For PoliPaul, the protection of your personal data is a priority and, as such, we are committed to processing only personal data that is essential to comply with our obligations towards you, in accordance with the General Data Protection Regulation and other applicable legislation on the protection of personal data in force in the countries where we operate.

We believe it is important that you understand what data we process, for what purpose, how we protect these rights and what your rights are in relation to your data.

1. Who is responsible for processing your personal data, what data do we collect and when?

PoliPaul will be the entity responsible for processing your "Personal Data", which is the set of information related to you, the Customer, and which allows us, directly or indirectly, to identify you.

We ask you for some personal data to provide the requested products or services. For example, when you make purchases, contact our customer services, request to receive communications or create an account.

This personal data may include:

• contact details including name, email, telephone number and shipping address;

• login and account information, password and unique user ID;

• Personal details;

• personal preferences, including your wish list, as well as marketing and cookie preferences.

Certain data is automatically collected from your device or web browser when you interact with our website. This data includes:

• Device IDs, call status, network access, storage information, and battery information; It is

• Cookies, IP addresses, referral headers, data that identifies your web browser and its version, and web beacons and tags.

2. How and why do we use your personal data?

We use your personal data for the following purposes:

• Provide the website features and services requested, such as purchasing our products and subscribing to our mailing list;

• Customer support;

• Compliance with legal obligations;

• Accounting and corporate management and control.

To process your personal data, we rely on certain legal grounds depending on how you interact with us.

• When you purchase our products in our online store, we need your personal data to fulfill our contract with you. For example, we need your payment and contact details to deliver your order.

• When you use our form, we rely on your consent to the processing.

• We also rely on other legal grounds, such as our legitimate interests as a company, to comply with a legal obligation or to protect your legal interests.

3. How long do we keep your personal data?

Your personal information will be retained for as long as necessary to fulfill the purposes set out in this privacy policy (unless a longer retention period is required by applicable law). In general, this means that we will keep your personal data for as long as you maintain your PoliPaul account. For personal data related to product purchases, we keep it for longer to comply with legal obligations (such as billing data, which will be kept 10 (ten) years from purchase, as it corresponds to the legal period required by law, for information to Tax Authority and accounting or tax effects.

When the end of the retention period is reached, your personal data will be anonymized or securely destroyed.

4. Who do we share your data with?

Firstly, we want to ensure that when your personal data is processed by processors at PoliPaul's request, we demand from them the same level of privacy and security that we impose on ourselves.

Your personal data may be transmitted to processors who, in the performance of the services they provide, process your data on behalf of PoliPaul. In such cases, we always require that processors have appropriate and effective security measures in place to protect your personal data.

The categories of processors to which PoliPaul may refer are, in particular, subcontracted entities for the execution of services in the areas of customer management, customer support and information systems.

When required by law, we may also be required to disclose your personal data to authorities or third parties, such as the State, Tax Authority and other entities with powers to do so.

5. What are your rights in relation to your personal data?

Your rights are important to PoliPaul. As such, we ensure that you have adequate resources to exercise the following rights:

• Access to your personal data;

• Update your personal data;

• Object to the processing of your personal data;

• Request to limit how we use your personal data while we correct or clarify any concerns about its content or our use of it;

• Request the portability of your personal data that you provided to us;

• Request the deletion of your personal data;

• Respond to automated decisions based on your personal data;

• Withdraw or change, at any time, the consent you gave us to use your personal data. 

The exercise of these rights is not absolute, therefore, when your personal data is used to safeguard the public interest, especially in cases of detection and prevention of crimes, the exercise of your rights may be limited.

To exercise your rights or whenever you have any questions about our use of your personal data, please contact us through the following means:

The. Customer Support: geral@polipaul.pt

If you are not satisfied with the way we process your personal data or with our response to your request to exercise your rights, you can lodge a complaint with the Portuguese supervisory authority:

National Data Protection Commission (CNPD)

• Address: Rua de São Bento, 148 – 3º, 1200-821 Lisbon

• Telephone: +351213928400

• Fax: +351213976832

• Email: geral@cnpd.pt.

6. How do we protect your data?

The security of your personal data is of paramount importance to PoliPaul, which is why we implement appropriate and effective security measures to prevent improper or unauthorized use, access, alteration, destruction or disclosure of your personal data.

Among others, we highlight the following security measures:

• Protection of information systems through devices that prevent unauthorized access to your personal data;

• Continuous monitoring of information systems with the aim of preventing, detecting and preventing the misuse of your personal data;

• Control of physical access to the places where your personal data is processed.

Updates to this Privacy Policy

Applicable law and our practices change over time. If we decide to update our privacy policy, we will post the changes on our website. If we materially change the way we process your personal data, we will provide you with advance notice or, where required by law, seek your consent before we implement those changes.