Privacy Policy

Privacy and Security Policy

Introduction
ICEL - Indústria de Cutelarias da Estremadura, S.A. (hereinafter ICEL) is a company which activity consists exclusively in the trade of kitchen utensils for the domestic and professional segment of the ICEL brand.
Our products are sold in our shops and online shop, the latter through the website www.icel.pt, owned by ICEL.
In order to make your purchases in our shops and in our online shop, we will need to collect some personal data from our Customers and/or users of our website www.icel.pt to fulfil certain specific purposes described in this Privacy and Security Policy.

Scope of application
This Privacy and Security Policy applies to all Personal Data processed directly or indirectly by ICEL, regardless of how they are collected and/or shared.
Within the scope of the processing of Personal Data, ICEL may define, specifically, sectorial and special privacy and security policies that improve, develop or specify certain aspects related to the type of personal data shared and processing carried out, for the purposes indicated or new purposes that may be developed or promoted.
Such sectorial Privacy and Security Policies will be made known to the Data Subjects and Customers of ICEL through the means previously agreed and provided by law.
The following entity is responsible for the Processing of Personal Data:
ICEL - Indústria de Cutelarias da Estremadura, S.A.
Headquarters: Avenida Padre Inácio Antunes, nº 45, 2475-102 Benedita.
You may contact ICEL on any questions regarding this privacy and security policy through the following contact details of the Personal Data Protection Officer:
Email address : dadospessoais@icel.pt
Telephone contact: +351262925032
Registered post with acknowledgement of receipt to the address Avenida Padre Inácio Antunes, nº 45, 2475-102 Benedita.
ICEL is responsible for the processing of Personal Data collected and shared, both in physical shops and in our online shop, through the use of the website www.icel.pt where contents are shared on the history of ICEL, quality policy and company profile, information on use and care of the products transacted, promotional campaigns, news about the company and recipes where all our products can be used.

For what purposes ICEL processes your data

The personal data of our Customers are collected during browsing of the website www.icel.pt for the pursuit of certain purposes, some of which depend on their consent.
Thus, Personal Data, in their various categories, are collected for the following processing purposes:
a. Management of the contractual relationship - we collect your data to carry out the purchase of our products, process the respective invoicing, manage the respective exchanges, returns, order cancellations, and respond to requests for clarification, doubts or questions about our products, services and/or all aspects related to our online shop;
b. Content Management - which consists in the collection of Personal Data, through the Customer’s consent, for sending, receiving, consultation and dissemination of offers, promotions, news or other information related to our products and/or online shop, through the ICEL brand (Promotion and Marketing);
c. Placement of Cookies/Pixel Tags - Collection of Personal Data to determine the number of users and to understand how users and Customers use and access the platforms and website www.icel.pt and to identify the route that is taken within them and their preferences, monitoring, for example, the entire purchase process and placement of the product in the cart. In addition, an anonymous analysis of the visits made to the website is also carried out;
For cases where this is necessary and where legally required, we will seek your express, explicit, informed, unconditional consent before we access and use your Personal Data for each of the processing purposes or for some purpose other than, yet related to, any of the above.
All Personal Data collected by ICEL for the management of the contractual relationship waive the provision of any consent by the Data Subject, insofar as they are necessary for the performance of the contract and, where necessary, to ensure compliance with any legal obligation and/or defence of its legitimate interests.

Personal data category
Personal data is all information relating to an identified or identifiable person who can be identified directly or indirectly. Also personal data is the collection of separate information that can lead to the identification of a particular person.
The personal data subject to processing by ICEL are as follows:
- Contact details (telephone number, mobile phone, email address, postal address);
- External identification data (name, tax identification number);
- Financial data (data relating to bank accounts, bank cards, bank identification number to purchase available products, with the exception of data relating to credit card numbers or bank debit cards). The entire order payment process is directly forwarded to other entities such as Paypal and no banking or financial data are stored on the website;
All Personal Data collected are adequate, limited and proportionate for each of the processing purposes described above.
ICEL processes your Personal Data in an automated manner and/or manually for each of the purposes described above, scrupulously observing any of the grounds for lawfulness in the processing - express, explicit and informed consent of the Customer for any of the purposes that require it, such as for the development of any marketing and advertising actions, content management and monitoring of information downloaded or collected through the website.

Collection of Personal Data

ICEL collects personal information when personal data are collected directly from the Customer or the user through the website www.icel.pt.
Personal data may be collected orally or in writing by completing the registration forms available on the website www.icel.pt.
The data collected through the website www.icel.pt, are processed automatically, with the information collected being encrypted and managed with the most advanced security tools, through the SSL protocol (Secure Sockets Layer).
Pixel Tags are also installed on the website to track and monitor certain behaviours and consumptions of Customers, and the installed Pixels can create and allow the following events:
i. content viewing, namely posts, landing pages, product pages, etc;
ii. monitoring of searches conducted on the website, allowing monitoring and access to the type of consultation that each Customer makes on the website, allowing their preferences to be viewed;
iii. choices and additions made to the shopping cart, which is a tool that will enable potential and new Customers to be located;
iv. choices and additions to the wish lists, in order to identify the interests expressed by Customers in the potential acquisition of products;
v. monitoring information when Customers check-out, to finalise the purchase;
vi. monitoring and addition of payment information, allowing us to gauge when the Customer will be most apt to make new online purchases;
vii. grouping information to record the number of purchases made in the online shop;
viii. availability of advertising and/or promotional information to create loyalty among certain Customers to the ICEL brand, through the availability of forms, download of material and/or spontaneous registration;
ix. monitoring and control of information when the Customer fills in a certain registration form;

Period for the retention and maintenance of Personal Data
ICEL processes and keeps the personal data of its Customers and/or users of the website www.icel.pt in accordance with the purposes for which they are processed, keeping the personal data only for the period strictly necessary and appropriate for the fulfilment of each of the processing purposes described above.
The data subject may, at any time, oppose the storage and processing of their personal data, or simply invoke their right to forget and also revoke the consent given for the processing of their personal data (when applicable). Whenever any of these rights is exercised, ICEL proceeds with the elimination or anonymisation of the personal data, as appropriate, in the shortest possible time.
Without prejudice to the above, ICEL will retain the personal data necessary for the fulfilment of certain legal obligations, namely, tax or contractual obligations, which may require their retention for a period of no less than five years, or for the defence of its legitimate interests (defence in the context of any administrative, judicial, extrajudicial or administrative offence proceedings).
After the end of the retention period, ICEL will eliminate or anonymise the personal data (when possible), provided that they should not be kept for any of the distinct purposes that may subsist.

Communication and sharing of Personal Data
ICEL grants access to the Personal Data of its Subjects to third-party Subcontractors for the provision of the services necessary for the collection and management of all the information essential for the management of all the activity of ICEL, through the ICEL brand.
For this same purpose, ICEL subcontracts more specialised third parties which activity consists in the preparation and maintenance of the website and to carry out promotional and advertising activities of the products of the ICEL brand.
ICEL also subcontracts and transfers information to third parties that have platforms, mechanisms, information management procedures especially directed to the making and promotion of commercial contacts, for scheduling the reinforcement of information at certain times and in certain areas of activity developed by ICEL.
In this context and for these purposes, ICEL shares the personal data collected with the entities responsible for transporting the orders or goods related to the activity developed by ICEL and/or with the company responsible for developing the website.
Within this scope, ICEL, in compliance with legal and regulatory obligations, verifies and requires subcontracted or partner third parties to comply with and perform the same measures implemented and to undertake to take all security precautions and procedures, depending on the category or type of personal data shared and the risks associated with each type of processing, to protect the security of personal data and prevent their distortion, corruption and indiscriminate access to them by unauthorised third parties.

Subcontracted Entities
ICEL is not responsible for the content of the privacy and security policies published by the subcontracted entities, nor for any content published or associated or link published and referenced in each of the websites. All the contents published in the internet pages of each one of the subcontracted entities are of their exclusive responsibility.

Transfer of personal data
ICEL and Subcontracted/Partner entities shall process the Personal Data of the Data Subjects entirely within the European Union and no international transfer of Personal Data is envisaged.

Customers' and users' responsibility
The Data Subjects are obliged to access the website www.icel.pt in a prudent and diligent manner, avoiding unauthorised access to their Personal Data, where applicable, by maintaining total confidentiality of their password and information associated with their account and user registration at the online shop.
ICEL recommends that all Data Subjects (Customers or users of the website www.icel.pt) adopt the necessary security measures, including equipment maintenance (telephones, tablets and others), updating and configuration of programmes, as well as the use of any security procedures against malicious software or software of doubtful origin.
If the Data Subject (Customer or user of any available platform) provides false or inaccurate information to ICEL, ICEL will not be responsible for any contents that refer to other pages, composed of contents or allusive to services that are considered illicit, harmful, defamatory or contrary to public order.

Rights of Data Subjects
All Data Subjects may, at any time and free of charge - in accordance with the legislation in force - exercise the following rights: the right to information, access, rectification or erasure of personal data; the right to portability, the right to limit or oppose the processing of their personal data.
To that end:
1. Right to information - the data subject has the right to consult, always and at any time, in an available place and of easy and unconditional access, all information on the scope and activity where their personal data may be subject to any type of processing;
2. Right of access - the data subject has the right to know whether their personal data is processed or not, the purposes of processing, the category of personal data processed, the entities with which their personal data may possibly be processed and shared, the retention periods, the origin of the data and the forms or methods by which they are collected and their possible transfer to other entities located outside the European Union;
3. Right of rectification - the data subject has the right to proceed, at any time and without any associated cost, to the rectification of their personal data when they are inaccurate or outdated;
4. Right to erasure - the data subject shall be entitled to obtain, at any time and free of charge, the erasure of his/her personal data provided that and as from the moment when: (i) their personal data are no longer necessary for the purpose for which they were collected and there is no legal rule requiring their retention for a longer time; (ii) whenever the data subject withdraws his/her consent (where applicable); (iii) whenever the data have been collected and/or processed unlawfully; (iv) whenever the data subject has objected to the use and processing of their personal data for marketing and advertising purposes, including profiling;
5. Right to limit processing - the data subject may, for a certain period, request that the processing of their personal data is restricted in its use and may not be shared with third parties or deleted. The personal data subject may exercise this right when he/she finds that his/her personal data are incorrect or inaccurate;
6. Right to portability of personal data - the data subject has the right to receive from the controller, in this case ICEL, their personal data in a structured format, of current use and automatic reading, having the same right to transmit this data to another responsible entity, provided that they have given their consent or their processing is based on a contract and is carried out automatically or by automated means.
7. Right to opposition - the data subject has the right to oppose the processing of his/her personal data when the possible reuse of his/her personal data for a purpose other than that foreseen for the processing is in question, or when the personal data may be used and processed to defend the legitimate interest of ICEL or third parties, or when the personal data are being used for marketing or advertising purposes.
All rights may be exercised at any time, free of charge, provided that the request is not manifestly unfounded or excessive, in which case ICEL reserves the right to require payment of a fee to cover all administrative costs associated with the request made.
Any of the above rights may be exercised through any of the following means:
a) Email address: dadospessoais@icel.pt;
b) Registered post with acknowledgement of receipt to the address: Avenida Padre Inácio Antunes, nº 45, 2475-102 Benedita
ICEL commits to answer the request as soon as possible, never exceeding the legally established deadlines, justifying its decision, in accordance with the parameters and legal provisions in force.
ICEL, its subcontracted and partners entities comply and shall scrupulously comply with all mandatory information rights provided for in the applicable legislation and within the scope of the contractual relationships established with the Data Subjects.
In any case, the Data Subject whenever he/she considers that his/her rights have been breached or not safeguarded, may lodge a formal complaint before the National Commission for Data Protection.

Mandatory nature of the Personal Data requested
There may be Personal Data duly identified in the forms or applications made available by ICEL through the website www.icel.pt, which will be mandatory to fulfil the intended purposes or legal obligations.
If the Data Subject does not provide his/her Personal Data, ICEL will not be able to provide or perform its services or activities and meet his/her request.

Safety and Security Measures
ICEL takes all precautions required by law to ensure the privacy of personal data transmitted through the website www.icel.pt, ensuring the security of all information in the online or offline system.
Whenever sensitive or highly confidential information (such as bank details) is collected, the data is encrypted using the Secure Socket Layer (SSL) protocol. This SSL technology is used to improve the quality of sharing and transmission of Personal Data over the internet, encrypting and protecting data and information considered sensitive using the HTTPS protocol, guaranteeing to the Data Subject that their data is not fraudulently intercepted and that all information is treated with the maximum level of security.

Applicable Law
This privacy and security policy has been drawn up and is fully subject to the legislation in force in Portugal and the GDPR.

Amendments to the Privacy and Security Policy
ICEL reserves the right to change this privacy and security policy or any terms and conditions of sectoral security and privacy policies, always in accordance with the applicable national and community legislation.
ICEL is not responsible for the content accessed through any hyperlink that leads Data Subject to browse outside the website, portal or any platform provided, as well as for the processing of Personal Data carried out therein, being such hyperlinks or processing the responsibility of third parties.
The pages and contents of third parties are not subject to this Privacy and Security Policy, so we advise that whenever you browse or consult these websites you should look and read the privacy policies, as well as the applicable terms and conditions.