Your privacy is very important to us. Cata Vassalo is committed to protecting the personal data that is entrusted to us. For this reason, all processing of personal information is carried out in accordance with applicable legislation: Regulation (EU) 2016/679 of the Parliament and of the Council, of April 27, 2016, General Data Protection Regulation (GDPR) and Law No. 58/2019, of June 8. This Privacy Policy is intended to describe who we are, for what purposes we may use your data, how we treat it, who we share it with, how long we keep it, as well as how to exercise your rights.

Who we are?

Your data will be processed by CATAVASSALO UNIPESSOAL LIMITADA, better identified by NIF nº 515821713, hereinafter “ Cata Vassalo ”. Cata Vassalo is the Data Controller responsible for processing personal data within the meaning of the GDPR.

What are the purposes and legal grounds for processing your personal data?

• Order processing

Cata Vassalo needs to process your personal data to process online orders. This processing of personal data is based on the execution and fulfillment of the contract to be concluded between you and Cata Vassalo. For this purpose, Cata Vassalo needs to process personal data: Full name, address, email, telephone number and NIF. Your data will be kept for this purpose for the duration of the Cata Vassalo brand.

• Complaints and contact management

You can send us, via email address info@catavassalo.com or telephone number 211 947 946, suggestions or complaints regarding the services provided by Cata Vassalo . Your personal data will be processed based on the legitimate interests of Cata Vassalo . Cata Vassalo collects your data to analyze and resolve the situation underlying your suggestion or complaint. For this purpose, Cata Vassalo needs to process personal data: Full name, Telephone contact, Email and, when applicable, address and NIF. Your data will be kept for this purpose for as long as necessary and appropriate to resolve your issue.

• Newsletters

Cata Vassalo may process your personal data to send you communications about its products and services. This data processing requires your consent, which will be given when you subscribe to the newsletter. For this purpose, Cata Vassalo needs to process personal data: Name, telephone number and email. Your data will be kept for this purpose during the validity of the Cata Vassalo brand.

Will my information be shared?

Your personal information may be disclosed to third parties in the following cases: Service providers: Your personal data may be shared with companies subcontracted by Cata Vassalo , namely for website hosting, email hosting, contact management, processes and projects, (via Messenger chat, email, Instagram chat, telephone contact, face-to-face contact), parcel transport company, postal service in Portugal. These third-party companies only have access to your personal data to the extent necessary for the execution and provision of the service in cause. Personal data may also be accessed by auditors, administrative or judicial entities competent to comply with a legal obligation of Cata Vassalo . Your data will only be processed within the European Union.

What are my rights?

At any time, you can ask us:

• Access to your personal data;
• The rectification of your personal data, which is inaccurate or incomplete;
• The erasure or limitation of the processing of your personal data;
• Opposing or revoking your consent;
• The portability of your personal data.

Your requests will be treated with special care so that we can ensure the effectiveness of your rights. You may be asked to provide proof of your identity to ensure that personal data is only shared with the data subject. You should bear in mind that in certain cases (for example, due to legal obligations) your request may not be fulfilled immediately. In any case, you will be informed of the measures taken in this regard, within a period of one month from the moment the request is made. You also have the right to lodge a complaint with the National Data Protection Commission (CNDP): https://www.cnpd.pt/ .

• Right of access

The holder of personal data has the right to obtain confirmation as to which personal data is or is not subject to processing and, if applicable, to access the information that concerns him or her.

• Right to rectification

The holder of personal data has the right to rectify inaccurate or incomplete data concerning him or her.

• Right to erasure of data (“right to be forgotten”)

The holder of personal data has the right to obtain the erasure of their data, without undue delay, when one of the following reasons applies, in particular:

• Personal data are no longer necessary for the purpose for which they were collected or processed;
• The holder has withdrawn their consent to the processing of data (in cases where the processing is based on consent) and there is no other lawful basis for said processing;
• The holder opposes the processing and there are no prevailing legitimate interests that justify the processing.
• Right to limit treatment

The data subject has the right to obtain limitation of processing, when, in particular, one of the following situations applies:

• Challenge the accuracy of personal data, for a period that allows Cata Vassalo to verify its accuracy;
• The data processing is lawful and the data subject opposes the erasure of personal data and requests, in return, the limitation of its use;
• Cata Vassalo no longer needs personal data for the processing purposes that gave rise to it, but this data is required for the purposes of declaring, exercising or defending a right in legal proceedings.
• Right to data portability

If the processing depends on the consent of the data subject and this consent has been provided by automated means, the data subject has the right to receive the personal data concerning him or her and which he or she has provided, in a structured format, of current use and automatic reading.

• Right to object

In cases where data processing is carried out for the purposes of the legitimate interests pursued by Cata Vassalo or when data processing is carried out for the purpose of direct marketing, the holder may, at any time, oppose the processing of their data personal.

Can I revoke my consent later?

If consent is legally necessary for the processing of personal data, you have the right to withdraw consent at any time, although such withdrawal does not compromise the lawfulness of processing carried out based on previously given consent. If you wish to withdraw your consent, you can contact us via email at info@catavassalo.com.

Do you have any doubt?

If you have any questions regarding the processing of your personal data, or wish to exercise any of your rights, please contact us: info@catavassalo.com

Occasionally, Cata Vassalo may update the Privacy Policy. We advise you to periodically review this document to stay up to date.

            

Last updated: January 2020