Company

Privacy Policy

 QUILABAN – QUÍMICA LABORATORIAL ANALÍTICA, S.A. (“Quilaban”) respects your privacy and is committed to protecting the personal data of its customers, suppliers, employees, and partners. This Data Protection and Privacy Policy outlines how we collect, use, safeguard, and share your personal data, as well as your rights concerning such data, in compliance with the General Data Protection Regulation (GDPR) and other applicable laws. 

 

Data collector

Quilaban, headquartered at Beloura Office Park – Edifício 11, Quinta da Beloura, 2710-693 Sintra, is the entity responsible for the processing of your personal data, determining which data is collected, how it is processed, and for what purposes. 

 

Principles applicable to data protection 

The processing of your personal data is carried out in accordance with the general principles outlined in the GDPR, namely: 

 

  1. In the context of the established relationship, Quilaban ensures that your personal data will be processed lawfully, fairly, and transparently (“Principle of lawfulness, fairness, and transparency”); 
  2. Quilaban collects your personal data for specific, explicit, and legitimate purposes and does not process this data in a manner incompatible with these purposes (“Principle of purpose limitation”); 
  3. Quilaban ensures that only data that is adequate, relevant, and limited to what is necessary for the purposes for which it is processed will be handled (“Principle of data minimisation”); 
  4. Quilaban takes appropriate measures to ensure that inaccurate personal data is erased or rectified without delay, considering the purposes for which it is processed (“Principle of accuracy”) 
  5. Quilaban retains personal data in a form that allows identification of data subjects only for as long as necessary for the purposes for which it is processed (“Principle of storage limitation”);  
  6. Quilaban ensures that your personal data is processed securely, including protection against unauthorised or unlawful processing and accidental loss, destruction, or damage, by implementing appropriate technical and organisational measures (“Principle of integrity and confidentiality”). 

 

Personal data, data processing, and data subjects 

“Personal data” refers to any information or elements, regardless of their medium, that can identify or make an individual identifiable, directly or indirectly, to Quilaban, particularly by reference to an identifier, such as a name, identification number, location data, electronic identifiers, or specific elements of physical, physiological, genetic, mental, economic, cultural, or social identity. 

“Data processing” means any operation or set of operations performed on personal data, whether by automated or non-automated means, from collection to destruction. This cycle includes, but is not limited to, recording, organising, structuring, storing, adapting or altering, retrieving, consulting, using, disclosing by transmission or otherwise making available, aligning or combining, restricting, erasing. The concept of data processing is broad and applies to all operations or sets of operations performed by Quilaban in relation to your personal data. 

Within the scope of Quilaban’s activities, the “Data Subject” includes, but is not limited to, customers and former customers, prospective customers, investors, partners, job applicants, employees and former employees, employees of partners, suppliers and service providers and their employees, claimants and complainants, visitors, and individuals captured on CCTV footage, as well as any individuals maintaining a relationship with Quilaban and to whom personal data pertains.

 

 Categories of personal data processed

In the course of its activities, Quilaban processes personal data of various categories of data subjects.  

The personal data that Quilaban collects depends on the nature of the interaction but may include the following: 

 

  1. Identification and contact details (name, address, email, phone, image);
  2. Demographic data (country, gender, age, date of birth);
  3. Recruitment-related data (CVs, academic and professional history);
  4. Commercial data for the provision of Quilaban’s services and/or products (invoice details, payment data, website activity records);
  5. Payment data (tax identification number, credit/debit card numbers, security code numbers, payment dates, outstanding amounts or payments received, and/or other billing-related information);
  6. Cookies (information collected through the use of cookies and/or other technologies, including, but not limited to, for advertising purposes).

 

Purposes of personal data processing  

The development and execution of various activities carried out by Quilaban involves a number of specific and legitimate purposes for processing your personal data, such as: 

 

  1. Contract and request management: execution of service agreements or supply contracts; 
  2. Service quality management: for analysis and improvement of services, including handling complaints, suggestions, and other communications; 
  3. Accounting, fiscal, and administrative management: management of clients, suppliers, administration, economics, and accounting; 
  4. Communication and marketing: management of contacts, customer management for service provision and/or product supply, customer support, marketing, online advertising; 
  5. Call recording: proof of the contractual relationship, quality monitoring; 
  6. CCTV recording and image capture: video surveillance for the safety of people and property; 
  7. Access control management: controlling access for the protection of people and property; 
  8. Human resources management: personnel selection and recruitment; 
  9. Management of electronic communications: website and mobile app usage management and retention of traffic/location data; 
  10. Litigation management: debt collection and recovery, providing information to judicial, administrative, supervisory, or regulatory authorities; 
  11. Compliance with legal and/or contractual obligations: data transfer to third parties, fraud prevention, and security. 

 

Legal grounds for personal data processing is 

In accordance with the principle of lawfulness as established in the applicable data protection laws, Quilaban will only process your personal data when there is a lawful basis for doing so, including: 

 

  1. Consent: when the data subject has given explicit consent for specific purposes; 
  2. Pre-contractual steps or performance of a contract: when the data is necessary for the performance of a contract for the provision of services and/or supply of products in which the data subject is a party or to carry out pre-contractual steps at their request; 
  3. Legitimate interest: when the processing is necessary for the legitimate interests of Quilaban, other controllers (e.g., other companies in the Augma Group), or third parties, provided that this processing does not override the data subject’s interests or fundamental rights and freedoms; 
  4. Compliance with legal obligations: when the processing is necessary for the fulfilment of a legal obligation to which Quilaban is subject.   

 

Retentions of personal data

Quilaban retains your personal data only for the time necessary to fulfil the specific purposes for which it was collected. However, Quilaban may be required to retain certain personal data for a longer period, taking into consideration factors such as: 

 

  1. Legal obligations to retain personal data for a specific period, in accordance with applicable laws; 
  2. Contractual obligations and/or Quilaban’s legitimate interests; 
  3. Statutory limitation periods under applicable law; 
  4. (Potential) litigation; and 
  5. Guidance issued by relevant data protection authorities. 

 

During the period of processing your personal data, Quilaban ensures that the data is processed in accordance with this Data Protection and Privacy Policy. Once your data is no longer necessary, Quilaban will securely erase it. 

 

Sharing of Personal Data

Your personal data may be shared with: 

 

  1. Subcontractors: Subcontractors: these companies are bound by a written contract with Quilaban and may only process your personal data for the specific purposes set out, and are not authorised to process it for any other purpose, whether for their own benefit or that of a third party; 
  2. Augma Group companies: under an intra-group data sharing agreement, who will comply with applicable data protection rules depending on the purposes of the processing carried out; 
  3. Third parties: in compliance with legal and/or contractual obligations, personal data may also be transmitted to judicial, administrative, supervisory, or regulatory authorities with whom Quilaban has partnerships, as well as entities that lawfully carry out data compilation activities, fraud prevention and detection actions, market research, or statistical studies. 

 

International transfers of personal data

If there is a need to transfer personal data outside the European Economic Area (EEA), we ensure that such transfers will be made in accordance with applicable laws, ensuring that the level of protection for personal data is equivalent to that required by European legislation. 

 

Rights of the data subjects 

As a data subject, you have the right to exercise several rights related to the protection of your personal data. These rights include: 

 

  1. Right to be informed: allowing you to obtain clear and understandable information on how Quilaban uses your personal data and your rights. 
  2. Right of access: allowing you to know which data is held by Quilaban and how it is being processed. 
  3. Right to rectification: enabling you to correct any inaccurate or incomplete data we may have about you; 
  4. Right to erasure (or “right to be forgotten”): allowing you to request that your personal data be deleted, provided that there are no valid grounds for Quilaban to continue using it or its use is unlawful. 
  5. Right to restrict processing: allowing you to block the future use of your data while Quilaban assesses a request for rectification or as an alternative to erasure. 
  6. Right to data portability: granting the right to receive the data you provided to us in a structured, commonly used, and machine-readable format, so that you can transfer it to another entity. 
  7. Right to object: to withdraw consent for processing carried out on the basis of consent. 
  8. Right to lodge a complaint: to file a complaint with the relevant supervisory authority, the National Data Protection Commission. 

 

You may exercise these rights at any time, in writing, by contacting us via email at dadospessoais@quilaban.pt or by post at Beloura Office Park – Edifício 11, Quinta da Beloura, 2710-693 Sintra. If you are dissatisfied with our use of your personal data or our response after exercising any of these rights, you may file a complaint with the National Commission for Data Protection. 

 

Data Protection Officer 

Quilaban has appointed a Data Protection Officer (DPO) who is responsible for overseeing data processing activities and ensuring legal compliance. 

You may contact the Quilaban Data Protection Officer at any time, in writing, for any issues related to data protection and privacy via email at dadospessoais@quilaban.pt or by post at Beloura Office Park – Edifício 11, Quinta da Beloura, 2710-693 Sintra. 

 

Data security 

Quilaban adopts various technical and organisational security measures to protect your personal data against loss, unauthorised disclosure, alteration, or access. However, since information transmitted over the internet is not completely secure, Quilaban cannot guarantee the security of your personal data when transmitted over open networks. 

 

Confidentiality 

Quilaban acknowledges that the information you provide may be confidential. Quilaban does not sell, rent, distribute, or otherwise commercially make personal data available to any third party, except in cases where sharing is necessary for the purposes outlined in this Data Protection and Privacy Policy. Quilaban ensures the confidentiality and integrity of your personal data and protects it in accordance with this Data Protection and Privacy Policy and all applicable laws. 

 

 Cookies 

Quilaban uses cookies to collect information about the use of its website. Whenever you use the website, Quilaban processes your personal data collected through cookies in accordance with our Cookie Policy. For more information on how we use cookies, we recommend reading the Cookie Policy and regularly checking it for the latest updates. 

 

Updates to this Data Protection and Privacy Policy  

Quilaban may update this Data Protection and Privacy Policy in accordance with legal or regulatory requirements or to adapt the policy to new legal directives. All relevant changes will be communicated and made available on the website. We recommend regularly checking this page to stay informed. Updates will be effective from the date of publication, always in compliance with legal requirements. 

Date of last update: 27/11/2024