Privacy, Data Protection & Cookies Policy
Framework
CANNPRISMA-PHARMA, Lda., with tax identification number 515068110 and headquarters at Avenida Ville La Baule, 58, 8900-227 Vila Real de Santo António, is a company dedicated to the production and commercialization of pharmaceutical products derived from natural plants, operating under EU-GMP standards.
Data Controller: CANNPRISMA-PHARMA, Lda.
DPO (Data Protection Officer): Carla Bringel
Contact: privacypolicy@cannprisma.com
Scope
This Privacy Policy applies to the processing of personal data carried out by CANNPRISMA within the scope of its commercial activities, including the management of employees, candidates, newsletter, website and B2B commercial relationships.
Personal Data
Personal data means any information relating to an identified or identifiable natural person, including contact data, contractual information, banking data and, where applicable, occupational health data.
Data Controller
CANNPRISMA is responsible for the collection and processing of personal data within the meaning of the General Data Protection Regulation, deciding the categories of data collected, how they are processed and the purposes for which they are used.
For questions related to the processing of your personal data, you should contact us through the following means: privacypolicy@cannprisma.com or Avenida Ville La Baule, 58, 8900-227 Vila Real de Santo António.
Categories of Data Processed
CANNPRISMA processes the following categories of personal data:
Website and Newsletter Data: name, email, telephone and IP address, collected with consent for commercial and informational communication purposes.
Employee Data: personal identification data, contractual information, banking data and occupational health data resulting from occupational medicine and sick leave, processed based on employment contract execution, compliance with legal obligations and protection of vital interests, for human resources management and compliance with labour and safety obligations.
Candidate Data: CV, contact data and professional qualifications, processed based on legitimate interest for recruitment and selection purposes.
B2B Commercial Data: commercial contacts, contractual data and billing information, processed based on contractual execution and legitimate interest for commercial relationship management and contractual obligations compliance.
International Transfers
For clients and suppliers outside the European Union, CANNPRISMA applies Standard Contractual Clauses approved by the European Commission, ensuring an adequate level of personal data protection.
Retention Period
CANNPRISMA retains personal data for the following periods:
Newsletter: until revocation of consent by the data subject.
Candidates: 1 years after completion of the recruitment process.
Employees: 10 years after termination of employment contract, in compliance with labour and tax obligations.
Commercial data: 10 years after termination of commercial relationship, in compliance with accounting and tax obligations.
Website and Analytics: 2 years for navigation and analytical data.
Website Analytics and Cookies
Our website uses Independent Analytics plugin for website traffic analysis, which operates with privacy-focused principles and minimal data collection. This analytics system processes aggregated visitor data without storing personal identifiers or requiring third-party data transfers.
We may use essential cookies necessary for website functionality. Any non-essential cookies would only be used with your explicit consent, which can be managed through your browser settings.
You may configure your browser to notify and reject the installation of cookies, recognizing that such behaviour may affect the normal functioning of the website.
Data Subject Rights
Data protection legislation guarantees data subjects the following rights, which can be exercised through the email privacypolicy@cannprisma.com, with a response period of 30 days:
Right of Access: obtain confirmation about the processing of your personal data and access to them.
Right of Rectification: rectify, delete, update and/or modify your data at any time.
Right to Restriction of Processing: obtain restriction of processing when you contest the accuracy of data, processing is unlawful, or data is required for declaration, exercise or defense of rights.
Right to Data Portability: receive personal data in a structured, commonly used and machine-readable format, when processing is based on consent and carried out by automated means.
Right of Objection: object to the processing of your personal data based on legitimate interest or for direct marketing purposes.
Right to Withdraw Consent: withdraw consent at any time, when this constitutes the legal basis for processing.
Security Measures
CANNPRISMA ensures the security of personal data through the adoption of various security measures, of a technical and organizational nature, to protect personal data against its dissemination, loss, misuse, alteration, processing or unauthorized access, as well as against any other form of unlawful processing.
Among others, we highlight the following measures: restricted access to personal data only by those who need them for the established purposes; storage and transfer of personal data only in a secure manner; protection of information systems to prevent unauthorized access; implementation of mechanisms that guarantee the safeguarding of integrity and quality of personal data; permanent monitoring of information systems to prevent, detect and prevent misuse of personal data; redundancy of personal data storage, processing and communication equipment to avoid loss of availability.
Communication to Third Parties
CANNPRISMA will not transfer your data to other entities without your prior and express consent, except when necessary for compliance with legal or contractual obligations.
CANNPRISMA may also transmit data to third parties within the scope of investigations, inquiries and judicial and/or administrative proceedings or of a similar nature, provided that it is duly ordered by a court decision to that effect.
Changes to the Privacy Policy
CANNPRISMA reserves the right to readjust or change this Privacy Policy at any time, with these changes being published on the website.
Contacts
For questions about personal data: privacypolicy@cannprisma.com CANNPRISMA-PHARMA, Lda. Avenida Ville La Baule, 58 8900-227 Vila Real de Santo António
Supervisory Authority: Comissão Nacional de Proteção de Dados (CNPD)