Privacy Policy

PRIVACY POLICY

This Privacy Policy regulates the processing of users’ personal data, collected within the scope of the use of this website www.acexarme.com, by Acexarme. The use of our website presupposes that users know and accept this Privacy Policy. The provision of personal data implies knowledge and acceptance of the General Conditions and conditions of use of the website, available for consultation in the “Terms and Conditions” area. The Privacy Policy applies exclusively to the processing of personal data carried out by Acexarme in the context of the purposes set out herein, in which the personal information is considered to relate to a natural person, of any nature and regardless of its support, identified or identifiable. 

OUR COMMITMENT 

We ensure compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter “GDPR”) and other legislation on the protection of personal data and privacy. Respect for your privacy, the protection of your personal data and compliance with the applicable legal obligations in this area is a priority for us, which is why we are committed to only processing your personal data that is strictly necessary to provide you with the best service, ensuring respect for your privacy, transparency in information and application of best practices in the area of ​​security and protection of personal data. Whenever your personal data is processed by contracted entities, we will require them to provide the same level of security and privacy guarantee in terms of personal data protection.

POINT 1. RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

The person responsible for processing personal data is Ricardo Jorge da Rocha Teixeira Carvalho, with NIF 214461076, with address at Rua Sargento Barbosa Nº 214 - 1º H, 4410-270 Canelas, Vila Nova Gaia - Portugal, hereinafter Acexarme.

For questions related to the processing of your personal data, we will be available to help you through the following email: info@acexarme.com 

1.1. How can you contact the person responsible for protecting your Personal Data?

Any user may contact the Personal Data Protection Officer regarding all matters relating to the processing of their data and the exercise of the rights granted to them by applicable legislation and, in particular, by this Privacy Policy, via the following email address: info@acexarme.com . 

POINT 2. FOR WHAT PURPOSE WILL YOUR PERSONAL DATA BE PROCESSED AND THE RETENTION PERIOD

2.1 The User may access, browse and use this website without providing any personal information, without prejudice to the browsing data necessary for the correct management of the website. However, the use of certain tools on the website may involve the provision of personal data.

We are committed to only processing the personal data that is strictly necessary to provide you with our services with the highest quality. In this context, the processing of your personal data has the following purposes, lawful grounds and retention periods:

  • Website Management

The processing of this personal data is necessary to allow the use of the website, the processing being based on the execution of a contract whose terms are governed by the Terms and Conditions and, where omitted, by the general principles of law.

Your data will be kept for up to 1 (one) year after your last visit to the website, and in accordance with the information provided in the Cookies Policy.

  • Marketing 

We process your personal data so that we can send you informative communications about news, campaigns and offers, discounts or benefits, whether generic or targeted, via email and/or SMS. This processing is based on consent, in the event of subscription to the newsletter.

At any time, you can withdraw your consent or object to receiving this type of communications, either through the settings in your personal account or through each communication we send you.

If you are a newsletter subscriber, your data will be kept for up to 2 (two) years after the last interaction.

  • Transaction Management

If you ask us to indicate your tax identification number in your purchases, for the purposes of issuing invoices for the purchase of goods and services, we will need to register it and subsequently transmit it to the Tax Authority, this processing being based on compliance with a legal obligation.

Your data will be kept, by legal requirement, for a period of 10 (ten) years.

  • After-Sales Service

In order to replace the products, you will be asked for your personal identification data to verify the product, its ownership and so that we can inform you as soon as your item is available for delivery to your home, if you so wish. This processing is based on pre-contractual steps or the execution of a contract.

Your data will be kept for up to 2 (two) years after the communication of the product's lack of conformity.

  • Returns

In order to return items, we will ask you for your personal identification and bank details. This processing is based on pre-contractual steps or the execution of a contract, the terms of which are governed by the Terms and Conditions.

We only retain your data for Transaction Management purposes.

  • Home Deliveries

We process your identification data so that we can deliver your purchases to your home. This processing is based on pre-contractual steps or execution of the contract.

We only retain your data for Transaction Management purposes.

  • Service Management and Customer Support

In order to provide you with the best possible assistance and support, before, during and after the sale of our products and services, we need you to provide us with your personal identification data. This way we can identify you, analyse your request and respond to you in a timely manner. This processing is based on pre-contractual steps or execution of the contract.

Your data will be kept for up to 1 (one) year after the end of the contract or, if it has not been concluded, up to 6 (six) months after the start of the contracting process, without conclusion.

  • Suggestions and Complaints

You may, at any time, make suggestions or complaints regarding our services, indicating your personal identification data.

Additionally, and in compliance with DL No. 156/2005, of September 15, we make the Complaints Book available to you in digital format on the website. This processing is based on the company's legitimate interest in duly following up on your requests and in complying with legal obligations.

Your data will be kept, by legal requirement, for a period of 3 (three) years.

  • Call recording (contractual relationship, to monitor the quality of service and to comply with legal obligations)

When you contact our customer support team, it may be necessary to record the call as part of the contractual relationship, to monitor the quality of the service provided or to comply with legal obligations. This processing is based on your consent.

Your data will be kept for a period of 6 (six) months.

2.2. What is the basis of Lawfulness?

If the lawful basis for the processing of your personal data is consent or legitimate interest, you may withdraw your consent or object to the processing at any time, without any consequences, but without compromising the lawfulness of the processing carried out in the meantime. If your consent is withdrawn or if you expressly object, we will immediately cease processing your personal data for the purpose in question, unless there is a need to process such data in order to comply with legal and/or contractual obligations.

We only retain your personal data for the period strictly necessary to fulfil the purposes identified above, within the legal limits. Once the defined retention period has ended, we undertake to delete, destroy or anonymise your personal data. With the exception of data that we must retain for a longer period, as required by law, as a general rule, we will delete your personal data as soon as your questions and requests have been answered and duly resolved, the services you request have been provided, or the warranty periods for the items you purchase have expired.

If you have any questions or would like to obtain additional information regarding the retention periods for your personal data, you can contact us via the following email address: info@acexarme.com

POINT 3. WHAT PERSONAL DATA WILL BE PROCESSED?

In the context of the purposes stated, we only process the data strictly necessary for the pursuit of the same, namely:

  • Personal identification data (e.g. full name, email, telephone, address, date of birth, gender, signature, tax identification number, image and/or voice),
  • Data relating to payment methods and transactions (e.g. name of credit card holder, card number, expiry date),
  • Contract details (e.g. purchase details and warranty(s) of the item(s)),
  • Traffic data and call recording results.

POINT 4. WITH WHOM CAN WE SHARE YOUR PERSONAL DATA?

In certain cases, we may disclose your personal data, to the extent strictly necessary, to entities that provide us with services (“Subcontractors”), for the purposes referred to above (e.g. in the context of home deliveries, support services and marketing actions), under the terms of the contracts entered into with them.

Your data may also be shared with partner entities, under joint liability agreements entered into with them.

If your personal data must be shared with service providers located outside the European Union, we ensure that your personal data benefits from a high level of protection under applicable legislation on personal data, promoting the transfer under an adequacy decision of the European Commission or standard data protection clauses (or similar) approved by the European Commission.

Your data may also be communicated to authorities or third parties when the transmission is carried out within the scope of compliance with a legal and/or contractual obligation, a decision by the CNPD or another relevant supervisory entity, or a court order.

We do not, under any circumstances, share your personal data with other companies or brands for other commercial purposes.

POINT 5. WHAT ARE YOUR RIGHTS AND HOW CAN YOU EXERCISE THEM?

Under applicable law, and as the holder of personal data, you may at any time request the right to access, rectify, erase your personal data, limit processing, portability, opposition and not be subject to automated decisions.

In cases where you have given consent for certain processing of your personal data, you may withdraw it at any time.

To exercise any of these rights, you must do so by sending a request to the following email address: info@acexarme.com 

You may also contact our Data Protection Officer regarding any issues related to the processing of your data and the exercise of the rights granted to you by applicable legislation and, in particular, by this Privacy Policy, via the following email address: info@acexarme.com

Without prejudice to any other administrative or judicial remedy, you may also file a complaint with the National Data Protection Commission (“CNPD”), if you believe that the processing of your personal data by us violates the legal regime in force.

National Data Protection Commission

Headquarters: Avenida D. Carlos I, No. 134, 1st floor, 1200-651 Lisbon

Telephone: +351 213928400 (Call to National Fixed Network).

Email: geral@cnpd.pt

5.1. Request Information about the Processing of my Personal Data 

You have the right to obtain additional information about how we use your personal data, thus ensuring the transparency of such processing. This information includes confirmation as to whether or not your personal data is being processed and, if so, you have the right to obtain certain information such as the categories of personal data, the purposes of the processing, the recipients of the personal data, the period for which the personal data will be stored or the source of the personal data, among others. 

5.2. Request the Portability of my Personal Data 

You have the right to request that your personal data be transmitted directly to another controller in a format convenient for you, whenever this is technically possible.

5.3. Request the Erasure of my Personal Data 

You have the right to have your personal data erased or “forgotten” when the data is no longer necessary for the purposes of the processing or if the data is processed unlawfully, among other reasons. There are exceptions to the exercise of the right to erasure, such as cases where processing is necessary for the purposes of exercising or defending a right in legal proceedings.

The deletion of your personal data is irreversible , which means that we cannot recover it if you wish to reverse this decision.

5.4. Limit the Processing of my Personal Data 

You have the right to obtain restriction of the processing of your personal data in certain situations, such as when your personal data is incorrect. When exercising this right, the data may only be processed in certain cases (for example, for storage purposes), but with the affixing of specific marks.

5.5. Request Objection to the Processing of my Personal Data 

You have the right to object to the processing of your personal data, for reasons relating to your particular situation. This right allows you to object to processing that is not based on your consent, such as sending emails or SMS relating to your transactions.

POINT 6. SHOPIFY

The “Acexarme” online store is hosted on Shopify Inc, which provides us with the e-commerce platform that allows us to sell our products and services to you.

Your data is stored in Shopify's data storage and databases, as well as in the general Shopify application, and is stored on a secure server behind a firewall.

POINT 7. COOKIE POLICY

We recommend reading our Cookies Policy, available on this website by clicking here , and which forms an integral part of this policy, to find out more information about the processing of your personal data carried out through this functionality.

POINT 8. HOW WE PROTECT YOUR PERSONAL DATA

We have a variety of information security measures in place, in line with national and international best practices, to protect your personal data, including technological controls, administrative, technical, physical measures and procedures that guarantee the protection of your personal data, preventing its improper use, unauthorized access to data, its disclosure, loss, improper or inadvertent alteration, or its destruction.

In terms of information security, we assume the same commitment to continuous improvement that we follow in our daily activities.

Among others, we highlight the following measures:

1. Restricted access to your personal data;

2. Storage and transmission of your personal data securely;

3. Protection of information systems through devices that prevent unauthorized access to your personal data;

4. Implementation of mechanisms that guarantee the safeguarding of the integrity and quality of your personal data;

5. Permanent monitoring of information systems, with the aim of preventing, detecting and preventing the misuse of your personal data;

6. Redundancy of personal data storage, processing and communication equipment, to avoid loss of availability.

It is, however, the responsibility of Users to guarantee and ensure that the devices and equipment used to access this website are adequately protected against harmful software, computer viruses and worms.

POINT 9. HYPERLINKS TO OTHER WEBSITES AND SOCIAL NETWORKS 

We may provide hyperlinks to other websites of interest or partners, and we are not responsible for the privacy policy, cookie policy, or conditions of use of these same websites.

When you access other websites through the hyperlinks provided, the entities managing these websites may collect information about you, which will be used by them. We recommend that when you access other websites, you consult all the information and conditions mentioned above.

When you choose to follow us on social media, when you interact with us on these networks, or when you access the website through these networks, your personal data may be processed by the entities managing the social networks or the features made available, in accordance with their respective privacy policies, which we recommend you read.

POINT 10. UPDATES TO THIS PRIVACY POLICY

This Privacy Policy may be reviewed and updated at any time, and such changes will be duly published on the website www.acexarme.com .