PRIVACY POLICY

This privacy statement explains what personal information we collect from our users and how it is used.

For the processing of our users' data, we have implemented all the technical and organizational security measures established in the current legislation.

Who are we?

XXXXXXX, LDA, tax identification (NIFXXXXXXX), hereinafter referred to as “XXXXXXX” is the entity responsible for your personal data and that is behind the website https://XXXXXXX.pt/, which belongs entirely to it. 

You can contact us by postal mail MMMMMMMMMMMMMMMMM – YYYYYYYYYYYY, ZZZZZZZZZ, XXXXXXX, and by e-mail lojaonline@XXXXXXX.pt.

Users

The “user” is the person who browses https://XXXXXXX.pt/, on any of the pages or sections. From the moment the user has access to browsing, he / she establishes a relationship in which he / she accepts the terms and conditions, as well as the policies exposed here.

Users under the age of 18 require the consent of their parents or guardians for the processing of their personal data. “XXXXXXX” has no way of effectively verifying the age of users, therefore, it is exempt from any responsibility, if the user does not comply with what is stated here.

What we don't do:

1. We never ask for personal information unless it is really necessary to provide the products and / or services you need or send advertising for what we sell.
2. We never share personal information about our users with anyone, except to comply with the law, a contract, or if we have your express authorization.
3. We will never use our users' personal data for a purpose other than that expressed in this privacy policy.

Law:

This website is adapted to comply with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals (GDPR).

Principles that we will apply to personal information

In the processing of our users' personal data, we will apply the following principles:

• Principle of legality, loyalty and transparency: We will always inform you about the processing of our users' personal data for one or more specific purposes that we will inform with absolute transparency.
• Principle of data minimization: we will only request data that is strictly necessary in relation to the purposes for which we request it.
• Principle of limitation of the period of conservation: the data will be kept for the time necessary for the purposes of the treatment, depending on the objective, we will inform the corresponding period of conservation, in the case of subscriptions, we will periodically review our lists.
• Principle of integrity and confidentiality: The personal data of our users will be treated in order to guarantee adequate security and confidentiality. We take all necessary precautions to prevent unauthorized access or misuse of data by third parties.

What are your rights?

Users can access their personal data, request the rectification of data or, if necessary, request its deletion when, among other reasons, the data are no longer necessary for the purposes for which they were collected. In certain circumstances, users may request to limit the processing of their data, in which case we will keep only those that are mandatory for administrative, legal, security purposes or for the exercise or defense of possible complaints.

In certain circumstances and for reasons related to your particular situation, interested parties may object to the processing of your data, in this case, we will stop processing the data, except for legitimate reasons, or the exercise or defense of possible claims.

Users have the right to receive the personal data they have provided in a structured format, in common use and mechanical reading, and to transmit it to another person responsible for the processing when:

• Treatment is based on consent,
• The data was provided by the user and,
• The treatment is carried out by automated means.

When exercising their right to data portability, the user will have the right to transmit personal data directly from “XXXXXXX” to the new responsible person, whenever technically possible.

Users will also be entitled to effective judicial protection and to file a complaint with the National Data Protection Commission, if they consider that the processing of personal data that concerns them violates the GDPR.

How do we collect your data?

When a user enters https://XXXXXXX.pt/, well to send an email to the owner, make a subscription or contract, provide personal information for which we are responsible, this information may include personal data, such as your IP address, name, physical address, email address, number phone numbers and other information.

In https://XXXXXXX.pt/ there are different systems for collecting personal data and each system has a purpose:

• Contact form: We request the following personal data: Name, E-mail, to answer the requirements of https://XXXXXXX.pt/ users. We can use this data to answer questions, complaints, comments or concerns regarding the information included. at https://XXXXXXX.pt/, the services provided, the treatment of personal data, as well as any other questions that the user may have and that are not subject to the contracting conditions. The data that the user provides will be located on the server where https://XXXXXXX.pt/ is stored

Failure to provide the necessary minimum personal data will make it impossible for XXXXXXX to respond to the request. This treatment will be considered legitimate because it is part of a pre-contractual approach.

• Subscription form: We request the following personal data: Name, E-mail, to manage the list of subscriptions, to send newsletters, promotions and special offers, ours or third parties. The data is provided by the user when subscribing. Within https://XXXXXXX.pt/ there are several forms to activate the subscription. “XXXXXXX” will ask users for their express and voluntary consent when providing the minimum data necessary to send advertising and commercial information related to the services and / or products offered by https://XXXXXXX.pt/ so that they can be added to a file automated email marketing managed by the controller indicated below. The processing of personal data found in this section is done with the consent of the data subject. The newsletters are managed by an email marketing manager, detailed in the subcontractors.
• Contracting form: We request the following personal information: name, email, address, to request any of the services or products offered at https://XXXXXXX.pt/. The information collected will allow processing of the request made by the user and billing. The data will be located on the servers where https://XXXXXXX.pt/ is stored. The legitimate treatment of personal data is due to the contractual relationship with the client or user.
• Affiliation registration form: To enroll in our affiliation program the user must register through this form subject to the specific contractual conditions of the affiliation program, where he will indicate the required products and / or services, and contact details. In this case, we request the following personal information: name, email, website. The data that the user provides will be located on the servers where https://XXXXXXX.pt/ is stored, and depending on the tool used, there may be a third party with whom it is necessary to share the data, the user will always be informed of this situation and the tools that will be used before proceeding with membership. This treatment is based on legal compliance with a contract.

There are other purposes for which we treat personal data:

• Ensure compliance with the conditions of use and applicable law.
• Support and improve the services offered by https://XXXXXXX.pt/.

Redes Sociais

https://XXXXXXX.pt/ may be present on social networks, in these cases, the treatment of followers' data on social networks will be governed by this section, as well as by the conditions of use, privacy policies and access regulations that belong to the social network in each case and previously accepted by the user. "XXXXXXX" will process the personal data of users in order to correctly manage the presence of https://XXXXXXX.pt/ on the social network, informing about activities, products or services, as well as for any other purpose than the regulations of the networks allow.

Remarketing

The remarketing feature allows us to contact people who have already visited (website) and associate a specific audience with a particular message. Remarketing is a method to get users who have visited our website to do so again.

https://XXXXXXX.pt/ collects users' personal data for remarketing, whenever they have given their consent to the use of these cookies.

The data we collect through remarketing is collected by Facebook cookies. You can find out the data collected by these cookies in the privacy policies of each service.

This remarketing will only be done if the user agrees to give his free, express and voluntary consent to the use of cookies.

Opinions

We may select and publish statements and comments from customers or users on our services, which may contain personal data, we will obtain the user's consent before publishing any testimony or opinion under his name. If such content is published, it will be available to other users of https://XXXXXXX.pt/. If the user wants to delete or remove his name or testimony from https://XXXXXXX.pt/, he can contact us through the contact form or he can write but we cannot answer for those that have already been shared by other people.

To which recipients will your information be communicated?

Many tools that we use to manage user data are contracted to third parties, these are referred to in the GDPR as “subcontractors”.

To provide the services strictly necessary for the development of the activity, https://XXXXXXX.pt/ shares data with the following providers under their corresponding privacy conditions:

• Facebook®: Tool used as a social network and for communications with users, customers, buyers and participants and, to learn about the actions of data subjects on this site for advertising purposes (Facebook Pixel), sponsored advertising service (Ads). These services are provided by Facebook Ireland Ltd. can be contacted at 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. It has standard data protection clauses adopted by the European Commission which can be consulted at: https://www.facebook.com/business/gdpr. For more information on the privacy policy you can consult: https://www.facebook.com/privacy/explanation
• Google®: Web analysis service, to view website usage statistics (Analytics); backup service of your files in the cloud and easy access (Drive); sponsored advertising service (Ads), and; email service (Gmail). These services are the responsibility of the company Google LLC, located in Mountain View, California, United States of America, and have standard data protection clauses adopted by the European Commission which can be consulted at: https://cloud.google.com / security / gdpr / resource-center. For more information on the privacy policy: https://policies.google.com/privacy
• OfficeGest®: Billing software, provided by GUISOFT LDA, R. Eng. João Manuel Belo Rodeia 9B, 2415-792 ZZZZZZZZZ, a company with 100% Portuguese capital, with a share capital of € 15,000 and the registration number and legal person PT505856999 . More information about the privacy policy at: https://en.officegest.com/politica-de-protecao-de-dados-pessoais/

Data security and confidentiality

XXXXXXX data is committed to the use and treatment of personal data included by users, respecting their confidentiality and use in accordance with the purpose of the same, as well as to fulfill their obligation to keep them and adopt all measures to avoid alteration , loss, treatment or unauthorized access, in accordance with the provisions of current data protection regulations.

https://XXXXXXX.pt/ includes an SSL certificate, that is, a security protocol that makes data travel in an integral and safe way, that is, the data transmission between a server and the user https://XXXXXXX.pt/, and in feedback, be fully encrypted or encrypted.

XXXXXXX cannot guarantee the absolute impregnability of the Internet network and, therefore, the breach of data through fraudulent access to them by third parties.

Regarding the confidentiality of processing, XXXXXXX will guarantee that any person authorized by it to process customer data (including its personnel, employees and suppliers), will be under the obligation of confidentiality.

When a security incident occurs, XXXXXXX must notify in accordance with the law in force, without undue delay and must provide timely information related to the security incident, as long as it is known or when the user reasonably requests it.

Accuracy and veracity of the data

The user is solely responsible for the accuracy and veracity of the data he / she sends to https://XXXXXXX.pt/, XXXXXXX is exonerated from any responsibility in this regard.
Users guarantee and respond, in any case, for the accuracy, validity and authenticity of the personal data provided, and undertake to keep them duly updated. The user agrees to provide complete and correct information on the corresponding form.

Changing the privacy policy

This Privacy Policy may vary depending on legal requirements or self-regulation, therefore, we advise you to visit it periodically.

XXXXXXX reserves the right to modify this policy to adapt it to legislative or jurisprudential changes, as well as to sector practices. In these cases, XXXXXXX will announce on this page the changes introduced with reasonable anticipation of its implementation.

This document was last updated on 20-08-2020.