Privacy and Cookies Policy
PRIVACY POLICY
1. THE PURPOSE AND SCOPE
OLI-SISTEMAS SANITÁRIOS, S.A is a global brand dedicated to the production of solutions to make the bathroom a water-efficient, comfortable and safe space. Despite already being the Iberian leader in the production of flushing cisterns, OLI wants to be present in bathrooms around the world, thus having innovation as its main core.
Our Privacy Policy describes how we collect, use and process your personal data and, in doing so, how we comply with our legal obligations towards you. Your privacy is important to us and we are committed to protecting and safeguarding the data you provide us. We also provide you with relevant information on the correct and appropriate use of our website and App.
Here we intend to explain the general principles of the Privacy and Personal Data Protection Policy (Privacy Policy) and terms of use, within the scope of the online digital platform of OLI - Sistemas Sanitários, S.A. (OLI, "we"; "our"), and/or subsidiary companies (OLI Group), regarding visitors and users (the "user") of our website and mobile application (APP).
This Privacy Policy applies to the personal data of registered and unregistered users of the website/APP, and possible candidates who submit their CVs online or by electronic means, with a view to considering employment opportunities, internships or other similar purposes.
OLI aims to promote a relationship of trust and transparency with the users of its online platforms, aiming at the performance of legitimate, clear and delimited purposes, in accordance with the principle of minimising the data requested, limiting their conservation, preserving their integrity and confidentiality, and processing the personal data of their holders with respect for their respective rights and in accordance with the provisions, in particular:
• in the General Regulation on Data Protection - GDPR - Regulation 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of individuals with regard to the processing of personal data and on the free movement of such data;
• in Law no. 58/2019, of 8 August 2019, which ensures the execution, in Portuguese legal order,of the GDPR, without prejudice to other national or European Union legislation, applicable in matters of privacy, data protection and electronic communications.
If you have questions about our Privacy Policy, you can contact us directly. You can also contact us with a view to exercising the rights conferred on you, among others those described in this document.
This Privacy Policy applies equally to other countries where OLI Group companies operate.
2. WHAT PERSONAL DATA IS AND WHAT IT MEANS?
Personal data is any information relating to a specific, identified or identifiable person, called the data subject.
Examples of personal data are: your name, the number or alphanumeric sequence of an official identification document, a cultural profile, the profession, location data, or even elements of your physical identity, among others.
There are special categories of personal data that may not be processed. Examples: racial or ethnic origin, trade union membership, political opinions, philosophical or religious beliefs, and others, provided for by the law.
The processing of personal data is any operation carried out by automated or non-automated means on such data and involving one or more of the following procedures: collection, recording, consultation, use, transmission, modification and deletion.
3. WHO IS RESPONSIBLE FOR THE TREATMENT OF YOUR DATA?
The entity responsible for processing the data is OLI – Sistemas Sanitários, S.A.
• Adress: Travessa de Milão, Esgueira, Aveiro 3800-314, Portugal.
• Email adress: privacy@oli-world.com
• Phone number: +351 234 300 200
4. WHAT TYPE OF PERSONAL DATA WE COLLECT AND WHAT IS THEIR PURPOSE?
In the collection and processing of data, OLI complies with applicable legal obligations and always observes the principles and rules of legitimate processing, requesting, when required by law, the consent of the data subject, if this is necessary or justified for its processing.
The personal data of the user of our website / App will be treated with the following purposes, depending on the situation:
• Contact details: If you wish to contact us for any reason (e.g. for clarification, information, suggestions or complaints), we need to collect and use information about you, such as: name, email, telephone contact and possibly address, if necessary to fully and timely fulfil the purpose of your contact.
• Website / App users: We collect a limited amount of data, which we use to help us improve your experience when using our website / App, as well as to help us manage the services we provide, analyzing the criteria of your recent search. Thus, we will be able to send information about new products or initiatives, and personalized information, which will allow us to present you with solutions that we believe will be of interest to you through our communication channels and / or digital platforms.
-In the specific case of the mobile App, within the scope of this Privacy Policy, your access depends on the download of the application in reference stores (for iOS or Android systems) and installation on your mobile device, which determines that the user agrees with the terms of its use and treatment of data, as well as a previous registration that will allow a login. This registration implies the indication of your email, creation of a user name and a password, which must be complex to safeguard the security of your access, and will be encrypted. We will also request the indication of your profession so that we can assess, globally, if the users are end customers or professionals connected to the market branch to which OLI directs its product offer (ex. Architects, civil builders, etc.).
-We remind you that your ID (username + password) is valuable, so as a registered user, you must maintain the confidentiality of your access data and the security of your mobile device, and OLI is not responsible for any loss or damage resulting from the unauthorized use of such data or equipment. We will ask for your email address when filling out the forms "Talk to us" and "Application Feedback". You may enter a different e-mail, different from yours, when using the application's recommendation form.
-If you suspect that your identification and password have been compromised, or when your mobile device on which the application is installed is lost or stolen, please contact us.
• Newsletter subscription: We collect your data to send our newsletter periodically and, where appropriate and in accordance with local laws and regulations, we may also use your data for other purposes, such as marketing actions or monitoring diversity. In certain cases, we may ask for your prior consent to carry out these initiatives.
• Job applications via online form or by email: In order to provide you with employment, traineeship or related opportunities, we need to collect certain information from you. This information will be processed for the purpose of assessing your application, so we will necessarily need to obtain your name, age, contact details, nationality, address, postcode, place of residence and country, information on educational qualifications, level of proficiency in spoken and written languages, computer proficiency, and other relevant skills. If you wish, you may optionally provide us with other information that you believe is relevant to your application. If you want to send your curriculum vitae [CV] directly, we suggest that you use the European Union guidelines on the composition of CVs (Europass).
5. LEGITIMACY FOR THE TREATMENT OF YOUR DATA
5.1 - Legitimate interests
The GDPR regulates the legitimate interests of data processing. This Regulation guarantees that we can process your data if it is necessary for the purposes of our legitimate interests, unless the interests or fundamental rights and freedoms of the data subject which require the protection of personal data are overridden. We consider that none of our activities in any way affect your interests, rights or freedoms, but rather help us to provide you with a more appropriate and efficient service. However, as a data subject, you have the right to object to our processing of your personal data by invoking legitimate interests.
5.2 - Consent
In certain circumstances, we are required to obtain your consent to process your personal data in relation to certain activities. Depending on what we do with your information, this consent will either be opt-in consent or soft opt-in consent.
The GDPR states that consent is "a freely given, specific, informed and explicit indication of the data subject's wishes by which he or she, by a statement or by an unambiguous affirmative action, signifies agreement to the processing of personal data relating to him or her".
The GDPR, in a simplified form, establishes that:
• You must give us your free consent;
• You should know what you are consenting to, so we will make sure that we provide you with necessary, appropriate and sufficient information;
• You should have control over which processing activities you consent to or not;
• You must provide your consent to the transmission of personal data in an unambiguous and well-defined manner.
In this context, on our platforms (Web/APP) there will be a specific place to mark your acceptance and/or consent, so that this requirement is fulfilled in a clear and clarified manner. For this reason, we will keep records of such consents given by you.
5.3 - Age and consent
If the user of our website / App is under the age of 13, treatment is only lawful if consent is given by their legal representatives, preferably using secure authentication means. Since we do not know the age of users of our website / App, we advise against having our platforms accessed or installed by these minors.
If you wish, please consult Law nº 58/2019, of 8 August, which ensures the execution of the GDPR, in particular its article 16.
6. WITH WHOM WE SHARE YOUR DATA?
Unless otherwise stated on your part, we may share your information with any of our group companies or associated third parties, as well as with certain service providers (namely, of technical service providers), which may involve access by these third parties to your personal data by those third parties. These subcontractors ensure that they comply with the applicable legal requirements and provide adequate guarantees regarding data protection and confidentiality and, in this regard, are responsible for it.
Unless otherwise stated on your part, we may share your information with providers of network analysis services, marketing automation platforms and social networking services in which we are present, in order to ensure that the feedback you receive is addressed to you and is within the scope of your interests.
In certain cases, personal data that is transmitted by the users of the website / App may be transferred to third parties, or their subcontractors, that provide services and also operate outside the European Union or the European Economic Area (eg cloud storage). In the specific case of transfer of personal data to entities located in the United States of America, we are assured by the service providers that these entities comply with the principles set out in the Privacy Shield, although OLI is not responsible for the accuracy of such assertion. This is an agreement between the European Commission and the U.S. Department of Commerce, which imposes special safeguarding and protection obligations on U.S. companies that receive and store personal data collected in the European Union.
7. HOW WE SAVE YOUR PERSONAL DATA?
The protection of your data is essential for us, reason why we apply advanced technical and organizational security measures, appropriate and designed to prevent the improper or unauthorized loss, dissemination, alteration, access and treatment. That is, the occurrence of a data breach.
A breach of security is understood to mean any breach of security that causes, accidentally or unlawfully, the loss, alteration, destruction, disclosure or unauthorized access to personal data being processed.
8. DURING HOW LONG WE KEEP YOUR PERSONAL DATA?
The data collected and processed by OLI will be kept until they are no longer needed for the purpose of interaction with the user or as long as their registration remains active.
However, if in a period of three years we have not had relevant contact with you or if, even before, OLI deems it appropriate, we will delete your personal data from our systems, unless there is a legal rule or judicial decision that requires its conservation, or legislation that determines a shorter conservation period. However, at any time you can exercise your right to erase your data, as the data holder.
9. HOW CAN YOU ACCESS, CHANGE OR REMOVE PERSONAL DATA YOU PROVIDE?
As the holder of your personal data, you have your own rights in relation to them.
These rights are described in detail in the General Data Protection Regulation (Chapter III - Rights of the Data Subject). You can check the terms of those specific rights in the following languages:portuguese, english, germany.
If you want to exercise any of the rights that assist you, please contact us.
We will endeavour to process your request without undue delay and, normally, within up to thirty days.
This period may be subject to extensions permitted by law. Please note that we may keep a record of your communications to help us resolve any issues raised by you, or other relevant elements, in an aggregated form and in an anonymized format.
Your rights are:
• Right of opposition: If we are using your data because we believe it is necessary for our legitimate interests, and you do not agree, you have the right to object. We will respond to your request within up to thirty days, although in certain cases it is allowed to extend this
period. As a general rule, we will only disagree with you if certain limiting conditions apply (for example, arising from legal obligations or court orders).
• Right to withdraw consent: At any time, you can withdraw your consent for us to process your personal data, which we collect for purposes such as: sending a newsletter or direct marketing actions.
• Data Subject Access Requests: You have the right to ask us, at any time, to confirm the information we have about you, and you can ask us to change, update, limit or delete it. In that circumstance we can:
a) Request that you confirm your identity or ask for more information about your order;
b) Refuse your request, invoking the reason and justifying the decision.
• On the right to erasure: In certain situations, the data subject has the right to have them no longer processed, to be erased and eliminated, under certain conditions:
• holders withdraw their consent or object to the processing of data;
• the processing of personal data violates legal provisions;
• the data is no longer necessary for the purpose that was collected.
If there is no legal, administrative or judicial impediment, we will delete your data within up to thirty days, a period that may be subject to extension under the terms of the law. In this context we may ask you to confirm your identity or ask you for more information about your order.
• Right to data portability (data transfer): If you so wish, you have the right to transfer your data to another data controller. We will either transfer your data directly to you or provide you with a copy in a commonly used digital format.
• Right to know of a data breach: The holder of personal data has the right to be informed following any breach of security that compromises his data. We will take care of that, also reporting this to the supervisory authority. (CNPD).
• Right to complain to a supervisory authority: You also have the right to lodge a complaint with your local supervisory authority, which you can do here, in the case of the Portuguese authority (CNPD).
10. MARKETING ACTIVITIES
From time to time, we may send you information that we consider to be of interest to you, if this has been demonstrated through any request for information made using the form on our website / App or direct email. In particular, we may need to use your data for the purposes exemplified below, always in compliance with the legal regulatory provisions, otherwise that use will not be made:
• Development and commercialization of other products and services;
• Sending news about promotions, offers, or information about events that we think may be
of interest to you;
• Presentation of promotional excerpts on the OLI website / App as a success story (onlyu when we have obtained your express consent to do so);
We need your consent for some aspects of these activities that are not covered by our legitimate interests (in particular, the collection of data through cookies and the provision of direct marketing through digital channels) and, depending on the situation, we will request it through inclusion option or soft opt-in.
Soft opt-in is a specific type of consent that applies when you have previously accessed our website / App. In terms of soft opt-in consent, we will consider that this has been given, unless, or until, the useru self-excludes himself. This type of consent allows us to suggest other products or information along with those you are researching, considerably increasing the probability of finding, with greater speed
and accuracy, what may be the object of your interest.
For other types of electronic marketing, we are required to obtain your specific consent. If you do not agree with our marketing approach, you have the right to withdraw your consent at any time.
We want you to know that if you have self-excluded from our marketing communications, it is possible that your data can be recovered through public / open sources. We will try to make sure that this does not happen, but if it does, we cannot immediately prevent it. You should therefore contact us.
COOKIES POLICY
1. What is a cookie?
A cookie is an information file that is stored on your device (eg computer, tablet, smartphone) through the respective browser and that registers the navigation on a website / App so that, when you visit it again, you are presented with options based on the information stored, also allowing faster access / login.
Cookies are also used to aggregate information about the flow and interactions of the website, in order to offer tools that promote better browsing experiences. Our mobile app does not use cookies.
2. How we use cookies?
We use these testimonials to connect with different functions, which will help us to develop and improve our service, allowing you to present solutions adapted to your preferences when you next visit. We may also use cookies to adjust our marketing and advertising.
We use:
• Session cookies (user): these are stored on your device during your browsing session and are automatically deleted when you close your browser. Usually store an anonymous session ID, but do not collect any information from your device;
• Persistent cookies: a persistent cookie is stored as a file on your device and remains when you close your browser. The cookie can be read by the website/APP that created it when you visit those online platforms again. We use persistent cookies from Google Analytics and others.
3. What types of Cookies are used by the website "https://www.oli-world.com"?
We use:
• Session cookies (user): these are stored on your device during your browsing session and are automatically deleted when you close your browser. Usually store an anonymous session ID, but do not collect any information from your device;
• Persistent cookies: a persistent cookie is stored as a file on your device and remains when you close your browser. The cookie can be read by the website that created it when you return to visit those online platforms. We use persistent cookies from Google Analytics and others.
The cookies we use can also be qualified as:
• strictly necessary: they are essential to enable you to use the website efficiently, such as when applying for a job opportunity, and therefore cannot be disabled. Without them, the services that are available on the website cannot be provided in full. These cookies do not collect information about you that can be used for the purpose of, for example, marketing.
• of performance: allow us to monitor and improve the performance of our website. For example, they allow us to count visits, identify sources of traffic and see which places on the website are preferred by users, for statistical purposes.
• of functionality: they allow our website/APP to 'remember' the choices you make and provide enhanced functionality. For example, we may provide you with news or updates relevant to the services you use. They may also be used to provide services you have asked for, such as viewing a video or animation. The information these cookies collect is normally anonymised.
To know the legal and interpretative framework established by the European Union on cookies and their use, you can consult here.
We use, in particular, the following cookies, under the conditions, time and the identified purposes:
• Session cookies (user), required, of functionality and of performance
- Provider: oli-world.com
- Cookies: lang, eucookie, oliusa
- Duration: per session
- Type: session.
- These are necessary, functional and performance cookies;
- Purpose: they are essential for the functioning and performance of the website, as they manage user preferences and other anonymous data to provide a better experience to identify user preferences.
• Third Party Cookies
- Provider: google.pt
- Cookies: SIDCC, __Secure-APISID, __Secure-SSID, HSID, __Secure-3PSID, __Secure-3PSIDCC, __Secure-3PAPISID, APISID, __Secure-HSID, SSID, SAPISID, SID, NID,1P_JAR, OTZ
- Duration: 2 years;
- Type: persistent;
- They are also functional cookies;
- Purpose: When you create a Google account or sign in, the cookies presented are stored on your computer so that they remain connected to your Google account when you use the service again. While connected to a website like ours, Google uses these cookies to improve your user experience. Some of the cookies are also used to improve certain navigation functions, for example, when using Google maps.
- Provider: youtube.com
- Cookies: VISITOR_INFO1_LIVE, PREF, use_hitbox, YSC
- Duration: 2 years;
- Type: persistent;
- They are also functional cookies;
- Purpose: These cookies are used to store user preferences, define the user's preferred language, measure bandwidth, increase the video view counter and services on pages containing embedded YouTube videos.
4. How to refuse cookies?
If you do not wish to receive cookies that are not strictly necessary to perform basicfunctions of our website/APP, in addition to the option to accept/reject cookies at the beginning of the session, you can also choose to customise them by changing the privacy settings of your browser.
However, refusing all cookies means that you may not be able to fully enjoy all the features of our website/APP. You should check your browser's "Help" menu to find out how to change your preferences.
For more specific information about cookies, including how to disable and delete them from your device, see www.aboutcookies.org
• To deactivate Google Analytics please use this link
Google Analytics is a platform that collects data about web usage. The information is collected anonymously and is used to improve its functionality.
• To disable Yandex.Metrika, please use this link
Yandex. Metrica is a web analytics tool that collects visitor and session data, tracking and reporting website traffic.
If you deactivate or delete these cookies, you may need to leave the page you are on and access it again.
Other relevant information about some browsers and how to disable cookies can be obtained here, although OLI is not responsible for the timeliness, completeness and accuracy of the data referred to therein:
5. DUTIES OF USERS AND PROHIBITED BEHAVIOURS
As a user of our web/APP platforms, you are obliged not to use OLI's systems unlawfully or attack them, and you may be held liable if you do so or attempt to do so. Examples of such unlawful behaviour include, but are not limited to: a) installing or attempting to install a computer virus; b) breaking the security of the system or testing its possible vulnerabilities; c) promoting, or attempting to promote, "denial of service" actions; d) sending, or attempting to send, SPAM to any email addresses made available to you by us.
6. HOW TO CONTACT YOUR CONTROL AUTHORITY?
Comissão Nacional de Proteção de Dados (CNPD) is the supervisory authority in Portugal, and you can contact it through several channels:
• Address: Rua de São Bento, nº 148-3º, 1200-821 Lisboa
• Telephone (+351) 213 928 400 / Linha de Privacidade: (+351) 213 930 039
• Email: geral@cnpd.pt www.cnpd.pt/en
• Complaint submissions here.
7. INTELLECTUAL PROPERTY CONTENT AND RIGHTS
Unless otherwise indicated, the texts, images, illustrations, graphics, sounds, animations and videos, graphic design and web design of the website/APP are the property of OLI and are protected by applicable legislation on copyright and related rights, intellectual property rights and, where applicable, industrial property rights. The content of this website/APP may not be copied, reproduced or altered for commercial or other purposes.
Any use, by any means or form, of the contents of the website / App, or of any rights of OLI or of any group company, whether total or partial, requires prior and written authorization from OLI. The user, accessing our website / App, undertakes not to perform any act that is likely to violate OLI's rights mentioned above.
This website/APP may contain links to websites operated by companies other than OLI or the OLI Group. OLI does not control any content of such websites or the timeliness thereof, nor is OLI responsible for such content.
8. SUSPENSION OR INTERRUPTION OF ACCESS
We have the prerogative to temporarily suspend or permanently interrupt access to the website/APP for the period we deem appropriate or necessary, and for reasons of any kind, which may include technical reasons, maintenance of the website/APP, cases of force majeure, or security reasons.
9. CHANGE IN PRIVACY POLICIES
We may occasionally change our Privacy Policy. If you want to stay up to date, visit our website / App and its privacy page regularly.
