Privacy Policy
This privacy policy outlines how (Insert Brand), Tax ID: (Insert Tax ID), based in Lisbon at the address (Insert Address), owner of the brand (Insert Brand), uses and protects the information you provide when using the website (Insert Website).
(Insert Brand) is committed to ensuring that your privacy is protected, reserving the right to request information to identify the customer when using this site, with the assurance that this information will only be used in accordance with this privacy statement.
(Insert Brand) reserves the right to change this policy, updating this text according to changes that may be implemented, and will announce these changes through this means. Therefore, we recommend that you consult this document regularly, and if you have any questions or concerns, please contact us via email (Insert Email).
DATA CONTROLLER
The data controller is (Insert Brand).
Contacts:
(Insert Responsible Person's Name)
(Insert Address)
(Insert Phone)
(Insert Email)
SCOPE OF THE PRIVACY POLICY
This Privacy Policy applies to data that has been directly provided by the respective owner or collected when the owner accesses the website. The required information and its respective effect can be summarized in the following points:
Name: for customer identification.
Email and mobile phone: to streamline communication regarding orders and to send newsletters and promotional and informational emails.
Address: for sending orders and respective documents, such as receipts and invoices.
Tax ID: for billing purposes.
DATA PROCESSING AND CONSENT
By providing your personal data to (Insert Brand), the personal data owner consents, beforehand, freely, informed, specifically, and unequivocally, that their data be processed for the purposes described in this Privacy Policy.
Consent is given through the ticking of the acceptance box and subsequently by confirmation in the link received at the electronic address provided. This information is used exclusively to understand the customer's needs and improve the service.
DATA RETENTION PERIOD
We keep your personal data for 3 years of inactivity. After this period, you will be contacted to express your wish to preserve or delete this information from our database, without prejudice to the periods of limitation and expiration of the exercise of rights of (Insert Brand), under the law, as well as the retention of personal data arising from legal obligations.
SECURITY
In order to prevent unauthorized access or disclosure of your information, appropriate physical, electronic, and administrative procedures have been established to safeguard and secure the information collected online, restricting access to stored data to specifically authorized employees.
Data Subject Rights: The data subject has the right to request access to personal data concerning them, to its rectification, deletion, and to the total or partial limitation of its processing, as well as the right to object to the processing and to the portability of personal data in a structured, commonly used, and machine-readable format.
- RIGHT OF ACCESS
The data subject has the right to obtain from (Insert Brand) confirmation as to whether or not personal data concerning them are being processed, and, if so, to access their personal data and the information provided by law. If you wish for more than one copy of your personal data in the processing phase, (Insert Brand) may subject this service to a fee for administrative costs. - RIGHT OF RECTIFICATION
The data subject has the right to obtain from (Insert Brand), without undue delay, the rectification of inaccurate or incomplete data concerning them. - RIGHT TO ERASURE OF DATA
The data subject has the right to request (Insert Brand) to erase their data without undue delay, and (Insert Brand) has the obligation to erase personal data when applicable, especially in one of the following circumstances:
a) The personal data are no longer necessary for the purpose which they were collected or otherwise processed;
b) The data subject withdraws their consent to the data processing (in cases where the processing is based on consent) and there is no other legal ground for the processing;
c) The data subject opposes the processing and there are no overriding legitimate grounds for the processing. - RIGHT TO RESTRICTION OF PROCESSING
The data subject has the right to obtain from (Insert Brand) restriction of processing if applicable, especially in one of the following situations:
a) Contest the accuracy of the personal data for a period enabling (Insert Brand) to verify its accuracy;
b) The data processing is lawful and the data subject opposes the erasure of their personal data and requests, instead, the limitation of their use;
c) (Insert Brand) no longer needs the personal data for processing purposes, but these data are required by the data subject for the establishment, exercise, or defense of legal claims;
d) If they have opposed the processing until it has been verified that the legitimate grounds of the data controller prevail over those of the data subject. - RIGHT TO DATA PORTABILITY
If the processing depends on the data subject's consent and this consent has been given by automated means, the data subject has the right to receive the personal data concerning them, which they have provided to (Insert Brand), in a structured, commonly used, and machine-readable format. - RIGHT TO OBJECT
In cases where data processing is carried out for the purpose of legitimate interests pursued by (Insert Brand), or the data processing is carried out for direct marketing or profiling purposes, the data subject may, at any time, object to the processing of their personal data.These rights can be exercised through the following contacts:
(Insert Brand)
(Insert Responsible Person's Name)
(Insert Address)
(Insert Phone)
(Insert Email)Responses to your requests may be provided in writing, via electronic means. Responses will be provided, without undue delay, within 1 month from the date of receipt of the request, or within 2 months followed by information to the data subject, when the request is complex or there are several requests.
Cookies and Tracking Technologies: We use cookies to improve the experience on our site. You can manage your cookie preferences in the browser settings.
Links to Other Sites: This policy does not apply to external sites to which we may have links.
Policy Updates: We will inform users about significant updates to this policy.
Data Protection Officer: For questions related to data protection, contact us through the means provided.
Procedures in Case of Data Breach: In case of a data breach, we will take the necessary measures as per current legislation.
Minors: We do not intentionally collect data from minors without the consent of parents or legal guardians.
Right to Complain: You also have the right to lodge a complaint with the competent supervisory authority, the National Data Protection Commission, when you consider that (Insert Brand) has violated the rights you hold under the GDPR.Revocation of Consent
If consent is legally required for the processing of personal data, the data subject has the right to withdraw consent at any time, although this right does not compromise the lawfulness of processing based on consent given prior to its withdrawal nor the subsequent processing of the same data, based on another legal basis, such as the fulfillment of a contract or a legal obligation to which (Insert Brand) is subject.If you wish to withdraw your consent, please alert us through the following contacts:
(Insert Brand)
(Insert Responsible Person's Name)
(Insert Address)
(Insert Phone)
(Insert Email)COMISSÃO NACIONAL DE PROTECÇÃO DE DADOS / NATIONAL DATA PROTECTION COMMISSION
Rua de São Bento Nº 148, 3rd — 1200-821 Lisboa
Mobile: +351 213 928 400 — Fax: +351 213 976 832
geral@cnpd.pt
www.cnpd.ptContacts
Name/Company:
Tax ID:
Fiscal Address:
Main Email: