Privacy and Security Policy

This privacy policy defines how Maria Avillez Jewellery Unipessoal, Lda, with its registered office at Rua do Sacramento à Lapa, Nº62 - R/C Dto 1200-795 Lisbon, uses and protects the information it provides when you use the website www.mariaavillezjewellery.com.

Maria Avillez Jewellery reserves the right to change this policy, occasionally, updating this text in accordance with the changes that may be implemented, and hereby disclose them.

Responsible for data processing

The data controller is Maria Avillez Jewellery.

Telephone: +351 917570591 ou 213905240

Address: Rua do Sacramento à Lapa, Nº62 - R/C Dto. 1200-795 Lisbon

E-mail: info@mariaavillezjewellery.com

Scope of the Privacy Policy

This Privacy Policy applies to data that has been directly provided by the respective owner or collected in accesses of the holder to our site.

You may be asked for the following information:

Name – to identify the client and/or user of our website;
Mobile phone and e-mail address – to carry out all communications regarding your orders, as well as to send promotional and informational e-mails about our products and services;
Address – to send your orders or accounting documents (which may be different);
VAT Nº – for billing purposes;
IBAN – for the purpose of reimbursement in the case of returns.

Treatment of personal data and consent

By providing your personal data to Maria Avillez Jewellery, Unipessoal Lda., the holder of personal data previously consents, in a free, informed, specific and unequivocal manner, that they are treated for the purposes described in this Privacy Policy.

Object

The processing of data is necessary for the execution and fulfilment of the purchase and sale contract or the provision of services to be concluded between the customer/user and Maria Avillez Jewellery or for carrying out pre-contractual measures at the request of the customer/user.

Data preservation period

The period of time during which the data will be stored and preserved varies according to the purpose for which the information is processed, with a maximum of 3 years of inactivity, after which, you will be contacted to express your desire to preserve or delete your data from our database, without prejudice to the prescription and expiry dates for the exercise of Maria Avillez Jewellery's rights, under the terms of the law, as well as for the preservation of personal data resulting from legal obligations.

Sharing and/or storing data with third parties

The data will only be shared with partner companies for specific purposes, such as ordering and delivering, and we ensure that these companies comply with the GDPR and this privacy policy.

For the purpose of delivering orders, we may share shipping data (name, address and phone) with the couriers we work with.

We store your data on the e-commerce platform we use (Shopify), on our billing software and on the e-mail marketing platform (Mailchimp).

Rights of the personal data orders

The holder of personal data has the right to request access to personal data concerning him, such as:

Rectification of personal data: the holder of the personal data has the right to obtain from Maria Avillez Jewellery, Unipessoal Lda., without undue delay, rectification of inaccurate or incomplete data concerning him.
Right of access: the holder of the personal data has the right to obtain from Maria Avillez Jewellery, Unipessoal Lda. the confirmation that the data concerning him or her are processed and, if applicable, to access their personal data and access the information provided for by law.
Right to erase data (“right to be forgotten”): the owner of the personal data has the right to ask Maria Avillez Jewellery, Unipessoal Lda. to erase his data, without undue delay, and Maria Avillez Jewellery, Unipessoal Lda. has the obligation to erase the personal data when it applies, namely a following reasons:

personal data are no longer necessary for the purpose for which they were collected or processed;
the data subject has withdrawn his consent for the processing of data (where treatment is based on consent) and there is no other basis for such treatment;
The proprietor opposes the treatment and there are no prevailing legitimate interests justifying the treatment.

Right to limitation of processing: the holder of the data has the right to obtain from Maria Avillez Jewellery, Unipessoal Lda., the limitation of the treatment, if one of the following applies in particular:

To answer the accuracy of the personal data, during a period that allows Maria Avillez Jewellery, Unipessoal Lda. to verify its accuracy;
The processing of data is lawful and the data subject is opposed to the deletion of his personal data and to request, on the other hand, the limitation of its use;
Maria Avillez Jewellery, Unipessoal Lda. no longer needs personal data for treatment purposes, but such data are required by the holder for the purposes of declaration, exercise or defense of a right in a judicial process;
If he opposes the processing until it is established that the legitimate grounds of the controller prevail over those of the data subject.

Data portability right: if the processing depends on the consent of the data subject and such consent has been provided by automated means, the data subject has the right to receive the personal data concerning him and which he has provided to Maria Avillez Jewellery, Unipessoal Lda., in a format structured, in use and automatic reading.
Right of opposition: in cases where the processing of data is carried out for the purpose of the legitimate interests pursued by Maria Avillez Jewellery, Unipessoal Lda., or the processing of data is done for the purposes of direct marketing; or profile definition, the data subject may at any time object to the processing of his or her personal data.
Right of Claim: you also have the right to complain to the competent control authority, the National Data Protection Commission, when you consider that Maria Avillez Jewellery, Unipessoal Lda. has breached its rights under the GDPR terms.
Withdrawal of consent: If consent is legally required for the processing of personal data, the data subject has the right to withdraw consent at any time, although that right does not jeopardize the lawfulness of the treatment made on the basis of the prior consent given or the subsequent processing of the same data , based on another legal basis, such as compliance with the contract or legal obligation to which Maria Avillez Jewellery, Unipessoal Lda. is subject.

These rights can be exercised through the following contacts:

Mobile: +351 917570591

Address: Rua do Sacramento à Lapa, Nº62 - R/C Dto. 1200-795 Lisbon

E-mail: info@mariaavillezjewellery.com

As respostas às suas solicitações podem ser prestadas de forma escrita, por meios eletrónicos.

Responses to your requests can be provided in writing, by electronic means. Responses will be provided, without undue delay, within 1 month from the date of receipt of the request, or within 2 months followed by information to the data subject, when the request is complex or there are several requests.

Security

In order to prevent unauthorized access or disclosure of your information, adequate physical, electronic and administrative procedures have been established to safeguard and protect the information we collect online, restricting access to stored data to employees specifically authorized for this purpose.

Cookies

OOur website/online store uses cookies. Cookies are small software tags that are stored on the access devices through the browser, retaining only information related to preferences, not including, as such, personal data.

There are two groups of cookies that can be used

Permanent cookies – are cookies that are stored at the browser level on access devices (PC, mobile and tablet) and that are used whenever you make a new visit to one of the websites of Maria Avillez Jewellery, Unipessoal Lda. They are generally used to direct navigation to the user's interests, allowing to provide a more personalized service.
Session cookies – are temporary cookies that remain in the browser's cookie file until you leave the website. The information obtained by these cookies serves to analyse traffic patterns on the web, allowing you to identify problems and provide a better browsing experience.

Cookies allow browsing the website and using applications, as well as accessing secure areas of the website. Without these cookies, the required services cannot be provided.

Links to other sites

Our site may contain links to other sites of interest. However, once you have used these links, you should note that we have no control over these other sites. Therefore, we cannot be responsible for the protection and privacy of any information you provide while visiting such sites that are not governed by this privacy statement.

You must pay attention to the privacy statement applicable to the website in question.

Breach of personal data

In the event of a breach of personal data, the controller shall notify the supervisory body, without undue delay, and whenever possible, within 72 hours after becoming aware of it, unless the breach of personal data is not likely to result in a risk to the rights and guarantees of natural persons.

Contacts of CNPD – Comissão Nacional de Protecção de Dados, the Portuguese Data Protection Authority

Rua de São Bento n.º 148-3.º 1200-821 Lisbon

Mobile: +351 213928400

Fax: +351 213976832

E-mail: geral@cnpd.pt

Website: www.cnpd.pt