Privacy Policy

Data protection and the security of your personal data are important to us and we implement appropriate technical and organisational measures to protect personal data that is subject to our access.
We, the Controller, (also referred to as “[Controller]”; “we”; “us”; or “our”), would like to inform you below about the type and extent of the processing of personal data when you visit and use our website.
This Policy also contains information about your data protection rights, including a right to object to some of the processing which Landbell carries out. More information about your rights, and how to exercise them, is set out in the “Your Rights” section.

1. Controller

Novo Verde – Sociedade Gestora de Resíduos de Embalagens
Centro Emp. Ribeira da Penha Longa
R. D. Dinis Bordalo Pinheiro N.º 467 B
2645-539 Alcabideche
info@novoverde.pt

2. Data we collect and process via this website, the purposes of processing and legal bases

Only by using our website
Your visit to our website will be logged. Initially, the following automatic logging data, which your browser transmits to us, is mainly recorded:
• the IP address currently used by your PC or router
• date and time of request [including Time zone difference to Greenwich Mean Time (GMT)]
• browser type, version and language
• operating system of your PC
• the pages you are viewing
• Access status/HTTP status code
• name and size of the requested file(s)
• and, if applicable, the URL of the referring web page.
This data is only collected for data security purposes, to improve our website and for error analysis. As we pursue our legitimate business interests when processing your personal data for these purposes, we rely on the basis of Art. 6 par. 1 lit f) GDPR for doing this.

If you are registering on our website
You can register on our website to use additional features on the site (e.g. for using our webportal as described above). We only use the data entered for the purpose of using the respective offer or service for which you have registered. The mandatory information requested during registration is marked with an asterisk under the data field and must be given in full. Otherwise, we will reject the registration. For important changes, such as the scope of the offer or for technical changes, we use the e-mail address specified during registration to inform you in this way. The processing of the data entered during registration takes place on the basis of Art. 6 par. 1 lit. f) GDPR, as the processing is necessary for pursuing our legitimate business interest in providing the additional services available for our registered users.

3. Cookies

We also use so-called cookies in our internet offer (which may also be provided by third parties). Cookies are small text files that are saved by your browser and stored on your computer. The use of cookies serves to make the website more user-friendly. For example, it is possible to recognise the user for the duration of the session without having to constantly enter a new user name and password. The cookies do not cause any damage to your computer and are generally deleted at the end of your session, unless they are so called permanent cookies.
To find out more about the different kinds of cookies we use, the legal bases we rely in such use and the different ways you can deactivate cookies, please refer to our Cookie Policy.

4. Recipients of personal data

Your personal data may be shared with other entities of the Landbell Group when insofar as answering your question or providing you the service you requested requires the involvement of other group entities. Except from the Landbell Group, we will only be passed on to third parties if it is necessary for the execution of a contract and/or its technical processing, which regarding the website, includes our suppliers in charge of processing your data for the dispatch of the newsletter and for the hosting and maintenance of our website. When we subcontract such activities, we make sure your data is managed in compliance with the GDPR rules and this includes, where information is transferred outside the EEA, and where this is to a stakeholder or vendor in a country that is not subject to an adequacy decision by the EU Commission, that data is adequately protected by EU Commission approved standard contractual clauses, an appropriate Privacy Shield certification or a vendor's Processor Binding Corporate Rules.

5. Your rights

According to Art. 15-21 GDPR you can assert the following rights with regard to the personal data processed by us if the conditions described there are met.

5.1 Right to access (Art. 15 GDPR). You have the right to be informed about the personal data concerning you that is processed by us and be provided with a copy of your personal data we hold about you.

5.2 Right to rectification (Art. 16 GDPR). You may request the rectification of inaccurate personal data, or to complete personal data when it is incomplete.

5.3 Right to erasure (Art. 17 GDPR). You may be entitled to ask for the deletion of personal data concerning you, in particular if one of the following reasons exists:
• Your personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
• You revoke your consent on which the processing of your data is based.
• You have asserted a right to object to the processing and there are no overriding legitimate grounds for the processing, or you asserted your right to object where your personal data is processed for direct marketing puprposes.
• Your data has been processed unlawfully.

However, the right to deletion does not exist if this conflicts with the legitimate interests of the responsible party. These could be e.g.:
• if personal data is required to assert, exercise or defend legal claims.
• if deletion is not possible due to storage obligations.

If data cannot be deleted, however, there may be a right to restrict processing (see below).

5.4 Right to restriction of processing (Art. 18 GDPR). You have the right to request us to restrict the processing of your personal data under following circumstances:
• you contest the accuracy of your personal data and we therefore verify the accuracy of your personal data for a period,
• the processing is unlawful and you oppose the erasure of your personal data and and instead request the restriction of their use,
• we no longer need the data, but you do need it to establish, exercise or defend legal claims,
• you have objected to the processing of your data pursuant to Art. 21 par. 1 GDPR and it is not yet clear whether our legitimate grounds overide those of yours.

5.5 Right to data portability (Art. 20 GDPR). You have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format and you have the right to transmit this data to another controller without our interference, provided that the processing is based on your consent (e.g. Art. 6 par. 1 lit a) GDPR)) or a contract (Art. 6 par. 1 lit b) GDPR) and the processing is carried out by us with the help of automated means.

5.6 Right to object (Art. 21 GDPR). You have the right to object at any time to the processing of personal data relating to you on the basis of Art. 6 par. 1 e) or f) GDPR for reasons arising from his particular situation, including profiling based on those provisions. Where your personal data is processed for direct marketing purposes without your consent and based on our legitimate interests, you have the absolute right to object at any time to processing of personal data concerning you for such marketing, which includes profiling to the extent that it is related to such direct marketing (Art. 21 par. 2 GDPR). The respective personal data will no longer be processed for direct marketing purposes then.

5.7 Right to revoke consent (Art. 7 par. 3 GDPR). If you have consented to the processing of your personal data by us, you have the right to revoke your consent at any time. The legality of processing your personal data before revocation remains unaffected. We may further process such data pursuant to another applicable legal basis, e.g. for the fulfilment of our legal obligations.

5.8 Right to lodge a complaint with a supervisory authority (Art. 77 GDPR). If you have not received an answer after a reasonable period of time from the DPO, or have received an answer which is incomplete or unsatisfactory in your view, you shall have the right to lodge a complaint with a supervisory authority, in accordance with Art. 77 GDPR, if you onsider that the processing of personal data relating to you infringes the GDPR. Such complaint may be lodged in particular with the supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

Questions and how to assert your rights. If you have any questions regarding data protection, or want to exercise one of your rights or to lodge a complaint we will be happy to assist you: dataprivacy@landbellgroup.com

6. Standard periods for the deletion of data

6.1 If a legal regulation for the retention of data does not exist, the data will be deleted or destroyed if they are no longer necessary to achieve the above described purposes of data processings. Different periods apply to the storage of personal data, for instance due to tax law or according to some commercial law regulations. Finally, the storage period can also be based on the statutory limitation periods according to the respective applicable national laws.

6.2 The data collected during registration will be stored by us as long as you are registered on our website and will subsequently be deleted 3 years after this, beginning with end of the respective year.

6.3 Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data indefinitely so that we can respect your request in future.

6.4 Where we process personal data for site security purposes, we retain it for 12 months.

6.5 Where we process personal data in connection with performing a contract, we keep the data as required according to the statutory retention period.

7. Changes to this Data Privacy Statement

We reserve the right to modify and amend this Privacy Policy from time to time to reflect current circumstances. We therefore recommend that you review this Privacy Policy / Data Privacy Statement regularly to keep up to date. Where required by law, we may also inform you about modifications/amendments of this Privacy Policy. This Data Privacy Statement was last updated on 30 April, 2020.