ISF Group logo

GDPR

Privacy Policy

This Privacy Policy describes how ISF processes personal data through this website, the main purposes of that processing, and the rights of data subjects.

Last updated: 09 August 2026

1. About this Privacy Policy

This Privacy Policy explains, in a concise way, how ISF processes personal data through this website, why it does so, and which key rights apply to data subjects.

2. Data controller

ISF - SERVICOS INDUSTRIAIS E FORNOS UNIPESSOAL LDA (VAT/Company ID 515900109) is the data controller for personal data processed through this website.

  • Rua Garcia de Resende N.o 11, Loja B
  • 2500-208 Caldas da Rainha
  • Portugal
  • Privacy email: isfgroupoffice@gmail.com
  • Website: https://isf-group.pt/

3. What personal data do we process?

The data we process depends on how you use the website.

  • Applications: name, email, phone, desired role/career, message, CV, and information associated with application management.
  • Contacts: name, company name, email, phone, subject, and message.
  • Website usage: technical and usage data necessary for operation, security, and, where authorized, statistical analysis of the website.

4. How and why do we use your data?

We use personal data for specific purposes, based on the legal grounds that apply to each context.

Managing applications and recruitment processes: application data and CV; legal basis: pre-contractual steps and other legally applicable grounds. This processing does not depend on consent for future opportunities.

Contacting the candidate about future professional opportunities: application data and CV; legal basis: candidate consent. This consent is optional. If it is not given, the data will not be used to contact the candidate about other opportunities.

Responding to contact requests sent through the website: data provided in the contact form; legal basis: steps requested by the data subject and/or legitimate interests, depending on the nature of the request.

Security and prevention of abusive use: strictly necessary technical data; legal basis: legitimate interests.

Statistical analysis of website usage: usage data associated with applicable analytics technologies; legal basis: consent.

5. Who may we share your data with?

Data may be accessed internally by authorized ISF personnel, including Administration and Human Resources, when necessary for the stated purposes.

Data may also be processed by technology providers used for website operation, storage, security, and analytics, including Google/Firebase services where applicable.

Some providers used by ISF may process data outside the EEA. Where applicable, such transfers are carried out in accordance with the mechanisms and safeguards required by applicable data protection law.

6. How long do we keep your data?

We retain data only for as long as necessary for the identified purposes.

  • Applications: for the duration of the recruitment process and, at most, 12 months after submission. If the data is no longer needed sooner, it will be deleted at that point.
  • Future professional opportunities: if the candidate gives consent, application data and the CV may be kept for this purpose for up to 12 months. If consent is not given, the data will not be used for future opportunities and will be deleted when it is no longer needed for the application, and in any event no later than the 12-month maximum stated above.
  • Website contact requests: up to 12 months.
  • Data may be retained longer when necessary to comply with legal obligations or to establish, exercise, or defend legal claims.

7. How do we protect your data?

ISF adopts appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

8. What are your rights?

Under applicable GDPR rules, you may exercise rights such as access, rectification, erasure, restriction, objection, data portability (where applicable), and withdrawal of consent where processing depends on it.

To exercise your rights or ask privacy-related questions, you may contact: isfgroupoffice@gmail.com

Without prejudice to other remedies, you may lodge a complaint with Comissao Nacional de Protecao de Dados (CNPD).

Official website: https://www.cnpd.pt/

  • Access.
  • Rectification.
  • Erasure.
  • Restriction.
  • Objection.
  • Data portability, where applicable.
  • Withdrawal of consent, where applicable.

9. Cookies

The website uses cookies and similar technologies. Some are necessary for the website to operate, while others, such as those used for statistical analytics, depend on user consent.

For more information about the cookies used and how to manage your preferences, please see the Cookie Policy.

10. Changes to this Policy

This policy may be updated whenever necessary.

The last updated date is shown at the top of this page.

Important note

This content is provided for information about current website practices and does not constitute legal advice.