Skip to content
Candigrés Ceramic

Privacy Policy

Last updated: September 27, 2026

Candigrés – Cerâmica de Grês da Candieira Lda. (“Candigrés”, “we”) respects your privacy. We process your personal data in accordance with Regulation (EU) 2016/679 — the General Data Protection Regulation (“GDPR”) — and Portuguese Law No. 58/2019 of 8 August. This policy explains what data we collect through this website, for what purposes, on what legal basis, and what your rights are.

1. Data controller

Company
Candigrés – Cerâmica de Grês da Candieira Lda.
VAT number
PT503745847
Address
E.N. 334, km 42, 3780-403 Anadia, Aveiro – Portugal
Privacy contact
candigres@candigres.com

2. Personal data we process

  • Data you provide — when you contact us via the form, by email or by phone: name, company, job title, email, phone number, country and the content of your message (for example, details of your project).
  • Business relationship data — if you are a customer, distributor or supplier: business contact details, billing data and order history.
  • Technical data — when you visit the website, the server automatically logs data such as your IP address, browser type, date and time of access and the pages visited, to keep the website secure and working properly.
  • Cookies — see our Cookie Policy.

We do not intend to process special categories of data (Article 9 GDPR), so please do not include them in your messages.

  • Answering requests for contact, technical information, samples or quotations — steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in responding to business enquiries (Article 6(1)(f)).
  • Managing the business relationship (orders, invoicing, deliveries and technical support) — performance of a contract (Article 6(1)(b)) and compliance with legal obligations, including tax and accounting obligations (Article 6(1)(c)).
  • Sending commercial communications about products and news — your consent (Article 6(1)(a)), which you may withdraw at any time; for customers, our legitimate interest in promoting similar products, which you may object to in every communication.
  • Keeping the website secure and working and preventing abuse — our legitimate interest (Article 6(1)(f)).
  • Establishing, exercising or defending legal claims — our legitimate interest (Article 6(1)(f)).

4. Retention periods

We keep data only for as long as necessary for the purposes for which it was collected:

  • Contact requests that do not lead to a business relationship: up to 3 years after the last contact.
  • Customer and supplier data: for the duration of the business relationship and, afterwards, for the statutory retention periods (for example, 10 years for accounting and tax records).
  • Technical server logs: up to 12 months, unless needed to investigate a security incident.
  • Data processed on the basis of consent: until consent is withdrawn.

5. Recipients

Your data may be disclosed to:

  • service providers acting on our behalf as processors (website hosting and maintenance, email and IT services, transport and logistics), bound by contract under Article 28 GDPR;
  • Candigrés distributors and sales agents in your region, where necessary to handle your request;
  • public authorities, where required by law.

We do not sell your personal data or share it for third-party marketing.

6. International transfers

As a rule, your data is processed within the European Economic Area (EEA). If a service provider processes data outside the EEA, the transfer only takes place with appropriate safeguards, such as a European Commission adequacy decision or standard contractual clauses (Articles 45 and 46 GDPR).

7. YouTube videos

Videos embedded on this website are only loaded when you press the play button. At that point the player is loaded from youtube-nocookie.com, and Google Ireland Limited receives technical data such as your IP address and may store cookies on your device, under its own privacy policy (policies.google.com/privacy).

8. Your rights

Under the GDPR, you have the right to:

  • access your personal data and obtain a copy;
  • have inaccurate or incomplete data rectified;
  • have your data erased (the “right to be forgotten”);
  • restrict processing;
  • receive the data you provided to us in a structured, commonly used format (portability);
  • object to processing based on our legitimate interest and, at any time, to direct marketing;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

To exercise your rights, contact us at candigres@candigres.com or by post at the address above. We reply within one month, which may be extended in the cases provided for in the GDPR. We may ask for additional information to confirm your identity.

You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD — www.cnpd.pt), or with the supervisory authority of the Member State where you live or work.

9. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or destruction, including encrypted connections (HTTPS) across the whole website and access to data restricted to authorised persons.

10. Minors

This website is intended for professionals and businesses and is not directed at minors. We do not knowingly collect data from minors.

11. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the last update is shown at the top of this page.