EN DATA PROTECTION AND PRIVACY POLICY
Manuel Rui Azinhais Nabeiro, Lda, a company with registered office at Av. Calouste Gulbenkian, 7370 Campo Maior, with tax identification number 500 853 975 (" DELTA CIÊNCIA"), in the performance of its commercial activities on the website www.centrocienciacafe.com ("Website" or "Online Store"), processes Personal Data, i.e. information relating to an identified or identifiable natural person ("Data Subject(s)"), an identifiable person being considered a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person ("Personal Data").
The use of the Website by any user shall be governed by the Terms and Conditions of use ("Terms and Conditions"), the use of which implies acceptance by the user. If the user rejects the Terms and Conditions, the user must immediately cease use of the Website.
DELTA CIÊNCIA determines the purposes and means of processing of personal data as Responsible for the processing of personal data, ensuring compliance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, and other applicable legislation on data protection and privacy ("Data Protection Legislation").
In accordance with the Data Protection Legislation, DELTA CIÊNCIA handles Personal Data in accordance with all applicable principles, namely: i) Principle of Lawfulness, Loyalty and Transparency; ii) Principle of Purpose Limitation; iii) Principle of Data Minimization; iv) Principle of Accuracy; v) Principle of Retention; and vi) Principle of Integrity and Confidentiality.
For the foregoing, this Data Protection and Privacy Policy ("Privacy Policy") is hereby established, and DELTA CIÊNCIA undertakes to perform all operations of processing of Personal Data in accordance with the provisions of the following points:
- Principles of Lawfulness and Purposes of Data Processing
The Personal Data of the Data Holders shall be processed by DELTA CIÊNCIA on the following grounds of lawfulness:
|
Grounds of Lawfulness |
What do they consist of? |
|
Consent |
The Data Subject may consent to the Processing by means of a free, specific, informed and explicit manifestation of will, by which he/she accepts, through a declaration (in writing or orally) or an unequivocal positive act (by filling in an option), that his/her Personal Data may be processed. |
|
Pre-contractual procedures or performance of a contract |
Personal Data may be processed if they are necessary, without limitation, for the performance of a contract to provide services and/or supply products to which you are a party as an Employee, Client and/or Supplier, or to carry out pre-contractual procedures at your request. |
|
Fulfilment of a legal obligation |
Personal Data may be processed to ensure and guarantee compliance with legal obligations to which it is subject under the laws of a Member State and/or the European Union. |
|
Protection of the Data Subject's vital interests |
Personal Data may be processed to protect your vital interests, particularly when such processing is essential for your life. |
|
Legitimate Interests |
DELTA CIÊNCIA, other Controllers or Third Parties may process Personal Data provided that such processing does not override your interests or fundamental rights and freedoms. |
Considering the above, the collection of Personal Data based on the grounds of lawfulness exposed will be essentially for purposes related to the development of the object of DELTA CIÊNCIA, as well as for the execution of contracts and legal obligations of the same, so that the non-collection of Personal Data will imply the impossibility of execution of the purposes for which the Personal Data are subject to processing.
- Processing of Personal Data in the Online Shop
DELTA CIÊNCIA treats the Personal Data of the Data Subject as follows:
|
Purpose of Treatment |
Treatment Activities |
Grounds for Lawfulness |
Conservation period |
|
DELTA CIÊNCIA Management |
Analysis and processing of web browsing data |
Execution of the contract, the terms of which are governed by the Terms and Conditions |
Up to 3 months after the last visit to the Website |
|
Account creation and access authentication |
Duration of Website registration |
||
|
Customer Management |
Order analysis and execution |
Pre-contractual procedures and/or enforcement of the Conditions |
For the period necessary to comply with the Conditions and/or legal obligations |
|
Contacts and complaints |
Compliance with legal obligations |
For the period necessary to manage complaints, in accordance with the applicable legal deadlines |
|
|
Marketing and Advertising |
Sending of marketing communications |
Consent |
Up to 1 (one) year after the last communication |
|
Sending marketing communications (soft opt-in) |
Legitimate Interests |
- Personal Data processed in the Online Shop
For the purposes stated DELTA CIÊNCIA processes the following Personal Data:
|
Purpose |
Personal Data |
|
Website Management |
Personally Identifiable Information, Contact Information, Authentication and Access Information and/or Web Browsing Information (commonly known as Cookies) [electronic identifier (Mac, IP), connection start date/time, connection end date/time, web browsing origin, URL visited, social network address, social network interaction history or host name]. |
|
Customer Management |
Identification Data, Contact Data, Payment and Transaction Data, Contract Data and/or Complaint Data (e.g. name, email, telephone/mobile number, address, preferred delivery time, product delivery point, transaction number, transaction description, transaction date, transaction value, number of transactions, electronic invoicing, invoice number, contract number, purchase history, customer segments, product quantity, product value, product purchase date, purchase channel/location and amounts spent per customer, complaint number, complaint date, complaint description, complaint source or complaint response date) |
|
Marketing and Advertising
|
Identification and Contact Details of the Employee associated with the Customer and Contract Details |
- Treatment Methods
The processing of Personal Data shall be carried out automatically and manually by IT tools, applying logic strictly related to the purposes and, in any case, promoting the security and confidentiality of Personal Data.
- Disclosure and Transmission of Personal Data
The employees of DELTA CIÊNCIA shall process the Personal Data of the Data Subjects for the performance of their employment duties and shall process the Personal Data exclusively under the terms specified in this Privacy Policy.
The Personal Data may be made available to third parties charged with providing services to DELTA CIÊNCIA ("Subcontractors"), bound by a written contract and to treat the data under the terms of this Privacy Policy, and may not treat them, directly or indirectly, for any other purpose, for their own benefit or for the benefit of a third party.
Data subjects have the right to obtain a complete and updated list of Sub-Contractors (if any) engaged by DELTA CIÊNCIA, by sending a specific request to DELTA CIÊNCIA under the terms specified in Section 9 of this Privacy Policy.
In compliance with legal obligations, the Personal Data of Data Subjects may be transmitted to third parties for their own purposes, namely banks and insurance companies, judicial, administrative, supervisory or regulatory authorities and also entities that lawfully carry out data compilation, fraud prevention and combat fraud actions.
- International Transfers
DELTA CIÊNCIA may transfer the Data Subject's Personal Data outside the European Economic Area ("EEA") to locations that may not guarantee the same level of protection.
However, if applicable, DELTA CIÊNCIA will only transfer Personal Data outside the EEA in accordance with the following measures:
- When the transfer is made to a location or by a method or in circumstances which the European Commission considers ensuring adequate protection of Personal Data;
- When it has implemented standard contractual data protection clauses approved by the European Commission or a competent supervisory authority; or,
- When none of the previous options apply but the law nevertheless authorizes such a transfer, for example, if it is necessary for the establishment, exercise or defence of a right in legal proceedings.
You may request detailed information on the security measures that DELTA CIÊNCIA has implemented regarding transfers of Personal Data outside the EEA and, where applicable, a copy of the standard contractual data protection clauses in force at DELTA CIÊNCIA through the contacts provided in Section 9.
- Rights of Data Subjects
In accordance with the Data Protection Legislation, current or future, DELTA CIÊNCIA informs you that the Data Holders have the right to access, rectification, limitation, portability, erasure and the right to object to the processing of Personal Data, in certain circumstances, which can be exercised under this chapter of the Privacy Policy.
|
Rights |
What do they consist of? |
|
Right to information |
The Data Subject has the right to obtain clear, transparent and easily understandable information on how DELTA CIÊNCIA uses their Personal Data and what their rights are. It is for this reason that DELTA CIÊNCIA provides all this information in this Privacy Policy. |
|
Right of access |
The Data Subject has the right to obtain information about what Personal Data DELTA CIÊNCIA processes (if it is processing it) and certain information (like that provided in this Privacy Policy) about how that Data is processed. This right allows you to be aware and confirm that we use your Data in accordance with the Data Protection Legislation. DELTA CIÊNCIA may refuse to provide the information requested where, to do so, DELTA CIÊNCIA must disclose Personal Data of another person, or the information adversely impacts the rights of another person. |
|
Right of rectification |
If the Data Subject's Personal Data is incorrect or incomplete (for example, if his or her name or address is wrong), a request may be directed to DELTA CIÊNCIA to take reasonable steps to correct it. |
|
Right to erasure of data |
This right is also known as the "right to be forgotten" and, in simple terms, allows the Data Holder to request the erasure or deletion of their data, if there are no valid grounds for DELTA CIÊNCIA to continue using them or their use is unlawful. This is not a generic right to erasure, as exceptions are admitted (for example, where such data is necessary for the defence of a right in legal proceedings). |
|
Right to restriction of processing |
The Data Subject has the right to "block" or prevent the future use of their Data while DELTA CIÊNCIA assesses a request for rectification or as an alternative to erasure. Where Processing is limited, DELTA CIÊNCIA remains able to store your Data, but may not use it further. DELTA CIÊNCIA maintains a list of the holders who have requested the "blocking" of the future use of their data to ensure that this limitation is respected. |
|
Right of data portability |
The Data Subject has the right to obtain and re-use certain Personal Data for his or her own purposes in various organizations. This right applies only to own Data provided to DELTA CIÊNCIA and which DELTA CIÊNCIA processes with consent and those processed by automated means. |
|
Right to opposition |
The Data Subject has the right to object to certain types of processing, for reasons relating to their situation, at any time when such processing takes place, for the purposes of the legitimate interest of DELTA CIÊNCIA or third parties. DELTA CIÊNCIA may continue to process such Data if it can prove "compelling legitimate grounds for the processing which override your interests, rights and freedoms" or if such Data is necessary for the establishment, exercise or defence of a right in legal proceedings. |
|
Right to complain |
The Data Subject has the right to lodge a complaint with the competent supervisory authority, the Comissão Nacional de Proteção de Dados - CNPD (National Commission for Data Protection), if he/she considers that the Processing carried out on the Personal Data violates his/her rights and/or the Data Protection Legislation. |
If the basis of lawfulness for the processing of your personal data is consent or legitimate interest, you may respectively withdraw consent or object to the processing at any time, without any consequence for you, but without this compromising the lawfulness of the processing carried out in the meantime. In case of withdrawal of consent or in case of express opposition, DELTA CIÊNCIA shall immediately cease the processing of your personal data for the purpose in question, unless there is a need to process the data for compliance with legal and/or contractual obligations.
You may at any time, in writing, exercise the rights provided by the Data Protection Legislation and other applicable legislation by the means described in Section 9 of this Privacy Policy.
- Security and Confidentiality
To ensure the security and confidentiality of Personal Data, protected databases are used, among others, adequate firewalls and passwords, in accordance with the provisions of the Data Protection Legislation. Access to Personal Data is only possible to authorized employees who have an actual need to use the Personal Data, in accordance with the principles of security and confidentiality. Violations of this Privacy Policy by employees of DELTA CIÊNCIA may give rise to disciplinary action. Compliance with the rules and procedures of DELTA CIÊNCIA is monitored and checked periodically.
- How to Contact DELTA CIÊNCIA on Privacy and Data Protection Issues
Data subjects may exercise their rights by contacting DELTA CIÊNCIA by sending an email to the rgpd@deltacafes.com mailbox.
Data subjects may also contact the Data Protection Officer of DELTA CIÊNCIA by sending an email to the dpo@deltacafes.com mailbox.