Privacy Policy

FINANÇOR AGRO-ALIMENTAR, S.A. (hereinafter FINANÇOR), legal entity number 512000280, with registered office at Rua da Pranchinha, 92, 9500-331 Ponta Delgada, is committed to protecting the privacy and personal data of all individuals with whom it interacts, namely customers, suppliers and employees.

In this regard and in compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, also known as the General Data Protection Regulation (hereinafter GDPR) and other applicable legislation, namely Law No. 58/2019 of 8 August 2019, published in the meantime, FINANÇOR has established the present Privacy Policy.

1. Definitions

To ensure the best understanding of the present Privacy Policy it is important to understand the concepts. For this reason, FINANÇOR provides a glossary of the terms it considers most important:

Personal data: Any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Treatment: Any operation or set of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Special categories of personal data: Personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data that uniquely identify a natural person, data concerning health or data concerning a natural person's sex life or sexual orientation.

Sensitive categories of personal data: Personal data relating to the economic or financial situation of its holder, (other) personal data that may lead to the stigmatization or exclusion of the data holder, usernames, keywords and other registration elements, personal data that may be used for identity-related fraud.

Responsible for treatment: A natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of processing personal data.

Subcontractor: Any individual or legal entity, public authority, agency or other body that processes personal data on behalf of the data controller.

Consent: A freely given, specific, informed, and explicit expression of will by which the data subject, through a statement or unequivocal affirmative action, accepts that personal data concerning him or her shall be processed.

Personal data breach: A security breach that accidentally or unlawfully results in the destruction, loss, alteration, unauthorized disclosure of, or access to, personal data transmitted, stored, or otherwise processed.

Privacy by design: This means taking privacy risks into account throughout the design process of a new product or service, rather than considering privacy issues only later. It also means carefully evaluating and implementing appropriate technical and organizational measures and procedures from the outset to ensure that processing complies with the GDPR and protects the rights of the data subjects concerned.

Privacy by default: This means ensuring that mechanisms are put in place within an organization to guarantee that, by default, only the necessary amount of personal data is collected, used, and stored for each task. This obligation applies to the extent of its processing, the retention period, and its accessibility. These measures ensure that personal data is not made available to an indeterminate number of individuals without human intervention.

Pseudonymization: Processing personal data in such a way that it can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and subject to technical and organizational measures to ensure that the personal data cannot be attributed to an identified or identifiable natural person.

2. Scope

FINANÇOR is dedicated to the industry and trade of various products, such as animal feed, cereal milling, biscuits, pasta, and, within the scope of this activity, processes personal data.

The present Privacy Policy applies exclusively to personal data for which FINANÇOR is responsible for processing within its area of ​​operation, whether in the commercial area or in the human resources area.

Data can be collected in person, by telephone, in writing, by email, by fax, or through websites.

FINANÇOR websites may include links to other websites that are not affiliated with FINANÇOR. Links to FINANÇOR websites may also be included on websites that are not affiliated with FINANÇOR. FINANÇOR cannot be held responsible for the processing of data carried out through such external websites.

3. Purposes and grounds for data processing

The personal data processed by FINANÇOR has various purposes and legal bases.

– Contractual relationship management

The processing of personal identification and other data is necessary for the conclusion and performance of the service agreement between FINANÇOR and its clients.

Customers may choose to provide additional information, which will only be used to help FINANÇOR provide the best possible service.

The processing of personal data is also necessary for the fulfillment of contracts for the provision of services and goods between FINANÇOR and its suppliers.

– Legal obligations

FINANÇOR is subject to compliance with legal obligations that require the processing of data.

- Quality

FINANÇOR may analyze customer information, collected through surveys, complaints, and other means, for statistical purposes if it has the respective consent.

– Marketing

With the consent of the data subjects, FINANÇOR may process personal data to send information about promotions, campaigns, newsletters, and other important information to its customers.

– Profiling

FINANÇOR may analyze its customers' business information to identify consumption profiles for statistical purposes and/or, if it has the respective consent, send personalized information to its customers.

– Video surveillance

For the safety of customers and employees, FINANÇOR's facilities have video surveillance systems, in accordance with the law.

– Hobbies and contests

FINANÇOR may promote contests and competitions for which the processing of personal data is necessary, in accordance with applicable regulations.

 Recruitment

Candidates can apply for specific positions (through internal recruitment or outsourcing) or submit unsolicited applications, in which case they must provide the personal data necessary for recruitment.

The information provided by candidates will be used solely for recruitment purposes and will be kept for a maximum of 2 years.

– Human resources management

For the execution of the employment contract, employees must provide personal data to FINANÇOR. If necessary, specific consents will be requested for the processing of data that require it (for example, for special and sensitive data categories).

- Whistleblowing channel

In compliance with applicable legislation, the FDA has implemented an internal whistleblowing channel, within which personal data may be processed respecting the confidentiality guarantees provided for in the legislation applicable to whistleblower protection, in the legislation on personal data protection and in the policy of said channel. Only personal data considered necessary for the analysis and follow-up of complaints will be processed; therefore, excessive data will be deleted and will not be processed. The collected data will be kept for a period of five (5) years, after which it may be deleted or anonymized.

4. Cookies

Cookies are used on FINANÇOR websites to improve the browsing experience and provide the best possible service. Cookies are small files that are stored on access devices through the browser, retaining only information related to preferences, and therefore do not include personal data. Although you can manage cookies directly in your browser, by continuing to browse the site, you are consenting to their use; however, by disabling cookies, you may prevent some web services from functioning correctly, affecting, partially or totally, your browsing experience on the site.

5. Rights of data subjects

Under the GDPR, data subjects have, among others, the following rights:

– Right of access;

– Right of rectification;

– The right to be forgotten;

– Right to limitation of treatment;

– Right to data portability;

– Right to object;

– Right to revoke consent.

If you wish to exercise any of your rights or clarify any doubts, the data subject must contact FINANÇOR in writing, addressed to “Privacy Officer”, at the address Rua da Pranchinha, 92, 9500-331 Ponta Delgada, by email rgpd@financor.pt or by filling out the form available on FINANÇOR.

 6. Responsibilities of FINANÇOR

FINANÇOR aims to:

  1. a) collect data only for specific, explicit and legitimate purposes;
  2. b) minimize data collection, promoting only the collection of appropriate, relevant, and limited data that is effectively necessary in relation to the purposes of the data collection;
  3. c) not to use the collected data for purposes other than those for which it was collected and for which consent was obtained;
  4. d) update the data whenever necessary;
  5. e) retain the data in such a way that identification is only possible for the period necessary for the purposes for which it was collected;
  6. f) to protect the data against unauthorized or unlawful processing and against accidental loss, destruction or damage;
  7. g) implement the principles of privacy by design and by default in the activities/processes for handling personal data;
  8. h) adopt a privacy by design reference framework;
  9. i) implement data encryption or pseudonymization techniques;
  10. j) ensure compliance with the GDPR.

Last updated: January 8, 2026.