercial opportunity submitted.<\/p>\n

 <\/p>\n

Legal basis:<\/strong><\/p>\n

a) Taking pre-contractual steps at the data subject\u2019s request;<\/p>\n

b) Decorpita\u2019s legitimate interests in managing its commercial activities and responding to expressions of interest.<\/p>\n

 <\/p>\n

Processing for this purpose does not constitute registration for promotional communications or a newsletter.<\/p>\n

 <\/p>\n

8.5. Legal compliance and legal claims<\/strong><\/strong><\/p>\n

a) Complying with statutory or regulatory obligations;<\/p>\n

b) Responding to public authorities or courts;<\/p>\n

c) Preventing and investigating fraud;<\/p>\n

d) Retaining evidence of relevant communications;<\/p>\n

e) Establishing, exercising or defending Decorpita\u2019s rights;<\/p>\n

f) Managing complaints or disputes.<\/p>\n

 <\/p>\n

Legal basis:<\/strong><\/p>\n

a) Compliance with a legal obligation;<\/p>\n

b) Legitimate interests in fraud prevention and the defence of legal rights;<\/p>\n

c) The establishment, exercise or defence of legal claims.<\/p>\n

[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”9. Personal data processed through the chatbot” tab_id=”1786455387154-868276b4-6b9c”][vc_column_text]9.1. 9.1. Chatbot purposes<\/strong><\/p>\n

The chatbot may be used to:<\/p>\n

a) Answer general questions concerning Decorpita;<\/p>\n

b) Provide information on products, services, brands, showrooms and business areas;<\/p>\n

c) Assist Users in locating information available on the Website;<\/p>\n

d) Provide relevant contact channels;<\/p>\n

e) Direct Users to the appropriate department or service;<\/p>\n

f) Support initial informational or commercial enquiries.<\/p>\n

 <\/p>\n

9.2. 9.2. Data processed<\/strong><\/p>\n

Depending on the technical configuration of the tool, the following data may be processed:<\/p>\n

a) The content of messages submitted by the User;<\/p>\n

b) The date and time of the interaction;<\/p>\n

c) Technical session data;<\/p>\n

d) IP addresses or other technical identifiers;<\/p>\n

e) Device and browser information;<\/p>\n

f) Logs required for diagnostics, security and operation of the tool.<\/p>\n

 <\/p>\n

9.3. 9.3. Legal bases<\/strong><\/p>\n

Processing may be based on:<\/p>\n

a) Decorpita\u2019s legitimate interests in providing assistance and improving access to information;<\/p>\n

b) Taking steps at the User\u2019s request prior to entering into a contract, where the conversation concerns a potential commercial enquiry;<\/p>\n

c) Compliance with statutory or security obligations, where applicable.<\/p>\n

 <\/p>\n

9.4. 9.4. Nature of chatbot responses<\/strong><\/p>\n

Chatbot responses are provided for general information purposes only.<\/p>\n

They do not constitute:<\/p>\n

a) A legally binding offer;<\/p>\n

b) Final confirmation of a price;<\/p>\n

c) A guarantee of availability;<\/p>\n

d) A definitive technical specification;<\/p>\n

e) Confirmation of an order or contract award;<\/p>\n

f) A guaranteed manufacturing, supply, delivery or installation lead time;<\/p>\n

g) Technical advice tailored to the specific conditions of an individual project.<\/p>\n

 <\/p>\n

Material information should be confirmed directly with a Decorpita representative.<\/p>\n

 <\/p>\n

9.5. 9.5. Automated decision-making<\/strong><\/p>\n

The chatbot will not be used to make decisions based solely on automated processing that produce legal effects concerning the User or similarly significantly affect the User.<\/p>\n

The GDPR recognizes a person’s right not to be subject\u2014except under conditions provided for by law\u2014to decisions based solely on automated processing that produce legal effects or similarly significant effects.<\/p>\n

9.6. 9.6. Information that should not be submitted<\/strong><\/p>\n

Users should not submit through the chatbot:<\/p>\n

a) Passwords;<\/p>\n

b) Authentication codes;<\/p>\n

c) Full banking details;<\/p>\n

d) Identification documents;<\/p>\n

e) Health data;<\/p>\n

f) Biometric data;<\/p>\n

g) Information revealing racial or ethnic origin;<\/p>\n

h) Political opinions;<\/p>\n

i) Religious or philosophical beliefs;<\/p>\n

j) Information concerning sex life or sexual orientation;<\/p>\n

k) Confidential third-party information;<\/p>\n

l) Unnecessary personal data relating to third parties.<\/p>\n

 <\/p>\n

Decorpita may delete information that is manifestly excessive, unnecessary or inappropriate for the purpose of the interaction.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”10. Mandatory and optional data” tab_id=”1786455503041-85a8d3d8-4951″][vc_column_text]Browsing the Website for information purposes does not require the User to provide their name, telephone number or email address directly.<\/p>\n

The chatbot may be used without the User identifying themselves, unless the User voluntarily provides contact details or identification is required to follow up on the enquiry.<\/p>\n

Where a User wishes to receive a subsequent response, be contacted by a Decorpita representative or initiate a commercial enquiry, it may be necessary to provide certain contact information.<\/p>\n

Failure to provide the required data may prevent Decorpita from:<\/p>\n

a) Identifying the enquiry;<\/p>\n

b) Responding to the question submitted;<\/p>\n

c) Contacting the User;<\/p>\n

d) Referring the matter to the appropriate department;<\/p>\n

e) Following up on an expression of commercial interest.<\/p>\n

[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”11. Recipients of personal data” tab_id=”1786455553315-8f0c047b-1a62″][vc_column_text]Personal data may only be accessed internally by personnel and departments that require the information to respond to the enquiry, operate the Website or comply with legal obligations.<\/p>\n

To the extent strictly necessary, personal data may also be processed by:<\/p>\n

a) Website hosting providers;<\/p>\n

b) Website development and technical maintenance providers;<\/p>\n

c) Information technology service providers;<\/p>\n

d) Cybersecurity service providers;<\/p>\n

e) Email and communications service providers;<\/p>\n

f) The provider of the technology used to operate the chatbot;<\/p>\n

g) Analytics or statistical service providers, should such tools be implemented;<\/p>\n

h) Legal advisers, auditors, insurers and other professional consultants;<\/p>\n

i) Public authorities, courts or regulatory bodies where required by law or pursuant to a lawful request.<\/p>\n

 <\/p>\n

Where an entity processes personal data on Decorpita\u2019s behalf, it will act as a processor and will be subject to documented instructions, confidentiality duties and appropriate security obligations.<\/p>\n

Decorpita does not sell or otherwise trade personal data.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”12. International data transfers” tab_id=”1786455621788-4abeae9a-3d0b”][vc_column_text]Based on the technical configuration planned for the launch of the Website, Decorpita does not intend to transfer personal data to countries outside the European Economic Area.<\/p>\n

Decorpita will seek to appoint service providers that process personal data within the European Economic Area.<\/p>\n

Before the Website and chatbot become operational, Decorpita will confirm with its technical service providers:<\/p>\n

a) The location of infrastructure and servers;<\/p>\n

b) The location of processing operations;<\/p>\n

c) The use of sub-processors;<\/p>\n

d) Whether personal data may be accessed from third countries;<\/p>\n

e) The mechanisms applicable to any international transfers.<\/p>\n

 <\/p>\n

Where a service provider involves a transfer of personal data outside the European Economic Area, Decorpita will ensure that an appropriate legal transfer mechanism is in place and will update this Policy where necessary.<\/p>\n

The GDPR requires that any transfer to third countries be covered by an adequacy decision, appropriate safeguards, or another applicable legal basis.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”13. Personal data retention” tab_id=”1786455663803-dedc1b2c-f4b7″][vc_column_text]Personal data processed exclusively in connection with:<\/p>\n

a) Use of the Website;<\/p>\n

b) Chatbot interactions;<\/p>\n

c) Informational digital communications;<\/p>\n

d) Initial commercial enquiries that do not result in a contractual relationship;<\/p>\n

 <\/p>\n

will generally be retained for a maximum period of 12 months<\/strong> from the date of the last relevant interaction.<\/p>\n

Personal data may be deleted before the end of that period where they are no longer required for the purpose for which they were collected.<\/p>\n

Personal data may be retained for a longer period where required to:<\/p>\n

a) Comply with a legal obligation;<\/p>\n

b) Investigate a security incident;<\/p>\n

c) Prevent or investigate fraud;<\/p>\n

d) Resolve a complaint;<\/p>\n

e) Establish, exercise or defend legal claims;<\/p>\n

f) Comply with a decision or instruction issued by a competent authority.<\/p>\n

 <\/p>\n

Where a Website or chatbot interaction results in a proposal, order, contract, complaint or commercial relationship, the necessary data may be transferred to Decorpita\u2019s commercial records and retained for the applicable statutory or contractual periods.<\/p>\n

Following expiry of the applicable retention period, personal data will be securely deleted or anonymised.<\/p>\n

Portuguese legislation permits retention for the periods necessary to demonstrate compliance with obligations and mandates destruction or anonymization once the purpose has ceased and there is no other legal basis for retaining the data.[\/vc_column_text][\/vc_tta_section][\/vc_tta_accordion][\/vc_column][vc_column width=”1\/2″][vc_tta_accordion style=”modern” active_color=”#FFFFFF” color=”#0A6689″ active_title_color=”#0A6689″ inactive_title_color=”#FFFFFF” spacing=”16px” c_icon=”chevron” collapsible_all=”true” active_section=”30″ css_animation=”none” el_class=”TxtAccordeon”][vc_tta_section title=”14. Cookies and analytics tools” tab_id=”1787831298423-577c8520-31dc”][vc_column_text]The Website may use cookies and similar technologies required for:<\/p>\n

a) Technical operation;<\/p>\n

b) Security;<\/p>\n

c) Session management;<\/p>\n

d) Remembering User preferences;<\/p>\n

e) Operation of the chatbot.<\/p>\n

 <\/p>\n

Decorpita is confirming with its technical service providers whether an analytics or Website usage measurement tool will be implemented.<\/p>\n

Where an analytics tool using cookies or technologies that are not strictly necessary is subsequently introduced:<\/p>\n

a) Its use will be identified in the Cookie Policy;<\/p>\n

b) The relevant providers, purposes and retention periods will be disclosed;<\/p>\n

c) Any legally required preferences or consent will be obtained;<\/p>\n

d) Users will be able to accept, reject or configure their preferences;<\/p>\n

e) This Policy will be updated where necessary.<\/p>\n

 <\/p>\n

Full information concerning the cookies used will be provided in the Cookie Policy<\/strong> and the relevant cookie preference panel.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”15. Personal data security” tab_id=”1787831298483-7202d375-3536″][vc_column_text]Decorpita implements technical and organisational measures considered appropriate to the risks associated with the processing of personal data.<\/p>\n

Such measures are intended to protect personal data against:<\/p>\n

a) Destruction;<\/p>\n

b) Loss;<\/p>\n

c) Alteration;<\/p>\n

d) Unauthorised disclosure;<\/p>\n

e) Unauthorised access;<\/p>\n

f) Misuse;<\/p>\n

g) Unlawful processing;<\/p>\n

h) Accidental or malicious incidents.<\/p>\n

 <\/p>\n

Depending on the systems used, such measures may include:<\/p>\n

a) Access controls;<\/p>\n

b) User profiles and permission management;<\/p>\n

c) Authentication mechanisms;<\/p>\n

d) Network and device protection;<\/p>\n

e) Backups;<\/p>\n

f) Software updates;<\/p>\n

g) Technical monitoring;<\/p>\n

h) Activity logging;<\/p>\n

i) Encryption, where appropriate;<\/p>\n

j) Confidentiality obligations;<\/p>\n

k) Staff training and awareness;<\/p>\n

l) Incident management procedures;<\/p>\n

m) Service provider assessments.<\/p>\n

 <\/p>\n

The GDPR requires the controller to implement technical and organizational measures appropriate to the risk.<\/p>\n

No Internet transmission or information system can, however, be considered completely secure.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”16. Data subject rights” tab_id=”1787831298551-ad60071a-91f3″][vc_column_text]Subject to applicable law and the circumstances of the relevant processing, data subjects may exercise the following rights:<\/p>\n

 <\/p>\n

16.1. 16.1. Right of access<\/strong><\/p>\n

The right to obtain confirmation as to whether their personal data are processed and to access those data and related processing information.<\/p>\n

 <\/p>\n

16.2. 16.2. Right to rectification<\/strong><\/p>\n

The right to request the correction of inaccurate, incomplete or outdated personal data.<\/p>\n

 <\/p>\n

16.3. 16.3. Right to erasure<\/strong><\/p>\n

The right to request erasure where the statutory requirements are met.<\/p>\n

The right to erasure is not absolute and may not apply where personal data must be retained to comply with a legal obligation, resolve a complaint or establish, exercise or defend legal claims.<\/p>\n

 <\/p>\n

16.4. 16.4. Right to restriction of processing<\/strong><\/p>\n

The right to request that the use of personal data be temporarily restricted in the circumstances provided by law.<\/p>\n

 <\/p>\n

16.5. 16.5. Right to object<\/strong><\/p>\n

The right to object, on grounds relating to the data subject\u2019s particular situation, to processing based on Decorpita\u2019s legitimate interests.<\/p>\n

 <\/p>\n

16.6. 16.6. Right to data portability<\/strong><\/p>\n

The right to receive personal data provided to Decorpita in a structured, commonly used and machine-readable format, where processing is based on consent or a contract and is carried out by automated means.<\/p>\n

 <\/p>\n

16.7. 16.7. Right to withdraw consent<\/strong><\/p>\n

Where processing is based on consent, the data subject may withdraw that consent at any time.<\/p>\n

Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.<\/p>\n

 <\/p>\n

16.8. 16.8. Rights concerning automated decision-making<\/strong><\/p>\n

The right not to be subject, except in the circumstances permitted by law, to a decision based solely on automated processing that produces legal effects or similarly significantly affects the data subject.<\/p>\n

The rights of access, rectification, erasure, restriction, objection, and portability are recognized by the GDPR and detailed by the CNPD.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”17. Exercising data subject rights” tab_id=”1787831298637-3143df68-8f6c”][vc_column_text]Requests may be submitted in writing to:<\/p>\n

Email<\/strong>: privacidade@decorpita.pt<\/p>\n

or<\/p>\n

Postal address:<\/strong><\/p>\n

DECOR PITA \u2013 MATERIAIS DE CONSTRU\u00c7\u00c3O, S.A.
\nFor the attention of: Data Protection
\nEstrada do Casal da Coxa, no. 2
\n2600-056 Rondulha
\nVila Franca de Xira
\nPortugal<\/p>\n

The request should clearly state:<\/p>\n

a) The data subject\u2019s name;<\/p>\n

b) The right being exercised;<\/p>\n

c) The personal data or processing activity concerned;<\/p>\n

d) Contact details for the response;<\/p>\n

e) Any information reasonably required to locate the relevant data.<\/p>\n

 <\/p>\n

Where Decorpita has reasonable doubts concerning the identity of the requester, it may request additional information strictly necessary to confirm that identity.<\/p>\n

The exercise of data subject rights is generally free of charge.<\/p>\n

Decorpita will respond without undue delay and, in principle, within one month of receipt, without prejudice to any extension permitted by law due to the complexity or number of requests.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”18. Complaints to the supervisory authority” tab_id=”1787831298744-51a6720e-821b”][vc_column_text]Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority:<\/p>\n

Comiss\u00e3o Nacional de Prote\u00e7\u00e3o de Dados \u2014 CNPD<\/strong><\/p>\n

Avenida D. Carlos I, n.\u00ba 134, 1.\u00ba
\n1200-651 Lisboa
\nPortugal<\/p>\n

Telephone<\/strong>: +351 213 928 400
\nEmail<\/strong>: geral@cnpd.pt<\/p>\n

Data subjects may contact Decorpita first through privacidade@decorpita.pt so that the matter can be reviewed and, where possible, resolved directly.<\/p>\n

The indicated contacts correspond to the contact details currently published by the CNPD.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”19. Children\u2019s personal data” tab_id=”1787831298821-1517c1d8-7ebc”][vc_column_text]The Website, chatbot and Decorpita\u2019s services are not specifically directed at children.<\/p>\n

Decorpita does not intend to knowingly collect children\u2019s personal data through the Website or chatbot without the appropriate involvement of their legal representatives where required.<\/p>\n

A legal representative who believes that a child\u2019s personal data have been improperly provided should contact Decorpita through privacidade@decorpita.pt<\/a>[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”20. Special categories of personal data” tab_id=”1787831298894-c7b7117d-0271″][vc_column_text]Decorpita does not request through the Website or chatbot personal data revealing:<\/p>\n

a) Racial or ethnic origin;<\/p>\n

b) Political opinions;<\/p>\n

c) Religious or philosophical beliefs;<\/p>\n

d) Trade union membership;<\/p>\n

e) Genetic data;<\/p>\n

f) Biometric data used for unique identification;<\/p>\n

g) Health data;<\/p>\n

h) Information concerning sex life or sexual orientation.<\/p>\n

 <\/p>\n

Users should not submit such information through the chatbot or other communications unless it is strictly necessary and a valid legal basis applies.<\/p>\n

Where such information is provided voluntarily and is not required, Decorpita may delete it.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”21. Third-party links and services” tab_id=”1787831298967-98ef47be-d2bb”][vc_column_text]The Website may contain links to:<\/p>\n

a) Social media platforms;<\/p>\n

b) Mapping services;<\/p>\n

c) Manufacturer or brand websites;<\/p>\n

d) Videos;<\/p>\n

e) Digital catalogues;<\/p>\n

f) Other third-party services.<\/p>\n

 <\/p>\n

Where a User accesses a third-party service, the processing of personal data may be subject to that third party\u2019s own terms and privacy policy.<\/p>\n

Decorpita does not continuously control the privacy, security or data retention practices of external services.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”22. Personal data breaches” tab_id=”1787831299043-29df8232-0579″][vc_column_text]Decorpita will maintain procedures intended to identify, assess and manage security incidents involving personal data.<\/p>\n

Where a personal data breach is likely to result in a risk to the rights and freedoms of natural persons, Decorpita will make any notifications required by law to the competent supervisory authority.<\/p>\n

Where a breach is likely to result in a high risk, affected data subjects will be informed in accordance with applicable law.
\n[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”23. Amendments to this Policy” tab_id=”1787831299117-0d427a0b-e674″][vc_column_text]Decorpita may amend or update this Policy where necessary, including as a result of:<\/p>\n

a) Legislative or regulatory changes;<\/p>\n

b) Guidance issued by supervisory authorities;<\/p>\n

c) Changes to the Website;<\/p>\n

d) The introduction of new services or functionality;<\/p>\n

e) A change to the chatbot provider;<\/p>\n

f) The introduction of forms, newsletters or restricted areas;<\/p>\n

g) The implementation of analytics or statistical tools;<\/p>\n

h) Changes to technical service providers;<\/p>\n

i) Changes to processing purposes or legal bases;<\/p>\n

j) Organisational or operational changes.<\/p>\n

 <\/p>\n

The updated version will be published on the Website together with the date of the latest update and the applicable version number.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”24. Applicable law” tab_id=”1787831299199-69fda01e-2936″][vc_column_text]This Policy shall be interpreted in accordance with:<\/p>\n

a) Regulation (EU) 2016\/679 \u2014 General Data Protection Regulation;<\/p>\n

b) Portuguese Law no. 58\/2019 of 8 August;<\/p>\n

c) Portuguese privacy and electronic communications legislation;<\/p>\n

d) Any other applicable statutory and regulatory provisions.<\/p>\n

 <\/p>\n

Law No. 58\/2019 ensures the implementation of the GDPR within the Portuguese legal system.[\/vc_column_text][\/vc_tta_section][vc_tta_section title=”25. Contact details” tab_id=”1787831299277-4d3c995b-86bd”][vc_column_text]Enquiries concerning this Policy or the processing of personal data may be submitted to:<\/p>\n

DECOR PITA \u2013 MATERIAIS DE CONSTRU\u00c7\u00c3O, S.A.<\/strong><\/p>\n

Data protection: privacidade@decorpita.pt
\nGeneral email<\/strong>: geral@decorpita.pt
\nTelephone<\/strong>: +351 263 287 320
\nLast updated<\/strong>: 01.09.2026
\nVersion<\/strong>: 1.0[\/vc_column_text][\/vc_tta_section][\/vc_tta_accordion][\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row][vc_column][vc_column_text]Last updated: 01.09.2026[\/vc_column_text][\/vc_column][\/vc_row][vc_row type=”vc_default” full_width=”stretch_row” gap=”40px” css_animation=”none” css=”.vc_custom_1787770952835{padding-top: 5vh !important;padding-bottom: 5vh !important;background-color: #4E4E50 !important;}”][vc_column width=”1\/2″][vc_tta_accordion style=”modern” active_color=”#FFFFFF” color=”#0A6689″ active_title_color=”#0A6689″ inactive_title_color=”#FFFFFF” spacing=”16px” c_icon=”chevron” collapsible_all=”true” active_section=”30″ css_animation=”none” el_class=”TxtAccordeon”][vc_tta_section title=”1. Purpose and scope” tab_id=”1786225101899-970d6813-bc06″][vc_column_text]This Privacy and Data Protection Policy explains how DECOR PITA \u2013 MATERIAIS DE CONSTRU\u00c7\u00c3O, S.A., hereinafter referred to as \u201cDecorpita\u201d, collects, uses, retains, discloses and…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-904","page","type-page","status-publish","hentry","description-off"],"_links":{"self":[{"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/pages\/904","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/comments?post=904"}],"version-history":[{"count":4,"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/pages\/904\/revisions"}],"predecessor-version":[{"id":1323,"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/pages\/904\/revisions\/1323"}],"wp:attachment":[{"href":"https:\/\/decorpita.pt\/en\/wp-json\/wp\/v2\/media?parent=904"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}