Privacy Policy

Framework under Regulation (EU) 2016/679 and Law No. 58/2019

Considering Law No. 58/2019, which ensures the enforcement in the national legal order of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), which replaced Directive 95/46/EC transposed into the Portuguese legal system by Law No. 67/98 of 26 October.

All information collected through forms on www.caisdasflores.pt is stored in a database where access is reserved to the Municipality of Cais das Flores and its respective technical teams involved, duly authorized for maintenance and support purposes. The information collected is only used by internal services and at no time will the data be transferred to third parties for commercial purposes. It is further informed that the presented platform encrypts user passwords so that they cannot be violated. The data may only be used publicly by the Municipality of Cais das Flores to defend its good name.

Any password or private data provided by the user is their sole responsibility. The user must ensure that only authorized individuals access their accounts. The user will be responsible for any problems associated with the misuse of their user account in case of unauthorized access.

For statistical purposes, for each visit to www.caisdasflores.pt, information about the browser used, screen resolution, IP address, hostname, and pages visited on www.caisdasflores.pt is collected. This information is stored in access files reserved for the Municipality of Cais das Flores and its respective technical teams involved, duly authorized for maintenance and support purposes.

What is personal data and what categories of data do we process at Bairro Comercial Digital Cais das Flores?

According to the General Data Protection Regulation (GDPR), personal data is any information that allows the direct or indirect identification of a person, regardless of its form or medium. At Bairro Comercial Digital Cais das Flores, we process various categories of personal data, including:

• Identification and Contact Data: Examples of this data include Name, identification document number, tax identification number (NIF), age, date of birth, telephone contact, email, address, payment details, login credentials, among others.
• Relationship with Bairro Comercial Digital Cais das Flores: Purchase history, reserved services, visited pages, searches performed on the platform.
• User Profile: Preferences, interests, and interactions with the platform.
• Location Data: Information regarding the approximate or precise location of the user, collected only with their explicit consent. This data is used solely for application features that depend on geolocation, such as displaying maps or relevant content for the user’s geographical area. Location data is not shared with third parties and is not used for marketing purposes or profile creation.

Who is responsible for processing your personal data?

The entity responsible for the processing of your personal data is the Municipality of Cais das Flores as the Data Controller, in accordance with Article 4 of the GDPR, which manages and ensures the protection of the data collected on the platform, guaranteeing compliance with the applicable legislation on privacy and data protection.

In what situations do we process your personal data?

At Bairro Comercial Digital Cais das Flores, we process your personal data in the following situations:

• When you create an account on the platform.
• When you make a purchase or book a service.
• When you interact with the platform or use its functionalities.
• Whenever you provide us with your consent for the processing of your data.

The processing can occur digitally, in writing, or, in certain cases, through direct contact.

For what purposes do we process your personal data?

Bairro Comercial Digital Cais das Flores ensures that your personal data is processed exclusively for the purposes informed within the scope of the services made available on the platform. For example, we process your data for the following purposes:

• User Account Management: Processing of identification and contact data for account creation and management.
• Purchase Processing: Registration of orders, invoicing, and purchase history.
• Marketing and Communication: Sending information about campaigns, promotions, and news, with the user’s consent.
• Home Deliveries: Use of identification, contact, and address data for shipping orders.
• Compliance with Legal Obligations: Data retention for tax purposes and compliance with applicable legislation.

On what grounds do we process your personal data?

Bairro Comercial Digital Cais das Flores processes your personal data based on the following circumstances:

• Your express consent: When you authorize the receipt of marketing communications, such as emails or SMS with promotions and news.
• The execution of a contract: For processing purchases, managing orders, and providing services contracted on the platform.
• Compliance with a legal obligation: To ensure compliance with applicable tax and regulatory requirements.
• The legitimate interest of Bairro Comercial Digital Cais das Flores: To improve the user experience, optimize the services offered, and ensure the security of the platform.

We are committed to processing your personal data with complete confidentiality and security, preventing unauthorized access, loss, or damage.

How long do we keep your personal data?

Bairro Comercial Digital Cais das Flores keeps your personal data only for the time necessary to fulfill the purpose for which it was collected. In general, Bairro Comercial Digital Cais das Flores keeps transaction data for a period of 10 years, which is the period defined by law, as well as the maximum reasonable lifespan of our equipment. If you exercise your right to object or right to erasure, the data will be deleted, unless a legal obligation imposes its retention for a longer period.

To whom do we transmit your personal data?

Bairro Comercial Digital Cais das Flores may share your personal data with third parties only when necessary for the provision of contracted services. This includes, for example, carriers for the delivery of products. In addition, your data may be transmitted to public entities, such as the Tax Authority, when required by law.

What are your personal data protection rights and how can you exercise them?

At Bairro Comercial Digital Cais das Flores, we guarantee that you can exercise your data protection rights in a transparent and secure manner. These are your rights and how you can exercise them:

• Right of Access: You can request information about the personal data we process, including the purposes of the processing and the retention periods.
• Right to Rectification: If your data is incorrect or outdated, you can request its correction.
• Right to Erasure: You can request the deletion of your personal data, except in cases where its retention is required by law.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable digital format.
• Right to Object: You can object to the processing of your data or withdraw a previously given consent.
• Right to Restriction of Processing: You can request the suspension of processing or the restriction of the use of your data for specific purposes.
• Right not to be subject to automated decisions: You can request not to be subject to decisions based solely on automated processing, such as consumer profiles based on your purchase history and preferences.

To exercise any of these rights, please contact us through our contact form.

How do we protect your personal data?

At Bairro Comercial Digital Cais das Flores, we adopt rigorous security measures to ensure the protection of your personal data, aligned with the best national and international practices. These measures include technological, administrative, physical, and procedural controls to prevent misuse, unauthorized access, improper disclosure, loss, alteration, or destruction of your data.

We highlight some of the main measures implemented:

• Restricted access only to authorized employees.
• Secure storage and transmission of personal data.
• Protection of systems against unauthorized access.
• Integrity and quality mechanisms to ensure the accuracy of data.
• Continuous monitoring to prevent and detect potential threats.
• System redundancy to avoid data loss.

We are committed to continuous improvement of our security practices to ensure maximum protection of your data.

Updates to this Privacy Policy

This Privacy Policy may be reviewed and updated periodically. Any changes will be duly communicated through our platform.