Privacy policy


 IRMADE – Indústrias de Revestimento de Madeiras S.A (IRMADE) is committed to safeguarding the privacy of all users of its website, and has put together this privacy policy for this purpose.

To ensure its commitment to user privacy, IRMADE employs best practices for security and personal data protection, as described below.

As such, to ensure that all personal data is processed and protected in accordance with the new General Data Protection Regulation, we ask that you please read our new privacy and data protection policy carefully.

It is extremely important that you read and give your express consent for us to keep and process your personal data for the purpose of sending authorized communications in accordance with the rules described below.

In addition, please note that simply browsing or visiting IRMADE's website does not necessarily entail the use of cookies or collection of your personal data.


1. Personal Data


"Personal data" means any information, regardless of its nature or format, related to an identified or identifiable natural person.

A natural person who can be identified, directly or indirectly, in reference to an identifier (e.g. identification number, location data, electronic identifiers or one or more specific features of his/her physical, physiological, genetic, mental, economic, cultural or social identity), is considered identifiable.

The following personal information may be gathered through this website in accordance with the purpose of collecting the data: (i) name, (ii) date of birth, (iii) contact information (telephone and email), (iv) company represented and (v) relevant information needed to evaluate the suitability of job applicants, namely professional background and education.


2. Data Controller


IRMADE, legal entity number 500142025, with its registered office at Vale Travesso, 2494-909 Ourém – Portugal is the data controller for the purposes described below.

If you believe the information in this privacy policy is not sufficiently clear and/or transparent, or for any other reason deemed relevant, please contact us at the following email address:


3. Purpose of Personal Data Processing


Personal data is collected and processed at IRMADE's website for the following purposes: (i) recruitment and selection of applicants, as well as (ii) sending, at the user's express request, of service proposals and/or estimates (or other product and/or service information); therefore, filling out a form for a given purpose and/or sending a curriculum vitae corresponds to express prior consent for the processing of personal data conveyed.

When a user gives his/her express prior consent for the processing of personal data (which may be withdrawn at any time, per point 5 below), IRMADE agrees to process personal data to the extent and for the time needed for the purposes in question.

As such, IRMADE shall not be held liable for the processing of personal data transmitted to it under this Privacy Policy.


4. Retention of Personal Data


The period of time for storing and keeping personal data will vary in accordance with the purposes described above.

As such, note that personal data related to recruiting and selecting applicants may be kept for the period of time needed for fulfilling the purpose in question.

Personal data whose purpose involves sending estimates, service proposals and/or information on IRMADE's new products and services will be kept for 1 (one) year following the last contact with the data subject, notwithstanding potential additional time whenever justified by the situation.


5. Right to access, correct, delete and limit processing, and right to personal data portability


Users shall, at all times, have the right to access their personal data, together with the right to data correction, deletion, portability, limited processing and/or denial of processing, and may exercise any of these rights in writing to IRMADE via post to its registered office or via email at:

In addition, users may lodge complaints considered necessary, at any time, to the authority competent for this purpose (CNPD – Portuguese Data Protection Authority, or its successor).


6. Security in Personal Data Processing


Personal data will be processed and stored in electronic and hardcopy format.

 IRMADE is committed to ensuring that the personal data you send to us via the website is kept secure and protected, and it has adopted suitable measures necessary for this purpose, namely: (i) password protection, (ii) use of digital certificates, (iii) restricted physical access to the locations of servers housing personal data; (iv) firewalls,

In the event, for any reason, of a security breach accidentally or illicitly resulting in unauthorized access to personal data or the destruction, loss, modification or disclosure of personal data, IRMADE undertakes to notify the competent authorities, pursuant to applicable legislation, without unjustified delay and always within 72 hours, whenever possible, of becoming aware of the breach.

In addition, pursuant to the above paragraph, IRMADE shall notify the data subject of the personal data breach, pursuant to applicable legislation.

Notwithstanding the security measures employed by IRMADE, it is important to note that users must also adopt additional security measures, such as an active firewall and up-to-date antivirus and anti-spyware.


7. Disclosure of Personal Data to Third Parties


In conducting its business, IRMADE may use third parties for the provision of certain services (located within and outside of the European Union) which, in some cases, may result in the disclosure of users' personal data to these entities.

In fact, any entities subcontracted by IRMADE will process users' personal data, in its name and on its behalf, in its commitment to employ the necessary technical and organizational measures to protect personal data against accidental or illicit destruction, accidental loss, modification, dissemination or unauthorized access, and against any means of illicit processing.


8. Right of Deletion


Personal data subjects shall have the right to the deletion of their personal data, which the data controller, in turn, shall be obliged to delete, on any of the following applicable grounds: (i) the data is no longer needed for the original purpose of its collection or processing; (ii) the data subject withdraws his/her consent, when such consent is the legal basis, or the data subject denies its processing, and there are no prevailing legitimate interests to justify keeping it.


9. Access to third-party websites


This privacy policy shall not apply to third-party websites. As such, whenever you visit another website through this website, you should always read the applicable privacy policy and decide if you agree with its terms before providing your personal data.


10. Changes to Privacy Policy


IRMADE reserves the right, at any time, to make adjustments or changes to this Privacy Policy, which will be duly published at this website.