PRIVACY POLICY

WE ARE COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF CUSTOMERS AND USERS OF THE WEBSITE, WHICH IS WHY WE HAVE PREPARED THIS POLICY AND THE PRACTICES DESCRIBED HEREIN. IN THIS POLICY, WE EXPLAIN HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, SO WE ADVISE YOU TO READ IT.

1. IDENTIFICATION OF THE DATA CONTROLLER.

Entity: VISÍVEL & INVISÍVEL LDA (hereinafter referred to as "DAMA DE COPAS")

NIPC: 509159923

Headquarter: Avenida Fontes Pereira de Melo, n.º 47, Letra C, 1050-120 Lisboa

Telephone contact: + 351 210 993 859 (national landline)

Email: dama@damadecopas.pt

2. WHAT IS THIS POLICY ABOUT?

This Privacy Policy explains how we collect and process personal data that is necessary for the provision of services that are available through the website and describes the practices adopted for that purpose.

3. WHAT ARE PERSONAL DATA?

Personal data shall mean all information relating to an identified or identifiable individual, whatever the nature and support of the information, including sound and image of the individual.
An identifiable person is a person who can be identified, directly or indirectly, in particular by reference to an identification number or to other factors specific to his physical, physiological, mental, economic, cultural or social identity.

4. HOW DO WE USE YOUR PERSONAL DATA?

The personal data processing operations that we carry out are an essential tool for your satisfaction and for the activity of DAMA DE COPAS and are performed in accordance with applicable law and best practices.

5. WHAT ARE THE PURPOSES, LEGAL BASIS AND RETENTION PERIODS FOR THE DATA COLLECTED?

The personal data we process has specific bases, depending on the purposes for which they are intended, and will be kept for the time necessary for the respective purposes, as listed in this Privacy Policy.
The personal data collected are only those necessary and appropriate for the purposes indicated.
The following table shows the purposes of processing and data collected for these purposes, the respective grounds and the periods or criteria for storing data:

PURPOSES	LEGAL BASIS	COLLECTED DATA	RETENTION PERIOD
To analyse and respond to your messages, customer support and information requests.	Consent for this specific purpose.	Name, email, telephone number, question.	For as long as necessary for this purpose.
Online fitting.	Need to take steps at the request of the data subject prior to entering into a contract and performance of a contract.; Consent regarding health-related data.	Name, email, telephone number, date of birth, measurements and sizes, body data, data on physiological/health-related changes, photographs.	For as long as necessary for this purpose.
To follow up your customer registration on the website and allow you to use its features.	Need to take steps at the request of the data subject prior to entering into a contract and performance of a contract.to use the reserved area and use of its respective features.	Name, email.	For as long as you are registered as a customer and want to use the respective website services.
To keep a record of your account details in the reserved area.	Legitimate interests in maintaining user information in the reserved area.	Identifying data, contact data, address and tax details (tax ID number), details of pending and/or placed orders.	For as long as you are registered as a customer and want to use the respective website services.
To proceed with your online purchase, invoice and dispatch your order.	Need to take steps at the request of the data subject prior to entering into a contract and performance of a contract; fulfilment of legal obligations to which DAMA DE COPAS is bound (within the scope of invoicing)	Name, full address, telephone number, email, tax ID number, bank details strictly necessary for payment processing, fitting details,	For the period necessary: to perform the contract, to ensure the exercise of the customer's and DAMA DE COPAS’ rights in relation to the purchase made and for the period necessary to comply with thelegal obligations applicable to DAMA DE COPAS (namely, tax obligations).
To send you newsletters or other publications that you have requested and/or that may be of interest to you (email).	Consent for that specific purpose or legitimate interests (when the customer has already made purchases/purchased products or services similar to those advertised).	Email	Your data will be kept until you withdraw your consent or opt-out (unsubscribe) from this type of communication.
In order to send marketing communications (sms).	Consent for that specific purpose.	Telephone number.	Your data will be kept until you withdraw your consent or opt-out (unsubscribe) from this type of communication.
Analysing the application to work with us sent by email.	Need to take steps at the request of the candidate prior to entering into a contract .	Email, Curriculum Vitae and letter of motivation and data included therein.	1 year.
For website management operations.	Consent for that specific purpose (cookies); Legitimate interests pursued by DAMA DE COPAS, namely to analyse users interaction with the website and manage it.	Cookies Data; IP address; IMEI address.	See information on the Cookies Policy.
For the adaptation, improvement and modification of services, namely by identifying usage trends, or, to determine the effectiveness of promotional campaigns.	Consent for that specific purpose (cookies); Legitimate interests pursued by DAMA DE COPAS to adapt and improve the website.	Cookies Data; IP address; IMEI address.	See information on the Cookies Policy.

If the law provides for a specific or mandatory period, the data will be kept for that period. In all other cases, personal data will be kept for a maximum of the times indicated above, periods that the DAMA DE COPAS considers sufficient to fulfil the purposes.
At the end of the conservation period, all personal data collected will be deleted.

6. NEWSLETTERS AND OTHER COMMERCIAL AND/OR PROMOTIONAL COMMUNICATIONS.

We may send newsletters or other commercial and/or promotional communications regarding DAMA DE COPAS provided that the user gives his prior and informed consent for this purpose, by ticking the checkboxes provided on the website for such purpose.
The user may withdraw their consent at any time, using the option provided for this purpose in the footer of communications sent via email (unsubscribe) or by writing to DAMA DE COPAS at the contact details indicated in the heading relating to the exercise of rights. The withdrawal of consent does not prejudice the processing carried out prior to that withdrawal.
The provisions of the previous paragraph do not prevent DAMA DE COPAS, provided that it has obtained from its customers, in accordance with the Personal Data Protection legislation, their respective email addresses, in the context of the sale of a product or service, from using them for the purposes of direct marketing of its own products or services similar to those transacted, provided that it clearly and explicitly guarantees the customers in question the possibility of opposing, easily and free of charge, at the time of each message to the sending of such communications, for example through the unsubscribe option in the footer of the emails.

7. HOW DO WE COLLECT YOUR PERSONAL DATA?

We will collect your personal data through the forms on the website, but also through the website and the communication that it makes with your device and email messages that you send us.
Your personal data is collected through your equipment as follows:
Through your browser;
Through cookies;
Through pixel tags and other similar technologies;
IP Adress.
DAMA DE COPAS is committed to process your data lawfully and legally.
DAMA DE COPAS will not sell, rent or share your personal data with third parties, except as clearly identified in this Privacy Policy (see Section 12 to understand how).
Whenever the User provides personal data to DAMA DE COPAS, the User commits to:
Provide truthful and accurate information about themselves, according to the data requested in the forms on the website;
Keep his details updated with DAMA DE COPAS;
Not provide personal data of third parties without existing a legal basis for doing so and without being able to prove it.

8. WHAT ARE COOKIES?

Cookies are small information files that help you identify your browser and can store information, for example, User settings and preferences.
DAMA DE COPAS will store cookies on your device to personalize and facilitate browsing as well as troubleshooting, statistics,quality assurance, and to monitor system security, only with your prior consent.
To know more about the cookies we use please refer to our Cookies Policy.

9. HOW DO WE PROTECT YOUR PERSONAL DATA?

Your personal data is kept secure by adopting a variety of technical and organizational security measures to ensure that only those employees who are required to access the personal data in accordance with the access requirements and rules created for this purpose have access to it.
To protect your personal data, we only use data center providers that offer adequate and documented security measures, including guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access.
Similarly, when you browse the website, we protect your data with encryption, through the use of a security certificate – SSL, and your password is stored using an unidirectional hash, i.e., it cannot be retrieved (or disclosed) by anyone, including DAMA DE COPAS, and can only be reset.
Although we take all necessary precautions, we deem appropriate to protect the personal data you provide and we collect, one must be aware that no security system is impenetrable.
Therefore, you should take certain precautions, such as keeping your password secret and not divulging it to anyone else; if you believe that your password has been misused, you should let us know immediately; you should also take care to log out and log in each time you close your browser.

10. HOW YOU CAN YOU EXERCISE YOUR RIGHTS:

Before we explain how you can exercise your rights, you should know what they are. Thus, the law gives you the right to ask us to exercise the following rights:

Access: the right to obtain confirmation as to whether or not personal data concerning you are being processed and, if so, the right to access your personal data;
Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;
Erasure: the right to obtain the erasure of your personal data when one of the grounds listed in the legislation applies, namely where:
1. the personal data is no longer needed in relation to the purposes for which they were collected;
2. the data subjects withdraws consent on which the processing is based and there is no longer other legal ground for the processing;
3. the data subjects objects to the processing and there are no overriding legitimate grounds for the processing;
4. the personal data have been unlawfully processed;
5. the personal data have to be erased for compliance with legal obligations;
6. the personal data have been collected in relation to the offer of information society services.
Restriction of processing: the right to obtain limitation of processing if one of the situations listed in the legislation applies, namely where one of the following applies:
1. The accuracy of the personal data is contested by the data subject;
2. The processing is unlawful and the data subject opposes the erasure of the personal data requesting the restriction of their use instead;
3. The controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
4. The data subject has objected to processing related with automated individual decision-making.
Objection: the right to object on grounds relating to data subject’s particular situation, at any time of the processing of personal data concerning him or her which is based on public interest or legitimate interests;
Data portability: the right to receive personal data concerning him/her in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance from the controller to which the data have been provided where the processing is based on consent or on a contract or where the processing is carried out by automated means.
- You also have the right to lodge a complaint with a supervisory authority (National Data Protection Commission at www.cnpd.pt).
- In addition to the rights described above, when the basis for the processing of data is consent, the User has the right to withdraw such given consent at any time, without this invalidating the processing of data carried out up to that point.

11. HOW CAN YOU EXERCISE YOUR RIGHTS?

By writing to the following addresses:

(a) Via email: dama@damadecopas.pt

(b) Via post: Avenida Fontes Pereira de Melo 47C, 1050-120 Lisboa, Portugal

If you request us to delete some or all of your personal data, some of the services you have requested may not be provided to you and DAMA DE COPAS will retain only the personal data necessary to comply with its legal obligations.

12. WHEN DO WE COMMUNICATE DATA TO THIRD PARTIES?

DAMA DE COPAS may use third parties to provide certain services, such as maintenance, technical support, marketing, billing or payment management, which may have access to some personal data, in particular, data required for contractual purposes.
Your data may be communicated to transport companies in order to ensure the delivery of the order to the customer, with these entities acting as the data processors for the external data of the order for the purposes inherent in its shipment.
DAMA DE COPAS ensures that the entities that have access to the data are credible and offer high guarantees of protection, and that that data will never be transmitted beyond what is necessary to provide for the contracted service, nevertheless DAMA DE COPAS remains responsible for the personal data made available.
DAMA DE COPAS may also transmit data to third parties in the context of investigations, inquiries and judical and / or administrative proceedings or of similar nature, provided that it is duly ordered by a court.

13. THIRD PARTY WEBSITES.

The WEBSITE may contain links to other websites which may collect and process your personal data, and this processing is the sole responsibility of the owners of these websites, and DAMA DE COPAS does not take any responsibility for its policies and / or practices.
Examples of such third parties are Facebook or LinkedIn through the buttons that are present on the WEBSITE.

14. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.

Your data will be processed by us within the European Economic Area.
In the event that data transfers may occur to third countries outside the European Economic Area, DAMA DE COPAS will make the necessary efforts to adopt the appropriate guarantees so that these are realized in accordance with the applicable legislation.

15. MINORS.

The WEBSITE is not intended for minors under the age of 18, thus, we request that minors do not provide us with personal information through the website, application, social media and/or emails.

16. SENSITIVE PERSONAL DATA.

DAMA DE COPAS requests you not to send or disclose to us any sensitive personal data, i.e. information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data or data concerning a natural person's sex life or sexual orientation.
If you nevertheless send or make known such categories of personal data to us, it will be deleted immediately.

17. CHANGES TO THE PRIVACY POLICY.

DAMA DE COPAS reserves the right to readjust or change this Cookies Policy at any time. These changes will promptly be made public.
DAMA DE COPAS recommends that users who interact with the website visit this Privacy Policy on a regular basis, as a way of keeping abreast of any changes made to it.

18. CONTACT DETAILS.

If you have any questions about this Privacy Policy, please email us at dama@damadecopas.pt.

19. LAST REVIEW.

[29] [01], 2024. Lisboa (Portugal).