Identification of the data controller
Association: NERLEI – Associação Empresarial da Região de Leiria (hereinafter “NERLEI”)
Registered office: Av. Bernardo Pimenta, Ed. NERLEI 2404-010 Leiria
NIPC (Tax ID): 502286296
Telephone: +351 244 890 200
E-mail: nerlei@nerlei.pt
Information and consent
The Personal Data Protection Law (hereinafter “LPDP”) and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter “GDPR”) ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.
For legal purposes, “personal data” means any “information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to that natural person’s physical, physiological, genetic, mental, economic, cultural or social identity”.
By accepting this Privacy Policy, the user gives their informed, express, free and unequivocal consent to the fact that the personal data provided through the website https://sustainablepackpt.pt are under the responsibility of NERLEI, whose processing, in accordance with the legislation on personal data protection, complies with the appropriate technical and organisational security measures.
NERLEI maintains a database with the records of its clients, composed solely of the personal data provided by the data subject at the time of registration, which are collected and processed automatically by NERLEI, as the entity responsible for the processing of personal data.
Under no circumstances will personal data be requested regarding racial or ethnic origin, political opinions, religious or philosophical beliefs, political opinions, trade union membership, data concerning health or sex life, genetic or biometric data, or data relating to sex life or sexual orientation.
Under no circumstances will NERLEI carry out any of the following activities with the personal data provided through this website, without the prior explicit consent of the data subject:
- Transfer data outside the European Economic Area (EEA);
- Disclose them to other persons or entities.
Purposes of the processing of personal data
The personal data processed through this website will be used solely for the following purposes:
- Communication and clarification;
- Applications or registrations;
- Management of the provision of services inherent to NERLEI’s activity;
- Handling of information requests;
- Handling of complaints;
- Disclosure of data to public or private entities in compliance with a contractual or legal obligation;
- Informative communications and marketing.
NERLEI guarantees the confidentiality of all data provided. Although NERLEI collects and processes data in a secure manner that prevents their loss or manipulation, using the most appropriate techniques for this purpose, it is important to bear in mind that data collection over open networks allows personal data to circulate without security conditions, with the risk of being seen and used by unauthorised third parties.
Failure to provide the data marked as mandatory will make it impossible to respond to the data subject’s request.
Security measures
NERLEI declares that it has implemented and will continue to implement the technical and organisational security measures necessary to ensure the protection of the personal data provided, in order to prevent their alteration, loss, unauthorised processing and/or access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.
NERLEI guarantees the confidentiality of the data provided through this website. Data collection and processing are carried out securely, preventing their loss or manipulation.
Personal data are processed with the level of protection legally required to ensure their security and prevent alteration, loss, unauthorised processing or access, taking into account the state of the art, the user being aware of and accepting that security measures on the Internet are not impregnable.
Whenever NERLEI accesses personal data, it undertakes to:
- Store them by means of legally required technical and organisational security measures which guarantee their protection, thus preventing alteration, loss, processing or unauthorised access, in accordance with the state of technology at any given time, the nature of the data and the possible risks to which they are exposed;
- Use the data exclusively for the purposes previously defined;
- Ensure that the data are processed solely by employees whose intervention is necessary to meet the data subject’s request, and who are bound by a duty of secrecy and confidentiality. Should the information be disclosed to third parties for the aforementioned purposes, they shall be required to maintain the same confidentiality, in accordance with the provisions of this document.
Commercial and informative communications
One of the purposes for which the personal data provided by users are processed is the sending of electronic communications containing commercial information.
All such communications will be sent exclusively to users who have given their prior and express consent.
If the user no longer wishes to receive commercial or informative communications from NERLEI, they may object at any time by sending an e-mail to protecao.dados@nerlei.pt.
Exercise of rights
In accordance with the provisions of the LPDP and the GDPR, the user may exercise, at any time, their rights of access, rectification, erasure, restriction of processing, objection and data portability, by means of a written request addressed to NERLEI through the following channels:
- By post to the address: Av. Bernardo Pimenta, Ed. NERLEI 2404-010 Leiria
- By e-mail to: protecao.dados@nerlei.pt.
Supervisory authority
Under the law, the data subject has the right to lodge a complaint regarding personal data protection with the competent supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) – National Data Protection Commission (www.cnpd.pt).

