Privacy Policy

We are committed to protecting the privacy and personal data of our website’s clients and users, and we have therefore established this policy and the practices described here. In this policy we explain how your personal data are collected and processed. We therefore encourage you to read it.

  1. IDENTIFICATION OF THE DATA CONTROLLER.
    • Entity: Confrasilvas – Construções, S.A. (referred to below as “Confrasilvas”)
    • Corporate registration number (NIPC): 503001155
    • Registered office: Av. D. João II, nº 42, Piso 4 Esc. 4.04, 1990-095 Lisboa
    • Telephone:  + 351 21 934 71 10
    • E-mail: privacidade@confrasilvas.com
  2. WHAT DOES THIS POLICY COVER?
    1. This Privacy Policy explains how we collect and process the personal data required to provide the services available through this website, and describes the practices adopted for that purpose.
  3. WHAT ARE PERSONAL DATA?
    1. Personal data means any information that relates to a person and identifies that person, or makes them identifiable, regardless of the nature and medium of that information, including the sound and image of that person.
    2. “Identifiable” means that a person can be identified, directly or indirectly, in particular by reference to an identification number or to other factors specific to their physical, physiological, mental, economic, cultural or social identity.
  4. HOW WILL WE USE YOUR PERSONAL DATA?
    1. The personal data processing operations we carry out are essential to your satisfaction and to Confrasilvas’s business. They are conducted in accordance with the applicable legislation and in line with best practice.
    2. Your personal data will not be reused for purposes that have not been identified in advance or that bear no relation to the purposes for which they were initially collected.
  5. WHAT ARE THE PURPOSES, LEGAL BASES AND RETENTION PERIODS FOR THE DATA COLLECTED?
    1. The personal data we process have specific legal bases, depending on the purposes for which they are processed, and will be retained for as long as is necessary for those purposes, as set out in this Privacy Policy.
    2. We collect only the personal data that are necessary and appropriate for the purposes indicated.
    3. The table below sets out the processing purposes and the data collected for them, the respective legal bases and the data retention periods or criteria:
      PURPOSE LEGAL BASIS DATA COLLECTED RETENTION PERIOD
      To assess and process your application to work with Confrasilvas. Pre-contractual steps Name; Date of birth; Nationality; Email; Telephone; Data contained in your CV. 1 year 
      To review and respond to your messages, requests for information and contact requests. Consent for that specific purpose. Name; Email; Data contained in the body of the message. For 1 year, or for the period considered necessary to fulfil this purpose, if longer than 1 year.
      For website management operations. Consent for that specific purpose (cookies);
      Legitimate interests pursued by Confrasilvas      		 Cookies; IP address See the Cookie Policy.
      For fraud prevention and information systems security. Consent for that specific purpose (cookies);
      ILegitimate interests pursued by Confrasilvas      		 Cookies; IP address See the Cookie Policy.
    4. Where the law lays down a specific or mandatory period, that will be the data retention period. In all other cases, personal data will be retained for no longer than the periods indicated above, which Confrasilvas considers sufficient to fulfil the purposes concerned.
    5. Once the retention period has expired, all the personal data collected will be deleted.
  6. COMMERCIAL AND/OR PROMOTIONAL COMMUNICATIONS.
    1. Where Confrasilvas has obtained from its clients, in accordance with data protection legislation, their email address in the context of the sale of a product or service, it may use that address for the direct marketing of its own similar products or services. However, this is subject to Confrasilvas clearly and explicitly giving those clients the opportunity to object, free of charge and in an easy manner, on the occasion of each message, to the sending of such communications, for example through the unsubscribe option in the footer of the emails.
  7. HOW DO WE COLLECT YOUR PERSONAL DATA?
    1. We will collect your personal data through the forms on this website, but also through the website itself and its interaction with your device, and through the email messages you send us.
    2. Your personal data are collected through your device in the following ways:
      1. Through your browser;
      2. Through cookies;
      3. Through pixel tags and other similar technologies;
      4. IP address;
      5. Through your User data.
    3. Confrasilvas undertakes to process your data lawfully and in accordance with applicable legislation.
    4. Confrasilvas will not sell, rent or share your personal data with third parties, except in the cases clearly identified in this Privacy Policy (see Section 12 to find out how).
    5. Confrasilvas’s services are not intended for minors, and we do not knowingly process minors’ personal data.
  8. WHAT ARE COOKIES? 
    1. Cookies are small files that help to identify your browser and can store information such as User settings and preferences. 
    2. Confrasilvas will store cookies on your device to personalise your browsing and make it as easy as possible, but also for troubleshooting, statistics, quality assurance and system security monitoring.
    3. Except for cookies specifically necessary for the performance of the website, other cookies will only be stored with the User’s acceptance and consent. That consent may be withdrawn at any time using the relevant browser settings.
    4. To find out more about the cookies we use, please see our Cookie Policy.
  9. HOW DO WE PROTECT YOUR PERSONAL DATA?
    1. Your personal data are kept secure by a range of technical and organisational security measures. These ensure that the data can be accessed only by those Employees who need to do so, on a need-to-know basis and in accordance with the rules established for that purpose.
    2. To protect your personal data, we use only data centre providers that offer us appropriate and documented security measures. These include assurances that your personal data are stored on servers kept in controlled environments with restricted access.
    3. Although we take the care and precautions, we consider appropriate to protect the personal data that you provide to us and that we collect, you should be aware that no security system is impenetrable.
  10. WHAT ARE YOUR RIGHTS?
    1. Before we explain how you can exercise your rights, please note that the law grants you the following rights:
      1. Access: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, the right to access your personal data;
      2. Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have your incomplete personal data completed;
      3. Erasure: the right to obtain the erasure of your personal data where one of the grounds listed in the legislation applies, in particular where:
        1. The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
        2. You withdraw the consent on which the processing of the data is based and there is no other legal ground for the processing;
        3. You object to the processing and there are no overriding legitimate grounds for the processing;
        4. The personal data have been unlawfully processed;
        5. The personal data have to be erased for compliance with a legal obligation;
        6. The personal data have been collected in relation to the offer of information society services.
      4. Restriction of processing: the right to obtain the restriction of processing where one of the situations listed in the legislation applies, in particular where:
        1. You contest the accuracy of the personal data;
        2. The processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
        3. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
        4. The data subject has objected to processing carried out by means of automated individual decision-making.
      5. Objection: the right to object at any time to the processing of personal data concerning you;
      6. Portability: the right to receive the personal data concerning you in a structured, commonly used and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where the processing is based on consent or on a contract, or where it is carried out by automated means.
    2. You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt). 
  11. HOW CAN YOU EXERCISE YOUR RIGHTS?
    1. By writing to us at the following addresses:
      1. By e-mail: privacidade@confrasilvas.com  
      2. By post: Av. D. João II, nº 42, Piso 4 Esc. 4.04, 1990-095 Lisboa 
    2. If you ask us to delete some or all of your personal data, some of the services you have requested may not be provided to you. Confrasilvas will retain only the personal data necessary to comply with the legal obligations to which it is subject.
  12. WHEN DO WE DISCLOSE DATA TO THIRD PARTIES?
    1. Confrasilvas may use third parties to provide certain services, such as maintenance, technical support and marketing, and they may have access to some of the personal data, in particular the data necessary for the contractually agreed purposes.
    2. Confrasilvas ensures that the entities with access to the data are reliable and offer robust protection safeguards. No data are ever transmitted to them beyond what is necessary to provide the service contracted for, and Confrasilvas nevertheless remains the controller of the personal data made available.
    3. Confrasilvas may also disclose your data to the following entities:
      1. Companies within the group of companies to which Confrasilvas belongs and with which it has commercial partnerships to create and offer benefits; or
      2. Other partners outside its group of companies (with your prior authorisation).
    4. Confrasilvas may also transmit data to third parties in the context of investigations, inquiries and judicial and/or administrative proceedings, or proceedings of a similar nature, provided that it is duly required to do so by a court order.
  13. THIRD-PARTY WEBSITES. 
    1. This website may contain links to other websites which may collect and process your personal data; that processing is the sole responsibility of the owners of those websites, and Confrasilvas accepts no liability for their policies and/or practices. 
    2. Such third parties include LinkedIn, Instagram and Facebook, accessed via the buttons on this website.
  14. TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION.. 
    1. We will process your data within the European Economic Area (EEA).
    2. Should data be transferred to third countries outside the European Economic Area, Confrasilvas will use its best endeavours to put in place appropriate safeguards so that such transfers are made in accordance with the applicable legislation.
  15. MINORS.
    1. This website is not intended for anyone under the age of 18, and we therefore ask them not to provide us with personal data through the website, the app, social networks and social media, or emails.
  16. SPECIAL CATEGORIES OF PERSONAL DATA.
    1. Confrasilvas would ask you not to send us or disclose to us any special categories of personal data, that is, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or data concerning a natural person’s sex life or sexual orientation.
    2. If you nevertheless send us or disclose to us such categories of personal data, they will be erased immediately.
  17. CHANGES TO THE PRIVACY POLICY.
    1. Confrasilvas reserves the right to adjust or amend this Privacy Policy at any time, and any such changes will be made public.
  18. OUR CONTACT DETAILS.
    1. If you have any questions about this Privacy Policy, please write to us at privacidade@confrasilvas.com. 

Lisbon, 31 December 2025