Privacy Policy
PRIVACY POLICY
We are committed to protecting the privacy and personal data of our customers and website users. Therefore, we have developed this policy and the practices described herein. In this policy, we explain how your personal data is collected and processed, so we advise you to read it.
1. IDENTIFICATION OF THE ENTITY RESPONSIBLE FOR DATA PROCESSING.
Entity: SAMADI – COMÉRCIO DE ARTIGOS DE DESPORTO, LDA. (hereinafter referred to as “SAMADI”)
State Registration Number: 510206204
Headquarters: Avenida General Humberto Delgado, No. 39 A, 2825-279 Costa da Caparica (Portugal)
Telephone contact: +351 925 670 534 (call to national mobile network)
Email: info@samadisurfskate.com
2. What is this policy about?
2.1. This Privacy Policy explains how we collect and process personal data necessary for providing services available through the website, describing the practices adopted for this purpose.
3. What is personal data?
3.1. Personal data is all information relating to a person that identifies them, or makes them identifiable, regardless of the nature and format of the information, including the person's sound and image.
3.2. By identifiable, it should be understood a person who can be identified, directly or indirectly, notably by reference to an identification number or to other specific elements of their physical, physiological, psychological, economic, cultural or social identity.
4. How will we use your personal data?
4.1. The personal data processing operations we carry out are an essential tool for your satisfaction and for SAMADI's activity, and are performed in accordance with applicable legislation and best practices.
4.2. Your personal data will not be reused for purposes other than those previously identified or unrelated to the purposes for which it was initially collected.
5. What are the purposes, basis, and retention periods for the collected data?
5.1. The personal data we process has specific legal bases, depending on the purposes for which it is intended, and will be kept for the time necessary for the respective purposes, as listed in this Privacy Policy.
5.2. The personal data collected is only that which is necessary and adequate for the stated purposes.
5.3. The table below shows the purposes of data processing and the data collected for them, the respective legal bases, and the data retention periods or criteria:
PURPOSE | FUNDAMENTALS | DATA COLLECTED | STORAGE PERIOD |
To analyze and respond to your messages, customer support, and information requests. | Consent for this specific purpose. | Name, email, and message. | For the period deemed necessary to achieve this purpose. |
To continue your customer registration on the website and allow you to use its features. | Pre-contractual due diligence, execution of the contract for the use of the reserved area and enjoyment of its respective functionalities. | Name, email, phone number, and password. | For the period during which you are registered as a customer and wish to use the site's services, and up to 1 year after your last access. |
To keep your account details in the reserved area. | Pre-contractual due diligence and contract execution. Legitimate interests in maintaining user information in the reserved area account. | Identification and contact information, address and tax information (CPF), data relating to pending and/or completed orders. | For the period during which you are registered as a customer and wish to use the site's services, and up to 1 year after your last access. |
To process your online purchase, please proceed with billing and order shipment. | Pre-contractual due diligence and contract execution; compliance with legal obligations to which SAMADI is bound (within the scope of invoicing). | Name, address (shipping and billing), phone number, email, CPF (Brazilian tax identification number), bank details strictly necessary for payment processing. | For the period necessary: to execute the contract, to ensure the exercise of the client's and SAMADI 's rights regarding the purchase made , and for the period necessary to fulfill the legal obligations applicable to SAMADI (namely, tax obligations). |
For website management operations. | Consent for this specific purpose (cookies); Legitimate interests pursued by SAMADI , namely, to analyze user interaction with the website and manage it. | Cookie data, IP address. | |
For fraud prevention and information systems security. | Consent for this specific purpose (cookies); Legitimate interests pursued by SAMADI . | Cookie data; IP address. |
5.4. If any specific or mandatory period results from the law, the data retention period will be that period. In all other cases, personal data will be kept for a maximum of the periods indicated above, periods that SAMADI considers sufficient for the fulfillment of the purposes.
5.5. Once the retention period has ended, all collected personal data will be deleted.
6. How do we collect your personal data?
6.1. We will collect your personal data through the forms on the website, but also through the website and its communication with your device and email messages you send us.
6.2. Your personal data is collected through your device in the following way:
(a) When you fill out the contact, purchase, or customer registration forms on the website;
(b) Through your browser;
(c) Through cookies;
(d) IP address.
6.3. SAMADI undertakes to process your data in accordance with the law and in a legitimate manner.
6.4. SAMADI will not sell, rent, or share your personal data with third parties, except in cases clearly identified in this Privacy Policy (see Item 12 for details).
7. What are cookies?
7.1. Cookies are small information files that help identify your browser and can store information, such as user settings and preferences.
7.2. With your consent, SAMADI will store cookies on your device to personalize and facilitate your browsing experience as much as possible, but also for troubleshooting, statistics, quality assurance, and to monitor system security.
7.3. To learn more about the cookies we use, please consult our Cookie Policy .
8. How do we protect your personal data?
8.1. Your personal data is kept secure through the adoption of various technical and organizational security measures that ensure that only employees who need access to your personal data have access to it, in accordance with the need for access and rules created for this purpose.
8.2. To protect your personal data, we only use data center providers that offer us adequate and documented security measures, that is, guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access.
8.3. Similarly, when you browse the site, we protect your data with encryption through the use of an SSL security certificate, and your password is stored using a one-way hash, meaning it cannot be recovered (or disclosed) by anyone, including SAMADI, and can only be reset.
8.4. Although we take the care and precautions we deem appropriate to protect the personal data you provide to us and that we collect, it is important to be aware that no security system is impenetrable.
8.5. Therefore, you should take certain precautions, such as keeping your password secret and not disclosing it to anyone else; if you believe your password has been misused, you should notify us immediately; you should also be careful to log out and log out whenever you close your browser.
9. What are your rights?
9.1. Before explaining how you can exercise your rights, we will inform you what they are:
(a) Access: the right to obtain confirmation as to whether or not personal data concerning you is being processed and, if so, the right to access your personal data;
(b) Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;
(c) Erasure: the right to obtain the erasure of your personal data when one of the grounds listed in the legislation applies, namely when:
I. The personal data is no longer necessary for the purpose that motivated its collection or processing;
ii. Withdraw the consent on which the data processing is based, and there is no other legal basis for the processing;
iii. If you object to the processing and there are no overriding legitimate interests that justify it;
iv. The personal data were processed unlawfully;
v. Personal data must be deleted to comply with a legal obligation;
vi. Personal data were collected in the context of offering information society services.
In your account area, you have the option to delete your account. When you select this option, your billing information and other necessary data to comply with our legal obligations will be kept for the permitted periods.
(d) Treatment restriction: the right to obtain treatment restriction if one of the situations listed in the legislation applies, namely when:
I. To contest the accuracy of personal data;
ii. The processing is unlawful and the data subject objects to the erasure of the personal data and requests, instead, the restriction of its use;
iii. The controller no longer needs the personal data for processing purposes, but the data subject requires them for the establishment, exercise or defense of legal claims;
iv. If the data subject has objected to processing using automated individual decisions.
(e) Objection: the right to object at any time to the processing of personal data concerning you;
(f) Portability: the right to receive personal data concerning you in a structured, commonly used and machine-readable format and the right to transmit this data to another controller without hindrance from the controller to whom the personal data have been provided, where the processing is based on consent or contract or is carried out by automated means. In your reserved area you have the option to download a JSON file containing all your information.
9.2. You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission at www.cnpd.pt).
9.3. In addition to the rights described above, whenever the basis for data processing is consent, the User has the right to withdraw the consent given at any time, without this invalidating the data processing carried out up to that point.
10. How can you exercise your rights?
10.1. Through written contact to the following addresses:
(a) By email: info@samadisurfskate.com
(b) By mail: Avenida General Humberto Delgado, n.º 39 A, 2825-279 Costa da Caparica
10.2. If you request that we delete some or all of your personal data, some of the requested services may not be provided to you, and SAMADI will only retain the personal data necessary to comply with its legal obligations.
11. WHEN DO WE SHARE DATA WITH THIRD PARTIES?
11.1. SAMADI may use third parties to provide certain services, in terms of maintenance, technical support, marketing and billing, and these third parties may have access to some personal data, in particular, the data necessary for the contracted purposes.
11.2. Your data may be transmitted to transport companies in order to guarantee the delivery of the order placed with the customer.
11.3. SAMADI ensures that the entities that have access to the data are trustworthy and offer high guarantees of protection, and that no data beyond what is necessary for the provision of the contracted service is transmitted to them; however, SAMADI remains responsible for the personal data provided.
11.4. SAMADI may also transmit data to third parties in the context of investigations, inquiries and judicial and/or administrative proceedings or similar matters, provided that it is duly ordered to do so by a court order.
12. THIRD-PARTY WEBSITES.
12.1. The website may contain links to other websites which may collect and process your personal data, and this processing is the sole responsibility of the owners of those websites, with SAMADI having no responsibility for their policies and/or practices.
12.2. Examples of such third parties are Facebook or Instagram, through the buttons present on the website.
13. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.
13.1. Your data will be processed by us within the European Economic Area.
13.2. If data transfers to third countries outside the European Economic Area may occur, SAMADI will make the necessary efforts to adopt appropriate safeguards to ensure that these transfers comply with applicable law.
14. THE MINORS.
14.1. The site is not directed at individuals under 18 years of age, therefore we request that these minors do not provide us with personal data through the site, application, social networks and media or emails.
15. Sensitive Personal Data.
15.1. SAMADI requests that you do not send or disclose any sensitive personal data to us, that is, information that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, data concerning health or data concerning a natural person's sex life or sexual orientation.
15.2. If you continue to send us or make known to us these categories of personal data, they will be deleted immediately.
16. CHANGES TO THE PRIVACY POLICY.
16.1. SAMADI reserves the right to readjust or change this Privacy Policy at any time, and such changes will be made public.
16.2. SAMADI recommends that users who interact with the website visit this Privacy Policy regularly in order to stay updated on any changes made.
17. OUR CONTACT DETAILS.
17.1. If you have any questions or concerns related to this Privacy Policy, please contact us in writing via email at info@samadisurfskate.com.
18. LATEST VERSION.
18.1. 03/04/2024. Costa de Caparica (Portugal).