Your privacy is important to us. This Privacy Policy describes how Casa Simon collects, uses, shares and protects your personal data, in compliance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.
1. Data Controller
The data controller is the entity identified below. For any questions regarding the processing of your data, please contact us through the channels indicated.
2. Personal Data Collected
We may collect the following personal data when you use our website, make a purchase or send us a message via the contact form: name, email, phone number, contact message, billing and shipping address, payment data (processed by certified third-party entities) and order history. We may also collect browsing data through cookies, as described in the Cookies section.
3. Purposes and Legal Basis for Processing
We process your personal data for the following purposes: (a) order processing and shipping — legal basis: contract performance; (b) communication regarding your order — legal basis: contract performance; (c) responding to contact requests — legal basis: legitimate interest (Article 6(1)(f) GDPR); (d) invoicing and tax compliance — legal basis: legal obligation; (e) marketing communications, with your prior consent — legal basis: consent; (f) website and service improvement — legal basis: legitimate interest.
- Order processing and shipping — contract performance
- Communication regarding your order — contract performance
- Responding to contact requests — legitimate interest
- Invoicing and tax compliance — legal obligation
- Marketing (with your consent) — consent
- Website and service improvement — legitimate interest
4. Data Sharing with Third Parties
We do not sell your personal data to third parties. We may share your data with third parties that provide essential services to our store operation, including: carriers (CTT, DPD) for order delivery; payment processors (MB WAY, banks) for payment processing; and website hosting platforms. These entities may only use your data for the specific purposes we instruct and are contractually bound to ensure data security and confidentiality.
5. Data Retention Period
We retain your personal data only for as long as necessary to fulfill the purposes for which they were collected. Order-related data is retained for the legally required period for fiscal purposes (10 years). Marketing data is retained until you withdraw your consent. Browsing data is retained for the period set out in our Cookie Policy.
6. Your Rights
Under the GDPR, you have the following rights regarding your personal data: (a) right of access — you may request a copy of the data we hold about you; (b) right to rectification — you may request correction of inaccurate data; (c) right to erasure — you may request deletion of your data, where applicable; (d) right to restriction of processing; (e) right to object to processing; (f) right to data portability; (g) right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal; (h) right to lodge a complaint with the CNPD (Portuguese Data Protection Authority).
- Right of access
- Right to rectification
- Right to erasure
- Right to restriction of processing
- Right to object to processing
- Right to data portability
- Right to withdraw consent
- Right to lodge a complaint with the CNPD
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or disclosure. We use SSL/HTTPS encryption protocols on all pages involving the transmission of personal data, and payment data is processed by entities certified according to PCI DSS security standards.
8. Cookies
Our website uses cookies and similar technologies to enhance your browsing experience, analyze traffic and, with your consent, for marketing purposes. On your first visit, a cookie notice is displayed where you can manage your preferences. You can configure your browser to refuse all or some cookies, but this may affect certain website features. For more information, please consult our Cookie Policy available on the website.
You can manage your cookie preferences at any time through your browser settings:
- Google Chrome
- Mozilla Firefox
- Safari
- Microsoft Edge
9. Changes to this Policy
We reserve the right to update this Privacy Policy at any time. Changes will be posted on this page and, when applicable, notified by email. We recommend that you check this page regularly to stay informed about how we protect your data.
10. Contact
If you have any questions about this Privacy Policy or about the processing of your personal data, please contact us at: info@casasimon.pt
