Legal information
Durcosa, Lda. (hereinafter «Durcosa») is committed to protecting and ensuring the security of its customers’ information and privacy. This policy sets out the general privacy rules and the terms for processing the data we collect, in strict compliance with applicable law, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 («General Data Protection Regulation» or «GDPR»).
This Privacy Policy applies to all personal information collected and stored by Durcosa in paper and/or digital formats.
Personal data voluntarily provided by its data subject, the processing of which is a contractual and/or legal obligation of Durcosa, is treated confidentially by employees or processors duly authorised for that purpose, who must follow Durcosa’s specific instructions.
Your data may be collected directly or by telephone when you make a request for information or a service; through the opening of a customer record, with a case number identifying that record; or when you visit or use one of the contact forms available on our website to request information, quotations or services.
The personal data we collect includes name, address, town/city, postal code, tax number, email address, contact telephone or mobile number, and other supplementary information not classified as personal.
While browsing the website, whenever identification and collection of personal data is required, the user must authorise collection through authorisation mechanisms that may vary according to the case, but will be clear in purpose and intuitive to use. For example, in a contact form, the user must tick the box authorising the collection and processing of the personal data entered in the form and subsequent contact by Durcosa. Without authorising data processing, you will not be able to send your message or contact Durcosa through the website.
Once authorised, processing will be carried out in accordance with this Privacy Policy. Authorisation presupposes that this policy and the website Terms and Conditions have been read and understood.
Under Article 6(1)(b), (c), (d) and (f) of the GDPR, processing is necessary for the performance of a service to which the data subject is party, for pre-contractual steps at the request of the data subject, for compliance with legal obligations to which Durcosa is subject, for the protection of the data subject’s vital interests, or for the purposes of Durcosa’s legitimate interests.
For processing carried out to comply with legal obligations — in most cases, communicating data to external entities — the lawful basis is the need to process the data so that the controller can fulfil those legal obligations.
Durcosa collects your data for the following purposes:
Durcosa will implement the necessary and appropriate measures, in light of applicable law, to ensure the protection of personal data that is disclosed. It will strictly comply with legal provisions and the requirements applicable to such disclosures, including by informing customers.
Where Durcosa discloses personal data to third parties, it will establish clear contractual rules for the processing of personal data with its processors and require them to adopt appropriate technical and organisational measures to protect your personal data. Data may be provided to judicial or administrative authorities in compliance with legal obligations and communicated to public and private bodies related to Durcosa’s activity.
Depending on the purpose for which they were collected, data may be provided to the following categories of recipients:
As a rule, the information collected will not be transferred to third countries. If data is transferred to countries outside the European Union, priority will be given to countries covered by an adequacy decision issued by the European Union under Article 45 of the GDPR.
Durcosa will take the necessary measures to ensure the privacy and security of your personal data under Article 46 of the GDPR and to use it solely for the purposes for which it was collected.
Your personal data is retained by Durcosa for as long as the relationship between the entity and the respective data subjects remains in force, for the statutory retention period, or for as long as the purpose for which it was collected remains. It is retained in a way that allows data subjects to be identified until those relationships or obligations have definitively ended, and will be destroyed at the end of the statutory retention period.
The length of time for which data is stored and retained varies according to the purpose for which the information is used. However, legal requirements may require data to be retained for a specific period.
Durcosa is committed to ensuring the confidentiality, protection and security of its customers’ personal data by implementing appropriate technical and organisational measures to protect it against any form of improper or unlawful processing and against accidental loss or destruction.
For this purpose, procedures have been established to prevent unauthorised access, accidental loss and/or destruction of personal data. Durcosa undertakes to comply with legislation on the protection of customers’ personal data, process this data only for the purposes for which it was collected, and ensure that it is processed with adequate levels of security and confidentiality.
Access to personal data is limited to people who need to know it in the exercise of their duties, strictly to the extent necessary to pursue the processing purposes. Situations in which administrative staff may access data and other special categories of data include processing for invoicing, provision of services, or management of requests for information or complaints.
Durcosa is not responsible for data that users make available on social media. Use of Durcosa’s social media may involve transmitting data to the social-media service providers, which may be established outside the European Union or the European Economic Area.
Data is stored electronically on a server maintained and controlled by Durcosa, located in Portugal, and with cloud service providers established in the European Union. Infrastructure and data-access security are continuously monitored.
Access is restricted and protected by various access-management and encryption tools, so that unauthorised third parties cannot access the data. The risk of loss or destruction is thereby reduced, but not eliminated; unlawful access to data always remains possible. In that event, containment measures will be implemented.
Pine Sun Park uses strictly necessary cookies for the operation of the website, form security and storage of the user’s consent choice. These cookies do not require prior consent.
This website does not use advertising, marketing or analytics cookies. External content — currently Google Maps on the contact page — is loaded only after the relevant consent has been given.
When Google Maps is loaded, Google may receive technical data such as the IP address and device information under its own privacy policy. Durcosa does not sell personal data or disclose it to third parties without a legal basis or consent, where applicable.
The preference is retained for 12 months through the pinesunpark_cookie_consent cookie. You can amend or withdraw your consent at any time through “Cookie settings” in the website footer or through your browser settings.
The data subject has the following rights:
Each entity involved in processing your data is required to comply with applicable data-protection legislation, in particular as regards the security and confidentiality of processing. Personal-data controllers and persons who become aware of such data in the exercise of their duties are subject to professional secrecy under the law.
Durcosa reserves the right to make changes or updates to this Privacy Policy at any time. Such changes will be duly published on our website.
If you have any questions or wish, at any time, to cease being part of the Durcosa database, you may exercise that right using the following contact details: