Privacy Policy

Your privacy, the confidentiality, availability, and integrity of your personal data are a priority for us, and we are committed to handling them in a dignified and secure manner. 

I. WHO IS THE DATA CONTROLLER? 

MCMKT BRANDS, LDA, hereinafter referred to as “MCMKT”, an incorporated and operating company under the Laws of Portugal, with registered office at Rua João Mendonça, n.º 529, 4464-503 – Senhora da Hora, registered at the Commercial Registry Office of Porto, under the number 509 744 907, is the entity responsible for the processing of your personal data.

II. WHAT PERSONAL DATA DO WE PROCESS, FOR HOW LONG AND FOR WHAT PURPOSES?

We will only process your personal data to the extent necessary to ensure the proper functioning of the Endless website and to respond to contact requests. This is in accordance with the General Data Protection Regulation (GDPR), Law No. 58/2019 of 8 August 2019 (that ensures the implementation of the GDPR in domestic law), Directive 2002/58/EC of 12 July 2002 (directive relating to the processing of personal data and the protection of privacy of electronic communications), Law No. 41/2004 of 18 August (law transposing Directive 2002/58/EC into domestic law), and other applicable legislation on privacy and the protection of personal data. 

We will delete or anonymise your personal data as soon as we no longer need it for the purposes for which it was processed. This is without prejudice to situations in which the law requires us to keep it for longer periods of time. 

Next, we shall provide you with all the information about the processing of your personal data carried out by us on this website, namely, its purposes, legal grounds, categories of personal data involved, and retention periods. We will also provide you with information regarding your rights in relation to the protection of personal data as well as regarding the technical and organizational measures we take to ensure your privacy. 

  1. CONTACT REQUEST

If you have a query, complaint, suggestion, compliment or request for information or service, you can contact us using the means we make available. 

We will process certain categories of personal data, including identification data, contact data, and professional data, as well as other information you consider pertinent, in order to manage and answer your requests.  

We undertake to delete your personal data within 2 (two) years of your interaction. 

III. TO WHOM MAY WE TRANSMIT YOUR PERSONAL DATA?

We may pass on your personal data to partner companies (subcontractors) who have to be involved in order to ensure the good functioning of this website and guarantee that you may enjoy all its features. Whenever these companies process your personal data in our name and on our behalf, we guarantee the same level of security and privacy for that processing. 

MCMKT may be required to disclose your personal information to the Competent Authorities as required by law and/or court order.

Furthermore, in order to provide the best possible services, including those related to cloud services, information security management, or when our partners’ subcontractors need to access personal data in specific circumstances, we may rely on the support of partners located or headquartered outside the European Economic Area (“third countries”). These partners may be based in the United States or the United Kingdom, for example. 

We are aware that the level of protection for your personal data may vary from that guaranteed by the European Union’s GDPR in these situations. Therefore, we undertake to adopt appropriate measures to guarantee a high standard of protection and security of your personal data in accordance with the aforementioned Regulation, favouring third countries with an adequacy decision adopted by the Commission. 

IV. WHAT ARE YOUR RIGHTS REGARDING PERSONAL DATA PROTECTION AND HOW CAN YOU EXERCISE THEM?

As a data subject, you can, at any moment, exercise your data protection rights  – right of access, the right to rectification, the right to erasure, the right to restriction, the right to portability and the right to object – upon request to the following e-mail address: dadospessoais@sonaemc.com

We will carefully analyze your requests, evaluating their legitimacy and pertinence, commiting ourselves to respond within the legal timeframe for this purpose  

If you believe that we have not respected your rights, you may file a complaint with the National Comission for Data Protection (CNPD):  

  • Address: Av. D. Carlos I, 134 – 1.º, 1200-651 – Lisbon
    • Telephone: +351 213 928 400 
    • Fax: +351 213 976 832  
    • E-mail: geral@cnpd.pt

If necessary, you can contact our Data Protection Officer (‘DPO’) via the following e-mail address: dpo@sonaemc.com

V. HOW DO WE PROTECT YOUR PERSONAL DATA? 

We apply appropriate technical and organizational measures to protect your personal data in accordance with best practices in the market. 

Administrative, technical, and physical measures, technological controls and procedures are in place to prevent your personal data from improper or unauthorized use, access, disclosure, or destruction. 

Among others, we highlight some of the measures applied: 

  • Storing and transferring your personal data in a secure manner; 
  • Protection of information systems through controls that prevent unauthorized access to your personal data; 
  • Implementation of mechanisms that guarantee the safeguarding of the integrity and quality of your personal data; 
  • Permanent monitoring of the information systems, with the objective of detecting and preventing the misuse of your personal data; 
  • Redundancy of equipment for storage, processing and communication of your personal data, to avoid loss of availability; 
  • Periodic analysis to detect vulnerabilities or security flaws in the information systems. 

This Privacy Policy may be reviewed and updated at any time and the appropriate information will always be provided on this website.o, sendo-lhe sempre garantida a devida informação no presente site.