Privacy Policy
This Privacy Policy describes how we collect, use, and protect the personal information of visitors to the website https://carvaonacaixa.eu (hereinafter "Website"). The owner of the "CARVÃO NA CAIXA" brand is José Manuel Ferreira Mansilhas (hereinafter "we" or "data controller"), and his contact for any questions related to this document is +351 911 737 135, or via email at carvaonacaixa.comercial@gmail.com.
By using our Website, the user agrees to the terms of this Privacy Policy. If you do not agree with the terms described herein, please do not use our Website.
1. Entity Responsible for Data Processing
We are responsible for the collection, processing, and use of your personal data, in accordance with the General Data Protection Regulation (GDPR) and applicable national data protection legislation.
2. Personal Data Collected
We collect personal data in order to provide services and improve the browsing experience on our Website. Depending on how the user interacts with our Website, we may collect:
- Contact data: name, email address, phone number, address (if necessary to process orders or communications).
- Website usage data: IP address, browser type, browser language, pages visited, time and duration of visits, and other browsing statistics.
- Data voluntarily provided by users: any information that the user voluntarily sends us, for example, through contact forms, newsletter subscriptions, or email messages.
3. Purposes of Processing
The data collected may be used for the following purposes:
- Communication and customer support: to respond to information requests, questions, or comments that we receive through our contacts (phone and email).
- Order processing: to process and send orders for products or services requested through our Website.
- Website improvement: to understand how users use our Website, in order to improve its operation, content, and functionalities.
- Marketing and newsletters: to send promotional communications and newsletters, if the user has given prior consent.
- Compliance with legal obligations: to meet legal requirements or respond to legitimate requests from public or governmental authorities.
4. Legal Basis
The processing of your personal data will be carried out based on the following legal grounds:
- Consent: for marketing or promotional communication (e.g., newsletter subscriptions) where the user has provided explicit consent.
- Performance of a contract or pre-contractual measures: when data is necessary to process orders, requests, or other forms of contract between us and the user.
- Legitimate interests of the data controller: to analyze and improve the Website's operation, ensure system security, and create statistics, provided that these do not prejudice the fundamental rights and freedoms of the user.
- Compliance with legal obligations: when processing is necessary to comply with a legal obligation or respond to competent authorities.
5. Sharing of Personal Data
Your personal data may be shared with:
- External service providers: who support us in performing certain tasks (for example, web hosting services, payment services, delivery services, email marketing platform providers). These service providers act only according to our instructions and are obligated to strictly comply with the data protection legislation in force.
- Third-party entities, if required by law: to comply with legal obligations or in response to legitimate requests from judicial or governmental authorities.
In no other situation will users' personal data be sold, exchanged, or transferred to third parties without explicit consent, except when required by law.
6. Data Retention
We retain personal data for the period necessary to fulfill the purposes described in this Privacy Policy, namely:
- Contact data and order data: retained during the period in which the contractual relationship is maintained or until the legal retention obligation ceases (for example, for tax or accounting purposes).
- Marketing data: retained until the user revokes consent or requests deletion of the data.
- Website usage data (logs): retained for the period strictly necessary to ensure the security and functionality of the Website, as well as for statistical and optimization purposes.
7. Rights of Data Subjects
Users of our Website, as data subjects, enjoy the following rights under the GDPR and applicable national legislation:
- Right of access: the right to obtain confirmation as to whether your personal data is being processed and, if so, to access the available information.
- Right to rectification: the right to request the rectification of inaccurate or incomplete personal data.
- Right to erasure ("right to be forgotten"): the right to request the deletion of your personal data when there are no valid grounds for its retention.
- Right to restriction of processing: the right to request the restriction of processing of your data in certain circumstances.
- Right to data portability: the right to receive personal data in a structured, commonly used, and machine-readable format, and to transmit such data to another controller, if technically feasible.
- Right to object: the right to object, on grounds related to your particular situation, to the processing of your personal data based on legitimate interests, and the right to object, at any time, to processing for direct marketing purposes.
- Right to withdraw consent: if the processing is based on your consent, you may withdraw consent at any time, without compromising the lawfulness of processing carried out until that moment.
To exercise any of these rights, simply contact us via email at carvaonacaixa.comercial@gmail.com or by phone at +351 911 737 135.
Additionally, if you believe your rights have been violated, the data subject may file a complaint with the National Data Protection Commission (CNPD) at www.cnpd.pt.
8. Data Security
We are committed to protecting personal data through appropriate technical and organizational security measures, such as encryption, access controls, and intrusion detection systems, in order to prevent unauthorized access, disclosure, alteration, or destruction of the personal data collected.
9. Cookies and Similar Technologies
Our Website may use cookies and similar technologies to improve the user experience and collect usage statistics. Cookies are small text files stored on the user's device that allow us to recognize the device and personalize the browsing experience. You can find more information about the use of cookies in our Cookie Policy (if there is a specific page, insert link).
It is possible to manage cookie preferences through browser settings. However, blocking or deleting cookies may affect some Website functionalities.
10. International Data Transfers
When necessary, data may be transferred to countries outside the European Economic Area (EEA), but only if those countries offer adequate data protection guarantees, in accordance with the GDPR. If necessary, we will use standard contractual clauses approved by the European Commission or other legal mechanisms to protect transferred information.
11. Changes to This Privacy Policy
We may periodically update this Privacy Policy to reflect changes in our services or applicable legislation. Changes will be published on our Website with an indication of the update date. We advise regular consultation of this page to stay informed about our privacy practices.
12. Contacts
For any questions related to this Privacy Policy or the processing of personal data, please contact us through:
Date of last update: February 20, 2025
By using our Website, the user declares that they have read, understood, and accepted this Privacy Policy. If you have any questions or wish to exercise any right related to your personal data, do not hesitate to contact us.
