Information sent to Almeida Ferrão - Unipessoal, Lda. through its website, email or any other means will be treated with the utmost confidentiality and in accordance with applicable European or national legislation.

Information to data subjects

All personal data collected will be used only for the purposes for which it is intended, namely for order processing, deliveries, and related technical and commercial contacts, as well as other legitimate purposes for the commercial relationship between both parties. Furthermore, the customer may actively indicate whether they authorize the use of the personal data previously provided or any other data that they may add or modify for other duly identified purposes, such as sending newsletters or other types of commercial contacts.

Exercise of data subject rights

The information collected will be kept until the customer decides to change or remove it, except in situations where the law or other current rules determine specific deadlines (for example, data used to issue invoices, equipment warranties, records of services provided, payment information, etc.).

The customer, through our website or any other means of contact capable of confirming their identity, will always have access to their personal data and the possibility of deleting, updating, or limiting it. Changes will be made immediately when made on our website or as quickly as possible when requested by other means.

The data subject will have, whenever requested and in accordance with current legislation, the right to the portability of their personal data and other data associated with them, such as their order and shipping records.

Consent of data subjects

The consent of data subjects will be obtained or updated for each purpose for which they are intended, always requiring affirmative action on their part.

Nature of Data

The data collected by our platform is not sensitive and is therefore not subject to specific processing conditions.

Documentation and Registration

Our electronic platform maintains an internal record of all personal data processing activities and respective consents. This record, in addition to the customer's personal data, may contain other personal data related to them, such as the personal data of the employee responsible for data processing or even other customers. Therefore, access to this data is not free and will only be permitted after internal review and in the cases provided for by law.

Subcontracting

The personal data collected will not be made available to third parties except when duly authorized to do so and/or to meet legal or legitimate requirements of the commercial relationship. We may, for example, pass personal data such as address and contact details to a shipping company to enable delivery of an order or provide financial information to a bank for payment processing.

Security and Data Processing Processes

We take all measures within our reach to keep our databases secure, preventing theft, integrity failures, destruction, loss and accidental or unlawful alterations, and unauthorized disclosure or access to data.

Security Breach Notification

Any security breaches that result in a risk to the rights of data subjects will be immediately communicated to the competent authorities, as well as to the respective data subjects.

Applicable Legislation

Our database complies with the conditions imposed by the General Data Protection Regulation, Law 67/98 and other applicable legislation.