Privacy Policy

Last updated: July 1, 2026

This Privacy Policy explains how CORTARTEC – Construção Civil e Importação e Exportação, Lda. collects, uses, stores and protects the personal data of users of its online store, customers, potential customers, suppliers and other people who interact with us.

Use of the CORTARTEC online store implies reading and accepting this Privacy Policy.

1. Data controller

The controller of personal data is:

CORTARTEC – Civil Construction and Import and Export, Ltd.
Tax ID Number: [confirm Tax ID Number]
Headquarters: [confirm headquarters address]
Operational address / warehouse: Zona de Serviços Paço dos Negros, Lote 5 e 5A, 2080-500 Fazendas de Almeirim, Santarém, Portugal
Email: loja@cortartec.pt
Telephone: +351 243 579 426

For any questions related to the protection of personal data, the data subject can contact CORTARTEC via the email address above.

2. Personal data collected

CORTARTEC may collect and process the following personal data:

a) Identification data: name, company name, CPF/CNPJ (Brazilian tax identification number), job title or professional function;
b) Contact information: email, phone number, billing address, and shipping address;
c) Order data: products purchased, references, quantities, purchase history, commercial preferences and information necessary for delivery;
d) Billing and payment information: data required for issuing invoices, payment receipts, payment method used, and transaction status;
e) Communication data: messages sent through forms, emails, quote requests, technical requests, complaints, or commercial contacts;
f) Technical and browsing data: IP address, device type, browser, pages visited, date and time of access, origin of the visit and cookies, when applicable;
g) Marketing data: consent to receive newsletters, commercial communications, contact preferences, and history of interactions with campaigns.

CORTARTEC does not intentionally solicit or process special categories of personal data, such as health data, racial or ethnic origin, political opinions, religion, biometric data, or data concerning sex life.

3. Methods of data collection

Personal data can be collected in the following ways:

a) Creating a customer account in the online store;
b) Order fulfillment;
c) Filling out contact, quote, or technical support forms;
d) Subscription to newsletters or commercial communications;
e) Contact via email, telephone or other means;
f) Payment processing;
g) Use of cookies and similar technologies;
h) Interaction with CORTARTEC pages, campaigns or advertisements.

4. Purposes of treatment

CORTARTEC processes personal data for the following purposes:

a) Management of orders, sales and deliveries;
b) Issuance of invoices and compliance with tax and accounting obligations;
c) Payment processing and transaction confirmation;
d) Providing customer support, technical assistance, and responding to information requests;
e) Sending quotes, commercial proposals and technical documentation;
f) Management of complaints, returns, warranties and after-sales requests;
g) Communication with clients and potential clients;
h) Sending newsletters and commercial communications, when there is consent or other applicable legal basis;
i) Improvement of the online store, usage analysis, security and fraud prevention;
j) Compliance with legal, regulatory or judicial obligations;
k) Defense of CORTARTEC's rights in administrative, judicial or extrajudicial proceedings.

5. Legal basis for treatment

The processing of personal data by CORTARTEC is based on the following legal grounds:

a) Contract execution or pre-contractual due diligence: when processing is necessary to process orders, respond to requests for quotations, provide assistance or supply products;
b) Compliance with legal obligations: in particular tax, accounting, commercial, billing obligations and responding to competent authorities;
c) Legitimate interest: for managing the commercial relationship, preventing fraud, ensuring website security, improving services, responding to professional inquiries, and defending rights;
d) Consent: for sending newsletters, using certain cookies, or other communications that require prior authorization from the data subject.

When processing is based on consent, the data subject may withdraw that consent at any time, without affecting the legality of processing carried out previously.

6. Commercial communications and newsletters

CORTARTEC may send commercial communications, newsletters, campaigns, product updates, catalogs, technical information, or promotions to users who have given their consent or when there is another applicable legal basis.

The data subject may cancel receiving these communications at any time via the unsubscribe link included in the messages or by sending a request to loja@cortartec.pt .

CORTARTEC is committed to not sending unsolicited commercial communications in violation of applicable law.

7. Sharing data with third parties

CORTARTEC may transmit personal data to third parties only when necessary for the purposes described in this Privacy Policy.

The data may be shared with:

a) Providers of hosting, maintenance and technical support services for the online store;
b) E-commerce platforms used by CORTARTEC;
c) Transportation, logistics and distribution companies;
d) Payment service providers, banks, financial institutions and payment platforms;
e) Accountants, auditors, tax, legal or administrative consultants;
f) Providers of marketing, email marketing, statistical analysis or campaign management services;
(g) Tax, judicial, administrative, regulatory or police authorities, when legally required;
h) Insurance companies or entities involved in claims, incidents or litigation.

CORTARTEC requires its service providers to treat personal data confidentially, securely, and only in accordance with the instructions received.

8. International data transfers

Whenever it is necessary to transfer personal data outside the European Economic Area, CORTARTEC will ensure that this transfer is carried out based on legally appropriate mechanisms, namely adequacy decisions from the European Commission, standard contractual clauses or other safeguards provided for in applicable legislation.

9. Retention of personal data

CORTARTEC will retain personal data only for the period necessary to fulfill the purposes for which it was collected, as well as for the legally required periods.

Without prejudice to other applicable deadlines, the following retention periods may be observed:

a) Order data, invoicing and accounting documents: for the applicable legal period, currently up to 10 years;
b) Customer account data: while the account remains active or until a deletion request is made, unless there is a legal obligation to retain it;
c) Contact request, quote, and technical assistance information: for the period necessary to manage the order and any eventual commercial follow-up;
d) Data relating to complaints, returns and warranties: for the period necessary to resolve the process and defend rights;
e) Marketing data and newsletters: until the data subject withdraws their consent or objects;
f) Technical data, logs and cookies: for the periods defined in the Cookie Policy or in the consent management tools used.

Once the applicable retention period has ended, the data will be deleted, anonymized, or securely archived, where legally permissible.

10. Data security

CORTARTEC adopts appropriate technical and organizational measures to protect personal data against loss, destruction, alteration, unauthorized disclosure, improper access, or unlawful processing.

These measures include, whenever applicable, access control, protection of IT systems, use of trusted vendors, backups, internal confidentiality, and security procedures appropriate to the risk.

Despite the measures taken, no computer system or internet data transmission can guarantee absolute security. Users must also adopt protective measures, namely keeping their access credentials confidential.

11. Cookies and similar technologies

CORTARTEC's online store may use cookies and similar technologies to ensure the site functions correctly, improve the user experience, analyze browsing statistics, personalize content, or measure campaigns.

Some cookies are essential for the online store to function and cannot be disabled without compromising the use of the site.

Other cookies, namely analytical, functional, advertising or third-party cookies, will only be used with the user's consent, whenever legally required.

Users can manage their cookie preferences through the consent management banner or tool available on the website, as well as through their browser settings.

CORTARTEC may provide a separate Cookie Policy with detailed information about the cookies used, their purposes, duration, and how to manage them.

12. Rights of data subjects

Under applicable law, the data subject may exercise the following rights:

a) Right of access to your personal data;
b) Right to rectify inaccurate or incomplete data;
c) Right to erasure of data, when legally applicable;
d) Right to limitation of treatment;
(e) Right to object to treatment;
f) Right to data portability, where applicable;
(g) Right to withdraw consent, where the processing is based on consent;
h) Right to lodge a complaint with the competent supervisory authority.

To exercise any of these rights, the data subject must contact CORTARTEC via email at loja@cortartec.pt .

CORTARTEC may request additional information to confirm the identity of the data subject before responding to the request.

13. Complaint to the supervisory authority

If you believe that CORTARTEC has processed your personal data in violation of applicable law, you have the right to lodge a complaint with the competent supervisory authority:

National Data Protection Commission – CNPD
Address: Av. D. Carlos I, 134, 1st floor, 1200-651 Lisbon
Telephone: +351 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt

14. Data on minors

The CORTARTEC online store is not intended for minors.

CORTARTEC does not intentionally collect personal data from minors. If the improper collection of data from a minor is detected, it will be deleted as soon as possible, unless there is a legal obligation to retain it.

15. Links to third-party websites

The online store may contain links to third-party websites, including payment platforms, social networks, manufacturers, partners, or external entities.

CORTARTEC is not responsible for the privacy policies, content, practices, or security measures of these third-party websites.

Users are advised to review the respective privacy policies of these websites before providing personal data.

16. Automated decisions and profiling

CORTARTEC does not make exclusively automated decisions that produce legal effects or significantly affect the data subject.

Statistical analysis tools, commercial segmentation, or campaign measurement may be used, but always in accordance with applicable legislation and, when necessary, with the user's consent.

17. Changes to the Privacy Policy

CORTARTEC may change this Privacy Policy at any time, in particular to reflect legal, technical, commercial or operational changes.

The updated version will be published in the online store, indicating the respective update date.

Users are advised to periodically review this Privacy Policy.

18. Contacts

For any questions related to this Privacy Policy or the processing of personal data, you can contact:

CORTARTEC – Civil Construction and Import and Export, Ltd.
Email: loja@cortartec.pt
Telephone: +351 243 579 426
Operational address / warehouse: Zona de Serviços Paço dos Negros, Lote 5 e 5A, 2080-500 Fazendas de Almeirim, Santarém, Portugal