ISALUCA Unipessoal Lda., hereinafter Art d’Amour, is a commercial limited company, WITH VAT Nr 516429035 with its headquarters at Rua do Meio 59 – Figueira – 8650-180 Budens, Faro – Portugal.
Art d ́Amour is dedicated to retail activities, specifically the sale of underwear, beachwear and the like.
WHY THIS PRIVACY POLICY?
Art d’Amour has committed itself to protecting the privacy of personal information collected and treated by you.
At Art d’Amour the processing of personal data is carried out in strict compliance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and/or any legislation governing, adite or replace such legislation, in the set called the Regulation on the Protection of Personal Data (hereinafter referred to as GDPR).
WHO IS RESPONSIBLE FOR THE PROCESSING OF THE DATA?
Art d’Amour is the entity responsible for the collection and processing of personal data, which in the context of the contractual or pre-contractual relationship, and in accordance with the requested service, will collect and process the personal data necessary for the accomplishment of this purpose.
WHAT KIND OF PERSONAL DATA DO WE COLLECT?
Art d ́Amour collects personal data from customers in connection with a contractual or pre-contractual relationship; and only personal data is collected strictly necessary to fulfill this purpose; name, tax taxpayer number (NIF), address, telephone contact and email address.
In no circumstances will any other type of information be requested, such as philosophical or political convictions, party or trade union affiliation, religious faith or private life.
WHEN AND HOW DO WE COLLECT YOUR DATA?
Personal data can be collected by e-mail, website contact form www.artdamour.com telephone contact, with the prior consent of the customer.
As a rule, personal data is collected in the context of a contractual or pre-contractual relationship with the customer; that is, upon your request for a service.
Some personal data are mandatory and, in case of lack or insufficiency of such data, Art d ́Amour will not be able to provide the service in question, so it will inform customers of the mandatory nature of the provision of the data.
The personal data collected are processed in an information and in strict compliance with data protection legislation, being stored in a specific database, created for this purpose and, under no circumstances, the data collected will be used for a purpose other than that for which the consent of the data subject was given.
The data collected may be transmitted to Art d ́Amour customers during or after the term of the service contract.
WHAT ARE THE PURPOSES OF THE PROCESSING OF PERSONAL DATA?
Personal Data is obtained for the following purposes:
1- Execution of the contract: The request of customers, and with the personal data provided for this purpose, Art d ́Amour provides contracted services, which are on the www.artdamour.com.
2- Information: Recruitment: The personal data contained in ‘resumes’ and letters of presentation sent by e-mail or delivered in the Art d ́Amour Section for this purpose will be processed by our team.
The curricula of candidates who do not have the skills necessary to perform the functions to which they apply shall be destroyed within a maximum of one (1) month.
The rest will be stored for a maximum period of one (1) year, after which they will be destroyed. If the data controller (Art d ́Amour) concludes an employment contract with one of the candidates, the data collected in the recruitment/application process will be stored for the purpose of drafting the employment contract and for all legal purposes of a mandatory nature.
WHAT ARE THE LEGAL GROUNDS FOR PROCESSING PERSONAL DATA?
Under current European Union data protection legislation (the GDPR) the use of personal data must be justified under at least one of these legal grounds for processing personal data:
When clear, express and unambiguous consent has been given by the customer, which may be withdrawn at any time.
When the processing of personal data is essential for the performance of a contract;
When the processing is necessary for compliance with legal obligations;
When the processing is necessary for the achievement of a legitimate interest;
When processing is necessary in order for us to assert, exercise or defend a right in legal proceedings against you, us or a third party.
UNDER WHAT CIRCUMSTANCES IS THERE COMMUNICATION OF DATA TO OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)?
By providing their personal data, customers declare that they authorise and consent to their data being processed by Art d’Amour. Also, the customer consents that their personal data will be used by our company, in accordance with the RGPD, in marketing campaigns, such as information on promotional periods, discounts or suggested services according to each customer profile, among others.
In the event you do not agree with the consultation and processing of your personal data under the conditions described above within the scope of the contractual relationship, our company will not be able to inform you about marketing campaigns in force or to be carried out with you in the future, as the data requested are indispensable in this context.
Our company processes and keeps personal data of its customers through invoicing systems authorised by the Tax Authority and marketing tools, such as applications for the creation of mailing lists for sending e-mails or newsletters. The companies holding these programs, as subcontractors, have committed with our company to strict compliance with the RGPD.
WHEN CAN DATA BE SUPPLIED TO THIRD PARTIES?
During the course of an investigation, denunciation or procedure, to the Tax Authorities, auditing Authorities, Public Bodies, the Court and responsible Security Forces.
WEBSITE
The visualisation and use of the pages of our website (www.artdamour.com) is allowed without having to provide any type of personal data. However, if a data subject wants to contact us through the contact form available on the same website, they will be asked for identification data such as name and e-mail.
As the data controller, our company has implemented numerous technical and organisational measures to ensure the protection of personal data processed through this website.
Our website collects a series of general data and information when a data subject accesses the website.
These general data and information are stored in the server log files.
WEBSITE CONTACT REQUESTS
Our website contains information that enables quick electronic contact with our enterprise, as well as direct communication with us, which also includes an e-mail address. If a data subject contacts the data controller by e-mail or by means of a contact form, the personal data transmitted by the data subject will be stored automatically. Such personal data transmitted voluntarily by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. There shall be no transfer of such personal data to third parties.
GOOGLE ANALYTICS
On the Art d’Amour website, the data controller has integrated the Google Analytics component with the anonymisation function.
Web analytics is the process of collecting and analysing data about the behaviour of visitors to websites.
For web analytics by means of Google Analytics, the data controller uses applications through which it is possible to find out the IP address of the data subject’s Internet connection and collected information, among other things, to evaluate the use of the website and to provide online reports, which show the activities on the website and which give indication of further services related to the use of the website on the Internet.
The data subject may, as indicated above, prevent the setting of cookies on the website at any time by means of a corresponding setting in the web browser that he or she uses and thereby permanently deny the setting of cookies.
Such an adjustment in the web browser used will also prevent Google Analytics from installing a cookie on the user’s information technology system.
Furthermore, the data subject has the possibility to object to a collection of data that is generated by Google Analytics in connection with the use of this website, as well as the processing of such data by Google. To do so, the data subject must download a browser add-on at the link https://tools.google.com/dlpage/gaoptout and install it.
HOW IS YOUR PERSONAL DATA PROCESSED?
1 – Art d’Amour, in accessing any personal data, undertakes to Protect, by means of legally required security measures, of a technical and organisational nature, which guarantee its security, thus avoiding its alteration, loss, treatment or unauthorised access, in accordance with the state of technology at each moment, the nature of the data and the possible risks to which they are exposed; Use or apply the data exclusively for the purposes duly provided for; Ensure that the data is accessed and processed only by those employees whose intervention is necessary for the provision of the service, who are bound by the duty of secrecy and confidentiality.
2 – By providing their personal data, the owners of the data or third parties duly authorized for the purpose, declare that they authorize and consent to the treatment of these data by Art d’Amour for the purposes of facilitating and allowing the provision of contracted services.
3 – Art d’Amour declares and guarantees that it has implemented, is equipped and will continue to implement the technical and organizational security measures necessary to guarantee the security of the personal data provided, in order to avoid their alteration, loss, treatment and/or unauthorized access, taking into account the current state of technology, the nature of the data stored and the risks to which they are exposed.
4 – Art d’Amour is responsible for the treatment of the data it collects.
5 – Access to the information on file by our company employees is only possible with the insertion of access passwords.
6 – Personal data is processed with the degree of protection required by law to ensure their security and prevent alteration, loss, processing or unauthorised access, the owner of the data being aware and accepting that the security measures on the Internet are not impregnable, given the state of technology.
7 – Documentation supplied on physical support shall be carefully stored with access conditioned and controlled by the person responsible for the same. Whenever it becomes unnecessary to archive them, the documents shall be irreversibly destroyed.
HOW DO WE SAFEGUARD YOUR PERSONAL DATA?
We are committed to taking all reasonable and appropriate measures to protect the personal information we possess from misuse, accidental or unlawful alteration, loss and unauthorised disclosure or access. To that end our company uses security systems, rules and other procedures to ensure the protection of your personal data, as well as to prevent unauthorised access to data, misuse, disclosure, loss or destruction.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
We only store your personal data for as long as is necessary to achieve the purpose for which we collected it, to respond to your needs, your requests to us, or to comply with our contractual and legal obligations.
To determine the period for which we keep your data, we use the criteria mentioned below. If several criteria apply simultaneously, we will retain your personal data in accordance with the criterion which entails the retention of your personal data for the longest period of time.
When you contract the services of our company your data will be kept for the duration of our business relationship, including any complaints that may arise, as well as and for a period of 5 years after the termination of such relationship, without prejudice to compliance with legal obligations of the controller;
When you provide us with your personal data as part of a contract concluded with our clients (through us) we will keep your personal data for the duration of the said contract and for 5 years after its termination;
When you provide us with your data in the framework of a pre-contractual relationship and no contract is concluded, we will keep your data for a period of 60 (sixty) days, after which it will be destroyed;
If you contact us to ask questions, request information and clarifications, we shall keep your personal data for the period of time necessary to resolve your question/ provide you with the information and/or clarifications requested;
Regarding the data collected during the recruitment process, they will be kept for a maximum period of 1 year after the end of the recruitment process.
HOW CAN YOU ACCESS, CHANGE OR REMOVE THE PERSONAL DATA YOU HAVE GIVEN US?
One of the main aims of the GDPR is to protect and clarify the rights of European Union citizens in relation to the privacy of their data, even where it has been provided to us by you.
We will endeavour to deal with your request without undue delay and in any event within one month (subject to any extensions permitted by law).
Please note that we may keep a record of your communications (e-mail) to help us resolve any issues raised by you.
Right to object: this right allows you to object to the processing of your personal data on grounds relating to your particular situation, where your data is processed for one of the following reasons: in pursuit of our legitimate interests, in the performance of a task carried out in the public interest, for scientific, historical, research or statistical purposes. In this case, we will stop the processing of the data to which you object, unless we can demonstrate that we have compelling legitimate grounds for the processing which override your interests or we are processing your data in the exercise or defence of a right.
Right to withdraw consent: where we have obtained your consent to process your personal data for certain activities (for example, for marketing purposes) you may withdraw that consent at any time and we will no longer carry out the specific activity to which you previously consented.
Request for access to data: you may ask us at any time to confirm the information we hold about you, as well as request additional information about the purposes of processing, the retention period of your data, among other information provided for in Article 15 of the RGPD.
Right to forget/erase: in certain circumstances, you have the right for us to erase your personal data. Normally, the exercise of this right must meet one of the following criteria:
– The data is no longer needed for the purpose for which we collected/processed it.
– When you have withdrawn your consent for us to process your data and there is no other valid reason for us to process it further.
– Where you object to the processing and there are no overriding legitimate interests justifying it.
e) Right to restrict processing: in certain circumstances you have the right to restrict our processing of your personal data. Where we have shared your personal data with third parties, they will be notified of the restricted processing, unless this is impossible or involves a disproportionate effort. We will, of course, notify you before lifting any restriction on the processing of your personal data.
f) Right of rectification: you have the right to request that we rectify any inaccurate or incomplete personal data we hold about you. Where we have shared such personal data with third parties, they will be notified of the rectification. Where appropriate, we will also disclose to you to which third parties we disclosed the inaccurate or incomplete personal data. Where we believe it is reasonable not to comply with your request, we will explain the reasons for our decision. It is important that the personal information we hold about you is accurate and up to date. Please inform us if there are any changes to your personal information during the period we hold your data.
g) Right to data portability: if you so wish, you have the right to transfer your personal data between controllers.
2- If you wish to exercise your rights of access, rectification, erasure, portability or limitation of processing which the RGPD grants you, you may send an email to info@artdamour.com or contact us at +351 916 209 185.
3- If you withdraw your consent, this does not compromise the lawfulness of the processing carried out until that date.
RIGHT TO LODGE A COMPLAINT WITH YOUR SUPERVISORY AUTHORITY
If you are unhappy with our use of your personal data or with our response after exercising any of these rights, you have the right to lodge a complaint with your supervisory authority (Comissão Nacional de Proteção de Dados – CNPD | Rua de São Bento, n.º 148, 3º, 1200-821 Lisboa | Tel: +351 213928400 | Fax: +351 213976832 | e-mail: geral@cnpd.pt).
Our company reserves the right to make adjustments or changes to its Privacy Policy at any time, always in strict compliance with the law, and these changes will be duly disclosed in order to keep you informed about how we treat your personal data.
WARRANTIES AND CAVEATS:
The data holder guarantees that the personal data communicated to our company are correct and accurate and undertakes to notify any changes or modifications to the same and assumes sole responsibility for losses and damages caused by erroneous, inaccurate or incomplete communication of the data.
Our company welcomes your comments/suggestions regarding this Privacy Policy.
Please contact us:
ISALUCA UNIPESSOAL LDA
Rua do Meio 59 – Figueira – 8650-180 Budens, Faro – Portugal
Tel: +351 916 209 185
E-mail: info@artdamour.com