1. INFORMATION REGARDING THE PROCESSING OF CONTACT DATA OBTAINED THROUGH THE WEBSITE WWW.ALOJADAHERDADE.COM:

The controller of the contact details collected belongs to Papelaria da Herdade. Lda. holder of NIPC 514 986 352 with registered office at Av. Pinhal da Aroeira, Zona Comercial da Herdade da Aroeira, Loja 14, 2820-567 Charneca da Caparica

2. INFORMATION ABOUT THE DATA REQUESTED:

When you place an order on the Site, we collect the following information:

- Name
- Email
- Telephone
- VAT number (optional)
- Delivery address
- Billing address

The information mentioned above is requested in order to be able to fulfill your orders, namely to confirm stock, receive payment, handle delivery, create your invoice and contact you in case of any problem or question.

3. PURPOSE OF DATA COLLECTION:

By accepting the Privacy Policy and Terms and Conditions contained in this website, the user-client expressly declares that he authorizes the collection or updating of his contact data, for integration in the company's files Papelaria da Herdade, Lda, holder of the NIPC 514 986 352, for the purpose of customer management, business relationships, as well as for the sending of advertising about products and services under the terms of Law No. 6/99, Law No. 41/2004 and Directive No. 2002/58/EC, through automated processing and profiling, through all available channels of communication, including electronic means.
The express consent will be exercised through the acceptance made at www.aroeiraconceptstore.ptand www.aroeiraconceptstore/newsletter, to all associated domains and subdomains, in person at any of our stores, by email, by filling out contest forms in which they participate freely or by telephone contact (customers who contact us to place orders by phone). The collection of this data and its storage facilitates the ordering process as it will not be necessary to repeat or enter your personal data in each new purchase you make.
The collection of data from children is lawful when they are at least 16 years old. In the case of children under 16 years of age, the controller will not collect them for these purposes, unless authorized by the holder of parental responsibilities.
The contact details collected will be kept for the period in which the purpose for which their processing was consented is verified, or until the right to object, rectify and delete them is exercised.
Without prejudice to any registrations on national opposition lists (Robinson list), the express consent of the Customer, declared in the online store, before an employee in person in a physical store, by email, filling in competition forms in which they participate freely or by telephone contact (customers who contact us to place orders by telephone), will remain valid, except in the case of express opposition to the sending of communications for the purposes listed.

The legitimacy for the processing of your data for the creation of a personal account is the execution of the personal account registration agreement on the Website, by which you accept the terms and conditions that are found on the Website, and thus be able to use the services provided.
The sending of advertising or promotional communications for products and services (newsletter) is based on the consent that is requested by filling in the corresponding checkbox with a checkbox, without, in any case, the withdrawal of this second consent conditioning the execution of the personal account agreement on the Website.

4. LEGITIMACY FOR DATA COLLECTION:

The legitimacy for the processing of the contact data collected is determined by the Customer's consent, which was expressly provided through the online store, before an employee in person in the store or by telephone and through the re-subscription email sent to all customers who already received the newsletter by this date and who accepted the continuation of its sending.

5. DURATION OF DATA STORAGE:

Your personal data is stored by Aroeira Concept Store (Papelaria da Herdade,  Lda.) and/or by the respective service providers only to the extent necessary for the fulfillment of our obligations and only for the time necessary to satisfy the purposes for which such data was collected, Always in accordance with applicable data protection laws. When the need for processing your personal data by Aroeira Concept Store ceases, we will delete it from our systems and/or records, and/or take steps to anonymize it appropriately, so that it cannot allow the identification of the person to whom it relates (unless we need to keep this information in order to comply with the obligations to which it relates).legal actions to which Aroeira Concept Store is subject). For example, personal data contained in contracts, communications, and business letters may be subject to statutory retention requirements, which may require retention for a period of up to 10 years. If applicable, any other personal data will, in principle, be deleted 5 years after the end of the contractual relationship to which they relate (between the data subject and Aroeira Concept Store).

6. TARGET GROUP:

- CTT PORTUGAL and DPD: The data collected for the shipment of your order (only name, address and telephone number) may be transmitted to the following companies: CTT de Portugal and DPD, the two companies responsible for shipments in mainland Portugal and Portugal Islands, respectively.

7. RIGHTS:

The data subject has the right to access the data stored free of charge, as well as to request its limitation, rectification, opposition or deletion when, among other legal grounds, the contact data are inaccurate or are no longer necessary for the purpose for which they were collected. The data subject also has the right to withdraw his or her consent at any time, without compromising the lawfulness of the processing carried out based on the consent previously given.
If technically possible, you may request the portability of your data to another data controller, in which case it will only be kept for the exercise or defense of claims.
Where you exercise any of the above rights, we reserve the right to retain data solely for the purpose of establishing, exercising or defending legal claims.
To exercise these rights or other additional questions you may have regarding data protection, you may contact Papelaria da Herdade in writing atAv. Pinhal da Aroeira, Herdade da Aroeira Commercial Area, Shop 14, 2820-567 Charneca da Caparicaor by e-mail, to papelariadaherdade@gmail.com; through authentication and proof of the identity of the data subject.
We also inform you that you may file a complaint with the National Data Protection Commission, if you consider that your rights have not been properly addressed. For more information, please visit: https://www.cnpd.pt/.
Aroeira Concept Store does not transfer the contact data collected to third parties not included in the previous list in nº6.. If there is a legitimate reason for its transfer, the Customer will be informed in advance, and the identity of the recipients and the purpose of the processing of the data transferred will be transmitted.
The transfer occurs only when the third parties provide sufficient guarantees of the implementation of appropriate technical and organisational measures, so that the processing meets the requirements and obligations arising from the applicable data protection legislation and ensures the protection of the rights of the data subject.

8. COOKIES AND SIMILAR TECHNOLOGIES:

8.1. Cookies:

Cookie Policy

Cookies are files recorded locally by the Service on the device used by the User. These serve to facilitate navigation and use of all the features of the website.

This service uses only temporary cookies, not storing any type of permanent and/or personal information on the device. These have a short duration, intended only for the maintenance of the user's session and for statistical purposes.

At no time are cookies used to store and/or share the User's personal data, nor are they shared with other entities. Only anonymous browsing data is available to Google Analytics (which you can deactivate by following the instructions in https://tools.google.com/dlpage/gaoptout).

The User may at any time disable cookies in their Internet browser by following the instructions of the same. In this case, some features of the service may stop working or be limited.

Transparent 8.2. GIF/Web Beacons:

Clear GIFs (also known as web beacons) are typically very small transparent graphic images (usually 1 pixel x 1 pixel) that are placed on a website that may be included in the services provided through our website and that typically work in conjunction with cookies to identify our users and their behavior.

8.3. How we use cookies and similar technologies, in particular for profiling:

We may use cookies and automatically collected information to: (i) personalize our website and the services provided through our website, such as remembering your information so that you do not have to re-enter it during your use of our website and the services provided through it, or the next time you do; (ii) display personalized advertising, content, and information based on profiling; (iii) monitor and analyze the effectiveness of our website and the services provided through it, as well as third-party marketing activities, based on profiles; (iv) monitor aggregate website usage metrics, such as the total number of visitors and pages viewed; and (v) track your entries, deliveries and statuses in promotions or other activities made available through our website and the services provided through it (profiling). Tracking technology (profiling) also helps us to manage and improve the user-friendliness of the website by (i) detecting whether there has been any contact between your computer and our website in the past and (ii) identifying the most popular sections of the website.

9. DATA PROTECTION AUTHORITY:

The Data Protection Authority in Portugal is the National Data Protection Commission - CNPD. For more information visit:https://www.cnpd.pt/

10. CHANGES TO THE PRIVACY POLICY:

We may change this Privacy Policy to ensure that it complies with legal requirements, or to reflect changes to our services and internal processes.
This Privacy Policy was published on 23/05/2018 as part of the review of the changes imposed by the new General Data Protection Regulation.