Privacy policy

AIO Armazém S.L. (the ‘Company’) is an organisation dedicated to the design, manufacture and marketing of industrial and commercial refrigeration machinery, with a deep commitment to the protection of personal data. The company processes personal data responsibly, complying with current legislation and establishing the necessary procedures to protect the privacy of all individuals who interact with AIO Armazém.

Purpose

The Personal Data Protection Policy aims to guarantee compliance with applicable regulations and ensure respect for the right to data privacy of all individuals related to AIO Armazém. This policy is designed to establish the basis and principles for how the Company handles personal data, implementing organisational and security measures for its proper management.
AIO Armazém undertakes to act with proactive responsibility, constantly monitoring compliance with this policy and assigning appropriate responsibilities to staff involved in data processing.

Scope of application

This Personal Data Protection Policy applies to AIO Armazém, its administrators, managers, employees, as well as all persons who interact with the company, including service providers with access to personal data (‘Data Processors’).

Principles of personal data processing

AIO Armazém will strictly comply with data protection legislation, adopting the principle of ‘proactive responsibility’ and taking a ‘risk-based approach’ to protect the rights of data subjects. The principles governing the processing of personal data at AIO Armazém include:
Lawfulness, fairness, transparency and purpose limitation. Data will only be processed with the prior consent of the data subject, or when there is another valid legal basis for doing so. Furthermore, processing will be aligned with specific, legitimate and clearly defined purposes.
Data minimisation. Only data that is strictly necessary to fulfil the established purposes will be collected.
Accuracy. Personal data shall be accurate and, where necessary, kept up to date. Measures shall be taken to correct or delete inaccurate data promptly.
Limitation of retention period. Data will be retained only for as long as necessary to fulfil the purposes for which it was collected.
Integrity and confidentiality. AIO Armazém shall take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or accidental damage.
Data transfers. AIO Armazém prohibits the collection of personal data from unlawful sources or through practices that contravene the law. Data will be processed in accordance with the principles of legality, transparency and security.
Hiring suppliers with access to data. The Company will only hire suppliers who guarantee the application of adequate security measures in data processing. Legal agreements will be formalised with these third parties to ensure data protection.
International data transfers. Any transfer of data outside the European Economic Area (EEA) will be carried out in accordance with the legal requirements set out in European legislation.
Rights of data subjects. AIO Armazém guarantees the exercise of the rights of access, rectification, erasure, restriction, objection and portability by data subjects. Internal procedures will be designed to facilitate the exercise of these rights, in compliance with the applicable legal requirements.
AIO Armazém promotes the integration of these principles into the design and implementation of its operational procedures, products and services, as well as into contracts and agreements with third parties.

Monitoring and evaluation

The company will carry out periodic assessments to verify the effectiveness of the security measures adopted in the processing of personal data. These assessments will be carried out at least once a year, or whenever significant changes are made to data processing.

Regulatory compliance

AIO Armazém S.L. undertakes to comply with all applicable laws and regulations regarding personal data protection, and to ensure this compliance, the company has the support of external consultants specialising in the area of data protection. In addition, AIO Armazém conducts periodic assessments to verify the adequacy of its practices in accordance with current data protection regulations.