Privacy Policy

Ibersol SGPS, S.A. and its subsidiaries respect the privacy of their customers, suppliers and users of their websites.

This Privacy Policy describes who we are, what personal data we process, how we collect this data, for what purposes we may use your data, how we process it, with whom we share it, for how long we keep it, as well as the ways to contact us and exercise your rights.

The Policy may be revised occasionally, so we suggest that you consult it periodically.

  1. WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?

    Your personal data will be processed by Ibersol SGPS, S.A., corporate entity no. 501669447, with registered office at Praça do Bom Sucesso, no. 105 to 159, 9th floor, 4150-146 Porto, and its subsidiaries, hereinafter referred to as the “Company”.

    The Company is responsible for the processing of personal data within the meaning of the General Data Protection Regulation.

  2. WHAT PERSONAL DATA DO WE PROCESS?

    The Company processes, among others, the following categories of personal data:
    • Identification data (e.g. name and tax identification number)
    • Contact data (e.g. address, email address and mobile/telephone number)
    • Bank details.
    • Tracking data (e.g. computer address, location)

  3. HOW DO WE COLLECT YOUR PERSONAL DATA?

    The Company collects your personal data directly, namely:

    • When you contact us, for any reason, through our website, our telephone line or by email.
    • When you give us your opinion;
    • When you use or view our website, through your browser’s cookies.

  4. HOW DO WE USE YOUR PERSONAL DATA?

    Your personal data is processed, in particular, for the following purposes:

    • Customer and potential Customer management
    The processing of your personal data is necessary for the execution of the contract to be concluded between you and the Company in order to deliver your order. If you do not provide your data, we will not be able to provide you with the requested delivery service. Your personal data, processed based on the execution of a contract, will be kept for a period of 2 years after your last order.
    Customers’ personal data may also be processed based on the legitimate interests pursued by the Company, in particular for the purposes of litigation management. The personal data processed for this purpose will be kept for the period necessary to exercise the respective rights.

    • Marketing
    The Company may process your data to send you information about its products and services. This data processing will only be carried out with your consent, given when subscribing to the Newsletter. If you consent, you will receive marketing communications via email. Failure to provide your personal data will prevent the Company from sending you commercial communications. Your data, processed on the basis of your consent, will be kept for this purpose for a period of 2 years after your last order. You may, at any time, object to this data processing by revoking your consent.

    • Management of complaints and contacts received by the Company
    You can send us suggestions, opinions or complaints regarding the services provided by the Company via email at grupo@ibersol.com. Your personal data will be processed for this purpose based on your consent and based on the legitimate interests pursued by the Company, namely to process and respond to any contact or request for information and to resolve the situation underlying your complaint. Your data, processed based on your consent and the legitimate interests of the Company, will be kept for this purpose for the time necessary to resolve your issue.

    • Management of suppliers
    The personal data of suppliers may be processed by the Company for the purpose of contractual and litigation management. The legal basis is the execution of the contract and the existence of a legitimate interest on the part of the Company for the purposes of litigation management. The data will be kept for the period necessary to fulfil the contracts and to exercise the rights of the Company.

    The data of the Company’s suppliers may be communicated to the Company’s customers in order to comply with legal or contractual obligations.

  5. CAN MY PERSONAL DATA BE COMMUNICATED?
    Your personal information may be communicated within the scope of the IBERSOL business group:• To other companies in the Ibersol group, owned by Ibersol SGPS, S.A.
    • To other companies.
    • To UQ Consult SA, which operates the ordering website and mobile ordering applications, necessary for the execution of the contract to be concluded between you and the Company, in order for your order to be delivered.
    • To Sonae MC, SGPS S.A., which operates the Cartão Continente program, necessary for the execution of the contract to be concluded between you and the Company, in order for you to be able to enjoy the promotional advantages associated with the loyalty card.
    • To third-party service providers/subcontractors of the Company.
    Your personal data may be processed by subcontracted companies, in particular for the hosting of websites or e-mail. Only the personal data necessary for the provision of the service in question will be provided to these companies. Whenever these third parties process personal data on behalf of and on behalf of the Company, they will process the data only and solely in accordance with the express instructions given to them by the Company.
    • Personal data may also be accessed by internal and external auditors, with the guarantee that they will be kept confidential and will not be used for purposes other than audits.

    Your personal data may only be transferred to countries outside the European Economic Area that the European Commission considers to ensure an adequate level of protection. If the third country (outside the EEA) does not offer this level of protection, your personal data may only be transferred to that country if the data exporter and the data importer conclude standard contractual clauses applicable to the transfer approved by the European Commission. You can obtain a copy of these clauses by sending an email to privacidade@ibersol.com.

  6. WHAT ARE MY RIGHTS?
    • Right of access – you have the right to obtain confirmation as to whether or not your data is being processed and, where applicable, to access your personal data held by the Company and to obtain a copy of the data being processed. If you require more than one copy of your personal data being processed, the Company will charge a fee for this service to cover administrative costs.• Right to rectification – you have the right to obtain, without undue delay, the rectification of inaccurate or incomplete data.

    • Right to erasure of data (“right to be forgotten”) – you have the right to obtain the erasure of your data, in certain cases, in particular, if the data is no longer necessary for the purpose for which it was collected or processed; if you withdraw your consent and there is no other basis for the processing of your personal data; and if you object to the processing and there are no overriding legitimate interests that justify it.

    • Right to restriction of processing – you have the right to obtain the restriction of the processing of your data in certain cases, in particular, as compensation for unlawful processing and if you object to the erasure of your data; if the Company no longer needs the data for the purposes of processing, but they are required by you for the purposes of establishing, exercising or defending a right in legal proceedings; if you contest the accuracy of the data, for a period enabling the Company to verify its accuracy; and if you object to the processing, until verification that the legitimate grounds of the Company prevail.

    • Right to data portability – if the processing depends on your consent and this has been provided by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format;

    • Right to object – you may object, at any time, to the processing of your personal data, in particular when the processing is carried out (i) for the purposes of the legitimate interests pursued by the Company, in which case the Company will cease the processing, unless it demonstrates that it has a legitimate interest that prevails over the rights, interests and freedoms of the data subject or the data is necessary for the purposes of establishing, exercising or defending a right in legal proceedings or (ii) for direct marketing purposes.

    You may exercise the above rights through the contact details indicated in this Policy.

    Your requests will be treated with special care in order to ensure the effectiveness of your rights. You may be asked to prove your identity in order to ensure that personal data is only shared with the data subject.

    You also have the right to file a complaint with the National Data Protection Commission (https://www.cnpd.pt).

     

  7. CAN I REVOKE MY CONSENT LATER?
    If consent is legally necessary for the processing of personal data, you have the right to withdraw consent at any time, although this right does not compromise the lawfulness of the processing carried out based on the consent previously given nor the subsequent processing of the same data, based on another legal basis, such as the execution of a contract or compliance with a legal obligation to which the Company is subject.If you wish to withdraw your consent, you can do so by sending an email to: privacidade@ibersol.com
  8. HOW CAN I EXERCISE MY RIGHTS?
    If you wish to exercise any of your rights regarding the processing of your data, please contact us:
    E-mail: privacidade@ibersol.com
    Praça do Bom Sucesso, nº 105 a 159, 9th floor, 4150-146 Porto

Updated on: 20/03/2025