Special Data Processing Information Sheet
Users of the Website www.borgstena.com
Information provided to users of the Borgstena Group's institutional website, in compliance with Articles 12, 13 and 14 of the GDPR.
This Special Sheet describes the processing of personal data of users of the institutional website www.borgstena.com, in the context of its use for information, contact and application purposes, and complements the General Data Processing Information Sheet and the Special Sheet on Cookies.
1.Commitment to information and transparency
The Borgstena Group complies with the duty to inform users of its website set out in Articles 12 to 14 of the GDPR, providing in this Sheet the information relating to the processing of personal data collected in the context of the use of the site.
2.Identification of the controller
| Company name | Dual Borgstena Textile Portugal, Unipessoal, Lda. |
|---|---|
| Identification number | 502355409 |
| Registered office | EN 234 — km 87.7 (Chão do Pisco), Apartado 35, 3521-909 Nelas |
| General telephone | (+351) 232 427 660 |
| General email | info@borgstena.com |
| Website | www.borgstena.com |
3.Data Protection Officer
For any matter relating to the processing of their personal data in the context of the website, the user may contact the Data Protection Officer at dataprotection@borgstena.com.
4.Scope of application
This Sheet applies to users of the institutional website www.borgstena.com, namely visitors who consult its content, those who submit contact forms, those who submit spontaneous applications and those who subscribe to institutional communications. It does not apply to other sites or applications that may be subject to their own sheets.
5.Processing activities
| Purpose | Categories of data | Lawful basis | Recipients | Retention |
|---|---|---|---|---|
| Availability and operation of the site | Online identifiers, IP address, device and browser data, access logs. | Legitimate interest in the operation and security of the site (Article 6(1)(f) of the GDPR). | Borgstena's technical services; hosting and security processors. | For the period necessary for operation and security, in accordance with the terms defined for each cookie or technical record. |
| Management of requests submitted by contact form | Identification, contacts, content of the request and attachments. | Pre-contractual steps (Article 6(1)(b) of the GDPR); legitimate interest in responding to contacts (Article 6(1)(f) of the GDPR). | Competent Borgstena services, depending on the content of the request. | For the period necessary to respond to the request and any possible development into a contractual relationship. |
| Receipt of applications submitted through the site | Identification, contacts, education, professional experience, curriculum vitae. | Pre-contractual steps at the applicant's request (Article 6(1)(b) of the GDPR); consent for spontaneous applications (Article 6(1)(a) of the GDPR). | Human resources management services. | For the period set out in the Data Processing Policy in Application Management, two years by default. |
| Subscription to institutional communications | Identification, email address, communication preferences. | Consent (Article 6(1)(a) of the GDPR), under the electronic communications regime (Law No. 41/2004 of 18 August). | Institutional communication services; communication delivery processors. | Until consent is withdrawn or the user objects. |
| Statistical analysis of site usage | Online identifiers, traffic and usage data collected through analytical cookies. | Consent (Article 6(1)(a) of the GDPR; Article 5 of Law No. 41/2004). | Borgstena's technical services; statistical analysis service providers, under Article 28 of the GDPR. | For the useful life of the analytical cookies, without prejudice to withdrawal of consent. |
6.Categories of personal data processed
In the context of the use of the site, Borgstena may process identification data, contact data, online identifiers (IP address, device and browser identification), traffic and usage data of the site and data voluntarily provided by the user through forms, including, where applicable, data contained in curricula vitae.
7.Source of the data
Personal data are collected directly from the user, at the time of access to the site or of submission of forms, or automatically, in the case of online identifiers and data collected through cookies, in accordance with the Cookies Policy and the Special Sheet on Cookies.
8.Recipients and processors
Personal data are processed by the internal services of Borgstena strictly competent in view of the purpose. Borgstena may engage processors for the technical operation of the site, namely hosting, security, statistical analysis or communication delivery services, concluding with each of them the contracts provided for in Article 28 of the GDPR. Outside these cases, personal data are communicated to third parties only where there is a legal obligation or express authorisation of the user.
9.International transfers
The operation of the site and the use of third-party services, namely for statistical analysis or protection against automated attacks, may imply the transfer of personal data outside the European Economic Area. Such transfers observe the requirements of Chapter V of the GDPR, namely the applicable adequacy decisions or the appropriate safeguards in place, including standard contractual clauses.
10.Automated decisions and profiling
The processing described in this Sheet does not involve automated individual decisions likely to produce legal effects on the user, within the meaning of Article 22 of the GDPR.
11.Data retention
Personal data are retained for the period necessary to pursue the purposes of each processing activity, as indicated in the table in point 5, in compliance with the applicable legal deadlines.
12.Information security
The site has technical and organisational measures appropriate to the protection of personal data, in accordance with Article 32 of the GDPR, namely encrypted communication through secure protocols, protection against automated attacks and monitoring of access logs. Any security incidents may be reported through the Incident Reporting Form.
13.Users' rights
The user may, at any time and free of charge, exercise the rights to withdraw consent, to information, of access, rectification, erasure, restriction of processing, portability and objection, through the Rights Exercise Form or by contacting the Data Protection Officer. A response is provided within one month, extendable by two months in justified cases, under Article 12(3) of the GDPR.
14.Relationship with the other Sheets and Policies
This Sheet relates to the General Data Processing Information Sheet, to the Special Sheet on Cookies, to the Special Sheet on Applicants and to the respective policies, accessible on the Data Protection Platform.
15.Complaints to the supervisory authority
The user has the right to lodge a complaint with the National Data Protection Commission (CNPD), through the contacts available at www.cnpd.pt.
16.Versions of the Sheet
Version of this Sheet: 202605. Date: 26 May 2026. To consult previous versions, the user may send a request by email to dataprotection@borgstena.com.