Privacy Policy

We are the Laskasas Group, composed of the following companies:

• LASKASAS, S.A.

• HOME RECOVER - OBRAS & REMODELAÇÕES, UNIPESSOAL, LDA

• KAPAGO TRANSPORTES LDA

• LASKASAS SGPS, S.A.

• SERRALUX PRODUTOS METALICOS LDA

• SOPHIA RESOLVE IMOBILIÁRIA, S.A.

• LASKASAS WORLD UNIPESSOAL, LDA

• LASCASAS & AMARAL PROPERTY INVESTMENTS LDA

• LASCASAS REAL ESTATE LDA

• MASOF, SGPS

We act as joint controllers of your data, which means we are collectively responsible for how your data is used and protected.

We use your data (collected either online or in person), among other purposes, to manage your registration as a user, process the purchase of products or services, respond to your inquiries, and send you personalised communications.

We are entitled to process your data for various reasons. The main reason is that we need to process it to execute the contract you agree to when making a purchase, or to provide a quote (pre-contractual obligations), or to allow you to use certain services or features. Other reasons may include our legitimate interest in responding to your questions or the consent you give us to send you our newsletter, among others.

We share your data with service providers who assist or support us, including other Laskasas Group companies or external partners with whom we have contractual agreements. All these parties are located in Portugal.

You have the right to access, correct, or delete your data. In some cases, you may also have other rights, such as the right to object to our use of your data or the right to data portability. These rights are explained in detail below. You may request the deletion of your data at any time by emailing us at: rgpd@laskasas.com

We invite you to read the complete Privacy Policy below to understand how we use your data and all the rights you have regarding it.


BEFORE YOU BEGIN
In this Privacy Policy, you will find all the relevant information about how we use the personal data of our customers and users, regardless of the channel or medium (online or in person) you use to interact with Laskasas.

We are transparent about what we do with your data so that you understand how it is used and what your rights are:

• You can always access this Privacy Policy to find the information you need.
• You will also find specific details regarding how we use your data depending on how you interact with us.

Some terms we use in this Privacy Policy:

• When we mention our Platform, we refer to all channels or media—digital or in person—used to interact with us. These mainly include:

• • Our website: www.laskasas.com
  • Our physical stores

1 — WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA

The entities responsible for processing your data are:

Laskasas, S.A., with NIPC 507 272 102, headquartered at Rua Facho, n.º 576, Rebordosa, Paredes, hereinafter referred to as Laskasas.

Data Protection Officer’s email address: rgpd@laskasas.com

2—  WHY WE PROCESS YOUR DATA

Depending on your interaction with us and the services or features you use, we may need to process the following personal data:

• Identification data (e.g. name, address, tax number, contact details)
• Economic and transactional data (e.g. financial information if requesting product financing)
• Commercial data (e.g. newsletter subscriptions)
• Preferences and interests

When we ask for personal data to provide access to a particular feature or service on our Platform, we will mark the required fields. If you do not provide this information, we may not be able to register you or give you access to certain features or services.

We process your data for the following purposes:

Purpose

1— To respond to your inquiries via our Customer Support channels

We only process the personal data strictly necessary to manage or resolve your inquiry.

2. For marketing purposes

We process your data to:

• Send you personalised information about our products or services, via channels such as email, MMS, or SMS, based on the consent you give when subscribing to our communications.
• Note: This processing does not involve analysing your user or customer profile to determine preferences.
• Organise promotional activities (e.g., fairs, contests, or emailing saved article lists).

You can unsubscribe from these communications at any time by sending an email to rgpd@laskasas.com.

3— TO ANALYSE AND IMPROVE THE QUALITY OF OUR SERVICES

If you access our Platform, we will not analyse browsing data for statistical or analytical purposes.

We may occasionally carry out quality surveys to measure customer satisfaction and identify areas for improvement. You will be informed in advance if your data will be used for this purpose.

4— WHAT IS OUR LEGAL BASIS FOR PROCESSING YOUR DATA?

The legal basis depends on the purpose for which we process your data:

Purpose

1— Responding to support requests

Processing is necessary to fulfil our obligations under the Platform’s terms of use. Without this data, we cannot manage your request.

If you use social media or our website to contact us, your consent enables us to process the data shared through those platforms.

2— Fulfilling contracts

We process your data to conclude and manage sales or service contracts with you. In cases like storing payment data for financing, your consent will be required. We also have a legitimate interest in performing fraud checks to protect all parties involved.

3— Customer Support

We have a legitimate interest in processing your requests and inquiries, as it enables us to provide better service and recommend relevant products.

If your inquiry relates to product/service issues or exercising your data protection rights, we process your data based on our legal obligations or your consent.

4— Marketing

The legal basis for marketing activities is your explicit consent, such as when you agree to receive personalised messages.

5— HOW LONG WILL WE KEEP YOUR DATA?

The retention period depends on the purpose:

Purpose

1— User registration

We retain your data for as long as you remain a registered user.

2— Sales or service contracts

We retain your data for the duration required to manage your purchases, including handling returns or complaints, up to 3 years.

3— Customer Support

We retain your data for as long as needed to address your inquiry.

4— Marketing

We will process your data until you unsubscribe or request deletion by emailing rgpd@laskasas.com. If no request is made, we will retain your data for marketing purposes for up to 10 years.

Regardless of the above, we may keep your data securely stored beyond these periods to comply with legal obligations. Once the statute of limitations for each scenario expires, your data will be deleted.

6— DO WE SHARE YOUR DATA WITH THIRD PARTIES?

To fulfil the purposes stated in this Privacy Policy, we may share your data with:

• Laskasas Group companies
• Third-party service providers, including:
  • Financial institutions
  • Technology providers
  • Logistics, transport, and delivery providers
  • Customer support services
  • Marketing and advertising partners

All third parties are located within the European Economic Area. When data is shared, we ensure appropriate safeguards are in place to maintain your data's security.

7— WHAT ARE YOUR RIGHTS?

We are committed to respecting the confidentiality of your data and enabling you to exercise your rights at no cost.

You may contact us at rgpd@laskasas.com and simply specify which right you wish to exercise and the reason for your request. If necessary, we may ask for identification (e.g., a copy of an ID document).

At Laskasas Group, safeguarding your personal information is a priority. This Privacy Notice explains how we collect, process, and protect the personal data of:

• Candidates applying for a role through our website, recruitment platforms, or social media;
• Individuals we may contact about potential career opportunities;
• Users who interact with our website or digital platforms in the context of recruitment.

It also outlines your rights regarding your data, including your right to object to certain types of processing. For further details, please see the “How to Contact Us” section of this policy.

1— What data do we collect from candidates?

When you apply for a position at Laskasas, we may collect:

• Identification and contact information (e.g. name, phone number, email)
• CV details, including qualifications, experience, and skills
• Information about your eligibility to work, including references and academic verification
• Diversity data (e.g. ethnicity, religion, sexual orientation) for equal opportunity monitoring, where permitted by law
• Health-related data (e.g. information about disabilities requiring workplace adjustments)
• Criminal record data, if relevant and legally required

We also collect data from your interactions with our website, emails, and job alerts. Additionally, we may receive information from third parties such as:

• Former employers (employment verification)
• Referees (recommendations and feedback)
• Educational institutions (academic history)
• Credit agencies (where legally justified)
• Public platforms (e.g. LinkedIn, Indeed)
• Clients who have reviewed or responded to your profile

2— Potential Candidates

If you haven’t applied directly, we may still collect publicly available professional data (e.g. from LinkedIn or recruitment platforms) or receive a referral from another contact. This helps us reach out with suitable career opportunities.

3— Website and Application Users

We may collect:

• Technical information (IP address, browser, device type)
• Usage data (pages viewed, time spent, interaction patterns)
• Communication data (enquiry details when you contact us)

We use cookies and similar technologies for this. For more details, see our Cookie Policy.

4— How We Use Your Information

4.1 Candidates

We use your data to:

• Share relevant job opportunities with you
• Manage your applications and communications
• Build your candidate profile for a tailored experience
• Support our diversity and inclusion efforts
• Provide interview, CV, and salary guidance
• Send you industry updates, events, and content (if you’ve opted in)

We may also use cookies and advertising tools (with your consent) to personalise job ads and marketing content you see on our platforms and social media.

4.2 Potential Candidates

We use your data to:

• Assess your potential interest in open positions
• Contact you about relevant opportunities

4.3 Website or App Users

We use your data to:

• Enhance your experience
• Improve website functionality and personalise advertising

5— Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contractual necessity – when managing applications or hiring processes
• Legal obligation – to comply with legal or regulatory requirements
• Legitimate interests – such as improving user experience, recruitment communication, and talent acquisition
• Consent – for marketing communication or optional features (e.g. job alerts), which you can withdraw at any time

We ensure that any reliance on legitimate interest does not override your fundamental rights. You may request more details about our legitimate interest assessments.

6— How We Protect Your Data

We apply strict technical and organisational safeguards to ensure your data is secure against loss, misuse, or unauthorised access. Only authorised personnel, bound by confidentiality agreements, can access your data.

7— Data Retention

We retain your data only as long as necessary for recruitment and hiring purposes. If you become a candidate, we may store your data for the duration of our relationship and possibly longer to support your career over time.

Retention periods vary depending on:

• The nature and purpose of the data
• Legal, regulatory, or contractual obligations
• Risk of potential misuse

You can request more details about how long we store your specific data by contacting us directly.