Privacy Policy and Cookies

 

About the INDASA Group and this Privacy Policy

 

INDASA - INDÚSTRIA ABRASIVOS S.A. (hereinafter “INDASA”) is a company dedicated to the production and trade of flexible abrasives, repair and maintenance of machinery and equipment, wholesale of other machinery, equipment and parts, wholesale of chemical products and non-specialized wholesale trade.

 

INDASA assures the managing of its website through the contact privacy@indasa.pt. Thus, INDASA is committed to protect any personal information you give to us throughout our “https://www.indasa-abrasives.com” website, by adopting specific safeguards appropriate to ensure the accuracy, integrity, and confidentiality of your personal data, as well as any other rights that may assist you, acting in compliance with data protection law and regulations. 

 

In compliance with transparency and loyalty principles, we reinforce our Privacy Policy, in which we describe how we process your personal data regarding our website and so in compliance with GDPR and with all applicable privacy and data protection laws, guaranteeing that the processing of personal data is licit, loyal, transparent, and limited to its purposes and keeping the trust of our customers, business partners and others who share their personal information with us. 

 

By using our website and our services, you acknowledge and understand that your personal information will be processed in Portugal.

 

This Policy applies to all Internet sites operated by or on behalf of INDASA and includes INDASA entities worldwide and it also applies to personal information INDASA may otherwise collect: (i) through our products and services; (ii) when you interact with us by means other than a INDASA Internet Site or App, for example, in person, by telephone, or at a trade show or training; and (iii) from our customers, distributors, suppliers, vendors, and other business partners (collectively “Business Partners”). 

 

Data controller and contact information:

The controller for personal data collected under this Privacy Policy is the relevant INDASA entity in your country, and, as applicable, INDASA headquarters, located at Zona Industrial de Aveiro, Lote 46, Taboeira, 3800-055 Aveiro, Portugal.

You may contact INDASA about any question on Privacy Policy through the following contacts:

- indasa@indasa.pt;

- privacy@indasa.pt;

- Zona Industrial de Aveiro, Lote 46, Taboeira, 3800-055 Aveiro, Portugal [working days, from 9 am to 12.30 pm and from 2 pm to 6 pm (GMT)].

 

When how and for what purposes we collect your data: 

INDASA collects and processes your personal information data lawfully according to the following purposes and the following legal basis:

 

Customer services.

INDASA uses Client’s Personal Data to give support, including to answer inquiries. This usually requires certain contact information and other personal information on the question’s reason (for ex., order status, technical issues, doubts/complains on products, general questions, etc.).

Lawful purposes for this processing:

Compliance with contractual obligations arising for the performance of a contract;

INDASA's legitimate interests.

 

Contests, marketing, and other promotions.

With the client’s consent (when needed), INDASA uses client’s Personal Data to give him information on goods and services (for example, marketing communications or campaigns and promotions). This can be done through e-mail, ads, SMS, calls, and postal correspondence, to the extent permitted by applicable legislation. Some INDASA promotions and campaigns are conducted on third party’s websites and/or social networks. This use of client Personal Data is voluntary, which means that the client may object or withdraw his consent every time he wishes to.

Lawful purposes for this processing:

Client’s Consent;

INDASA legitimate interests.

 

Social Network Services 

INDASA uses the client's Personal Data when he interacts with third-party social networking tools, such as the "Like" functions, to serve the client with ads and interact with him through third-party social networks. You can learn more about how these tools work, what customer profile data INDASA obtains, and choose to deny consent by reviewing the privacy policies of relevant social networks.

 

INDASA’s website may contain links to other Websites and incorporate content and services from other providers (e.g., YouTube, Facebook, Google, Instagram) who may use cookies and active components. INDASA has no influence over how your data is processed on these websites or their compliance with provisions on data protection. Please note any data protection information they provide. Please note that the option provided by INDASA to configure settings for cookies used has no effect on cookies and active components from other providers (e.g., YouTube, Facebook, Google, Twitter). Please refer to the respective provider’s websites for information about how your data is handled. INDASA assumes no responsibility for the processing of this kind of personal data by third parties.

 

Lawful purposes for this processing:

Client’s Consent

INDASA legitimate interests to ascertain which INDASA services and products offers may interest to the customers.

 

Partner companies using Personal Data for their own marketing purposes.

INDASA does not license or sell any personal information to third-party companies for its own marketing purposes, except in situations where the customer has given consent. The identity of these third parties will be disclosed at the time the client's authorization is requested.

 

The processing of personal data is necessary to carry out the above operations through our website: “https://www.indasa-abrasives.com”.

 

What Personal Data is collected:

INDASA collects and processes the personal data made available by the user and necessary for the provision of services and/or the supply of products. We may collect some data using cookies.

The data we collect depends on the context of your interactions with INDASA and may include the following:

 

Name and contact details - We collect your first name and last name, e-mail address, address, telephone number and other similar contact information.

Location data - We collect data on your inaccurate location which includes a location derived from your IP address.

 

How we use Personal Data:

INDASA uses the collected personal data to manage its activity and to provide you with services and/or products. The use of the data is also done for the improvement and personalization of your experience.

We may also use the data to communicate with you for product and service information, or to conduct satisfaction surveys.

 

Retention of Your Personal Information:

The personal data shall be retained only for the period strictly necessary for the

i. the provision of the service or the supply of products,

ii. compliance with the legal obligations to which INDASA is obliged,

iii. the pursuit of the purposes of collection or treatment of the operations identified above,

iv. allow the exercise of the rights of the holders (Clients and Users) and the fulfilment of the corresponding obligations.

After this period, personal data will be deleted by INDASA.

 

What are your privacy rights?

You have certain rights in relation to the personal data we hold about you, which we detail below. Some of these only apply in certain circumstances as set out in more detail below. We also set out how to exercise those rights. Please note that we will require you to verify your identity before responding to any requests to exercise your rights and that can include asking a set of security questions to ensure it is you. When you have appointed someone else to do the request on your behalf, that person and/or organization needs to show a valid power of attorney issued by you. We must respond to a request by you to exercise those rights without undue delay and at least within one month (although this may be extended by a further two months in certain circumstances). To exercise any of your rights, please contact us any time through following channels:

- indasa@indasa.pt;

- privacy@indasa.pt;

- Zona Industrial de Aveiro, Lote 46, Taboeira, 3800-055 Aveiro, Portugal [working days, from 9 am to 12.30 pm and from 2 pm to 6 pm (GMT)];

- Customer services: Tel.: +(351) 234 303 600; Fax: +(351) 234 303 605;

- P.O. Box 3005, 3801-101 Aveiro, Portugal.

 

Access: you have the right to know whether we process personal data about you, and if we do, to access data we hold about you and certain information about how we use it and who we share it with (including the categories of personal data we share with businesses for their direct marketing uses and the names and addresses of those businesses).

You can also request a copy of your information. If you require more than one copy of the data we hold about you, we may charge a reasonable administration fee.

We may not provide you with certain personal data if providing it would interfere with another’s rights (e.g., where providing the personal data we hold about you would reveal information about another person) or where another exemption applies.

 

Portability: you have the right to receive a subset of the personal data we collect from you in a structured, commonly used, and machine-readable format and a right to request that we transfer such personal data to another party. The relevant subset of personal data is data that you provide us with your consent or for the purposes of performing our contract with you. If you wish for us to transfer the personal data to another party, please ensure you detail that party and note that we can only do so where it is technically feasible. We are not responsible for the security of the personal data or it’s processing once received by the third party. We also may not provide you with certain data if providing it would interfere with another’s rights (e.g., where providing the personal data we hold about you would reveal information about another person or our trade secrets or intellectual property).

 

Rectification: you have the right to correct any personal data held about you that is inaccurate. You can edit your personal information by changing your newsletter preferences of our marketing communications. You can also request the correction by emailing us. Please note that in some cases we can ask you to explain in detail why you believe the personal data we hold about you to be inaccurate or incomplete so that we can assess whether a correction is required. Please note that whilst we assess whether the personal data we hold about you is inaccurate or incomplete, you may exercise your right to restrict our processing of the applicable data.

 

Erasure: you may request that we erase the personal data we hold about you in certain circumstances. Please scroll down to know what those are:

- You believe that it is no longer necessary for us to hold the personal data we hold about you.

- We are processing the personal data we hold about you based on your consent, and you wish to withdraw your consent and there is no other ground under which we can process the personal data.

- We are processing the personal data we hold about you based on our legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so that we can assess whether there is an overriding interest for us to retain such personal data.

- You no longer wish us to use the personal data we hold about you to send you promotions and special offers.

- You believe the personal data we hold about you is being unlawfully processed by us.

- Also note that you may exercise your right to restrict our processing of the data whilst we consider your request as described below.

 

Please provide as much detail as possible on your reasons for the request to assist us in determining whether you have a valid basis for erasure. Please note that we may retain the personal data if there are valid grounds under law for us to do so (e.g., for the defence of legal claims or freedom of expression) but we will let you know if that is the case.

Where you have requested that we erase data that we have made public and there are grounds for erasure, we will use reasonable steps to try to tell others that are displaying the data or providing links to the data to erase the data too.

 

Restriction of Processing to Storage Only. You have a right to require us to stop processing the personal data we hold about you other than for storage purposes in certain circumstances. Please note that if we stop processing the personal data, we may use it again if there are valid grounds under data protection law for us to do so (e.g., for the defence of legal claims or for another’s protection).

 

Listed below are the cases where you may request, we stop processing and only store the personal data we hold about you:

- You believe the personal data is not accurate for the period it takes for us to verify your claim.

- You wish to erase the personal data as the processing we are doing is unlawful, but you want us to retain the personal data for storage only and stop processing it.

- We wish to erase the personal data as it is no longer necessary for our purposes, but you require it to be stored for the establishment, exercise, or defence of legal claims.

- You have objected to us processing personal data we hold about you based on our legitimate interest and you wish us to stop processing the personal data whilst we determine whether there is an overriding interest in us retaining such personal data.

 

Objection: at any time, you have the right to object to our processing of data about you in order to send you promotions and special offers, including where we build profiles for such purposes, and we will stop processing the data for that purpose. 

You also have the right to object to our processing of data about you and we will consider your request in other circumstances as detailed below:

 

We are processing the data we hold about you based on our or a third party’s legitimate interest and you object to such processing. Please provide us with detail as to your reasoning so that we can assess whether there is a compelling overriding interest in us continuing to process such data or if we need to process it in relation to legal claims. Also note that you may exercise your right to request that we stop processing the data whilst we make the assessment on an overriding interest.

 

Withdrawal of Consent: You can withdraw your consent at any time by changing your newsletter preferences opting out of our marketing communications.

 

You also have the right to submit a complaint to the supervisory authority responsible for the enforcement of personal data protection laws and regulations in Portugal CNPD (Comissão Nacional de Protecção de Dados), as well as other supervisory authorities that may be competent in data protection and privacy regulations regarding the subject’s location, if you believe that your rights regarding your personal data have been infringed.

 

In addition, INDASA has a Privacy Commission whose function it is to control the compliance of this policy with the General Data Protection Regulation. You can contact INDASA's Privacy Commission on any matter related to this privacy policy, by sending an e-mail to privacy@indasa.pt, indicating the subject "Privacy of personal data".

 

If you are resident in other location rather than EU, you can contact us concerning your privacy rights or any other question about this policy or our privacy statements:

 

For Brazil residents please contact us at:

- vendas.br@indasabrasil.com.br;

- privacy.br@indasabrasil.com.br;

- Rua Sérgio Jungblut Dieterich, 930/940, Bairro São João, Porto Alegre – RS, CEP 91060-410, Brasil [working days, from 8am to 6pm (GMT-3)].

 

For United Kingdom residents please contact us at:

- office@indasa.co.uk;

- privacyuk@indasa.co.uk;

- Viking Works, Greenstead Road, Colchester, Essex, CO1 2ST, United Kingdom [working days, from 8:45am to 4pm (GMT)].

 

For United States residents please contact us at:

- salesusa@indasausa.com;

- privacyusa@indasausa.com;

- 23 Madison Road, Fairfield NJ 07004, USA [working days, from 8:30am to 5pm (EST)].

 

Security:

Keeping you and your personal information secure is very important to us.

INDASA maintains reasonable safeguards to protect the confidentiality, security, and integrity of your personal information. Although we use security measures to help protect your personal information against unauthorized disclosure, misuse, or alteration, as is the case with all computer networks linked to the Internet, we cannot guarantee the security of information provided over the Internet and will not be responsible for breaches of security beyond our reasonable control.

In accordance with the law, INDASA has taken the necessary measures to ensure that your Personal Information is protected against access or use by unauthorized third parties.

INDASA does not sell or rent to third parties any personal data sent by Users/Clients.

 

Your personal information will generally be stored in INDASA databases or databases maintained by our service providers. Many of these databases are stored on servers located in Portugal.

INDASA, as stated on “Transfers of your personal data” takes appropriate measures, by contract or otherwise, to provide adequate protection for personal information that is disclosed to a third party or transferred to another country, including transfers within INDASA.

 

Under what circumstances we share data to other entities (third parties and processors):

INDASA may share your personal information with other one of our Group Companies outside the EEA and third parties to provide certain services including those in different countries. When we do so, these other INDASA entities will use your information in a manner consistent with this Policy, any applicable Specific Privacy Statements, and all applicable privacy and data protection laws.

 

In some cases, INDASA may also share your personal information with third parties who partner with us to provide products and services to our customers, such as distributors. If so, we will require our Business Partners to use that information in a manner consistent with this Policy, any applicable Specific Privacy Statements, and all applicable privacy and data protection laws. Standard Contractual Clauses will be defined with these entities, issued, and approved by the European Commission, to ensure the necessary compliance with the General Regulation on Data Protection.

 

In any case, INDASA remains responsible for the personal data that you make available to us.

 

Personal information from children:

INDASA will never knowingly collect any personal information from children under the age of 13. If we obtain actual knowledge that we have collected personal information from a child under the age of 13, that information will be immediately removed from any access. Because we do not collect such information, we have no such information to use or to disclose to third parties. We have designed this policy to comply with the Portuguese privacy Act / GDPR and other Data Protection Legislation applicable.

 

Transfers of your personal data:

By using our website and our services, you acknowledge and understand that your personal information will be processed in Portugal.

To provide our website and our services, in accordance with the purposes set out above, we may transfer and store the personal information that we collect from you to a destination outside the European Economic Area (“EEA”), mostly to the United States, the United Kingdom, Brazil either to one of our Group Companies, to one of our Partners or to one of the third parties with which we work with.

When transferring personal information to one of our Group Companies outside the EEA, which may include the USA, United Kingdom, and Brazil, we rely on Adequacy Decisions issued by the European Commission in relation to data transfers made to the US and UK and, with the Commission's general contractual clauses, for the transfer of personal data to Brazil, (i.e., the standard contractual clauses) in accordance with Commission Implementing Decision (EU) 2021/914, of 4 June 2021.

We transfer the personal information to one of our Partners outside the EEA, to the extent such transfer is needed to fulfil the contract between you and our Group companies.

When transferring personal information to one of our third-party services’ providers set out above, we rely on different adequacy measures, as set out below:

- Adequacy Decisions: Adequacy Decision relating to the EU-United States of America (USA) Data Privacy Framework and the European Commission Implementing Decision under Directive (EU) 2016/680 on the adequacy of the level of protection of personal data in the United Kingdom;

- Model Clauses: we rely in the Commission’s model contracts for the transfer of personal data to third countries (i.e., the standard contractual clauses) pursuant to Commission Implementing Decision (EU) 2021/914 of 4 June 2021when transferring your information to Brazil service providers. 

- Binding corporate rules:

INDASA is working on a new BCR model. 

- Derogations for specific situations:

In the absence of an adequacy decision pursuant or of appropriate safeguards, including binding corporate rules, we may apply specific derogations pursuant to Article 49 GDPR.

 

Also in this aspect, INDASA is present in several Social Networks, having a limited influence on the data processing carried out by the operators of the social networks (for example, management of members and management of general information). In situations where we have no influence, we try to ensure, as far as possible, that social media operators act in accordance with the privacy and data protection requirements required by the GDPR. However, in many cases, we have no influence on this data processing carried out by the operators of social networks and we do not have clear knowledge of the data being processed on certain occasions.

 

Social network operators manage the entire IT infrastructure of the service, applying their own privacy and data protection rules and, in addition, maintain their own relationships with users (insofar as these are registered users on the social network). Furthermore, operators are fully responsible for all issues related to user profile data to which INDASA does not have access. For more information, please consult:

 

- Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA; https://www.facebook.com/privacy/policy/. 

- Instagram, provided by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, https://help.instagram.com/155833707900388.

- LinkedIn to all countries in the European Union (EU), European Economic Area (EEA), and Switzerland: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland, and to all other countries: LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, https://www.linkedin.com/legal/privacy-policy. 

- Youtube to all countries in the European Union (EU), European Economic Area (EEA), and Switzerland: Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, and to all other countries: Google LLC, Googleplex, Mountain View, California, USA, https://www.youtube.com/howyoutubeworks/our-commitments/protecting-user-data/.

 

How we use “Cookies”

To know more about cookies and how INDASA uses them in its websites, accessing our Cookies Policy.

 

How you can become aware of any changes to the Privacy Policy

INDASA reserves the right to, at any time, make any material changes and update or modify this Privacy Policy and any specific Privacy Statements without prior notice. Any modifications will apply only to the personal information we collect after the posting.

 

If you have any questions, concerns about this Privacy Policy, or any complains please contact us:

- By emailing INDASA's Privacy Commission on any matter related to this privacy policy, by sending an e-mail to privacy@indasa.pt, indicating the subject "Privacy of personal data" or any other contacts on section “what are your privacy rights?” depending on where you are resident in:

 

For Brazil residents please contact us at:

- vendas.br@indasabrasil.com.br;

- privacy.br@indasabrasil.com.br;

- Rua Sérgio Jungblut Dieterich, 930/940, Bairro São João, Porto Alegre – RS, CEP 91060-410, Brasil [working days, from 8am to 6pm GMT-3)].

 

For United Kingdom residents please contact us at:

- office@indasa.co.uk;

- privacyuk@indasa.co.uk;

- Viking Works, Greenstead Road, Colchester, Essex, CO1 2ST, United Kingdom [working days, from 8:45am to 4pm GMT)].

 

 

For United States residents please contact us at:

- salesusa@indasausa.com;

- privacyusa@indasausa.com;

- 23 Madison Road, Fairfield NJ 07004, USA [working days, from 8:30am to 5pm (EST)].

 

Last updated: June 3rd, 2024.