Privacy Policy

The data controller responsible for the processing of personal data described in this policy is:

FSM – Indústria de Confecções, S.A.
Tax identification number (NIF): 500 896 496
Registered office: Rua do Comércio nº 35, 4620-583 Lousada, Portugal
Telephone: +351 255 810 900
Email: geral.fsm@fsm.pt

FSM is a Portuguese public limited company (sociedade anónima) specialised in the development and manufacture of woven garments, with its head office in Lousada, Portugal, and production units in Portugal and Morocco.

This policy applies to personal data processed through the website www.fsm.pt and through the contact forms available on it. It does not apply to processing carried out in the context of employment, supplier onboarding, or manufacturing contracts, which are governed by separate documentation.

This website is a corporate, B2B presentation website. It does not operate as an online shop and does not process payments or consumer orders.

Depending on how you interact with us, we may process:

• Identification and contact data: name, company, email address, telephone number and the content of your message, when you submit a contact form.
• Technical data: IP address (processed temporarily for security and abuse prevention), date and time of the request, browser type and similar connection data generated by the hosting infrastructure.
• Communication data: emails exchanged following an enquiry, including the automatic acknowledgement sent to the address you provide.

Fields marked as required on the contact form (name, email and message) are necessary for us to handle your enquiry. If you do not provide them, we cannot respond. Company and telephone number are optional.

We do not intentionally collect special categories of personal data (such as health data, political opinions or biometric data) through this website. Please do not include such information in your message.

Personal data is collected:

• Directly from you, when you complete and submit a contact form on the Home or Contact pages.
• Automatically, to a limited extent, by our hosting provider when you browse the website (technical logs required to deliver and secure the site).
• Through third-party content loaded on specific pages, namely Google Maps embeds on the Contact page. Google may process technical data (including IP address) when those maps are displayed. Please see our Cookies Policy.

The contact form includes a hidden anti-spam field. That field is used only to detect automated submissions and is not used to collect information from genuine users.

We process personal data only for specified, explicit and legitimate purposes, in accordance with Article 6 of Regulation (EU) 2016/679 (GDPR) and Law no. 58/2019 of 8 August.

Where we rely on legitimate interests, we have assessed that those interests are not overridden by your rights and freedoms, taking into account the B2B nature of the website and the limited data collected.

We do not use your data for automated decision-making, including profiling, that produces legal or similarly significant effects.

Your data is accessed by FSM staff who need it to handle your enquiry. It may also be processed, on our instructions, by service providers acting as processors:

• Website hosting: the website is hosted on infrastructure provided by Vercel, which may process technical data strictly as needed to deliver the site.
• Email delivery: messages submitted through the contact form are sent using Resend, so that your enquiry can reach FSM and an acknowledgement can be sent to you.
• Maps: Google (Google Ireland Limited / Google LLC) may process technical data when map embeds are loaded on the Contact page.

We may also disclose data where required by law, by a competent authority, or to protect our rights in legal proceedings.

We do not sell personal data and we do not share it with third parties for their own marketing purposes.

Some of our service providers may process data outside the European Economic Area, in particular in the United States. Where that happens, we rely on an adequacy decision where one exists or on appropriate safeguards, typically the European Commission’s Standard Contractual Clauses, together with supplementary measures where required.

We keep personal data only for as long as necessary for the purposes for which it was collected:

• Contact form enquiries are retained for up to 24 months after the last interaction, unless a longer period is necessary to manage an ongoing commercial relationship or to establish, exercise or defend legal claims.
• Technical security data (such as IP addresses used to prevent repeated automated submissions) is processed on a short-term, operational basis and is not kept as a customer database.
• Data that we are required to keep under Portuguese law (for example, accounting or consumer-complaint records) is retained for the applicable legal period.

When the retention period expires, data is deleted or anonymised, unless a legal obligation requires otherwise.

Under the GDPR and Law no. 58/2019, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Request erasure of your data, in the cases provided for by law.
• Request restriction of processing.
• Object to processing based on legitimate interests, on grounds relating to your particular situation.
• Receive your data in a structured, commonly used and machine-readable format and transmit it to another controller (data portability), where technically feasible and where the processing is based on contract and carried out by automated means.
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us at geral.fsm@fsm.pt or by post at the address above. We may ask you to provide sufficient information to verify your identity.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
Website: www.cnpd.pt

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration, taking into account the nature of the data, the B2B context and the state of the art. No transmission over the internet can be guaranteed as completely secure.

This website is intended for business contacts and is not directed at children. We do not knowingly collect personal data from persons under 18 years of age through this website.

The website may contain links to third-party sites, including our profiles on Facebook, Instagram and LinkedIn, and to Google Maps. Those sites have their own privacy practices. FSM is not responsible for the content or data processing of third-party websites that we do not control.

We may update this Privacy Policy from time to time, for example to reflect changes in the website, in our processing activities or in applicable law. The date at the top of this page indicates the latest version. The updated policy will apply from the moment it is published on this website.

For any question about this Privacy Policy or about the way FSM processes personal data, please write to geral.fsm@fsm.pt or use our contact page.

Related documents: Cookies Policy, Terms of Service and Disclaimer.