Privacy (and Cookies) Policy
As a company based in Portugal and a member of the European Union, our Privacy Policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (GDPR), in force since 25 May 2018 in the European Union. The GDPR lays down the rules on the processing by a person, company or organization of personal data relating to individuals in the European Union.
PERSONAL DATA WE COLLECT
When you visit the Website, we automatically collect certain information about your device, including information about your internet browser, IP address, time zone and some of the cookies that are installed on your device.
Additionally, while browsing the Website, we collect information about the pages or products you view or search terms that direct you to the Website and information about how you interact with the Website. We refer to this information, automatically collected, as Device Information.
We collect Device Information using the following technologies:
- Cookies – are data files placed on your device or computer and often include an anonymous unique identifier.
- Log files – records actions that occur on the Site and collect data including your IP address, browser type, internet service provider, referring/exit pages and date/time stamps. In addition, when you make a purchase or attempt to make it through the Site, we collect certain information from you, including your name, TIN, billing address, shipping address and payment information (including credit card numbers), which is Order Information.
- Contact Forms – records data provided by you as well as your IP address, browser, pages you use and date and hour logs.
In addition, when you make a purchase or attempt to make it through the Website, we collect certain information from you, including your name, TIN, billing address, shipping address and payment information (including credit card numbers), which is the Order information.
By Personal Information, in this Privacy Policy, we mean Device Information and Order Information.
HOW WE USE YOUR PERSONAL DATA
Generally, we use the Order Information collected, to fulfill any order placed through the Site (including processing your payment information, handling shipping and providing you with invoices and/or order confirmations).
Additionally, we use this Order Information to:
- Communicate with you
- Analyse our orders for potential risks or fraud
- When aligned with the preferences you have shared with us, provide you with information or advertising related to our products or services.
We use the Device Information we collect to help us eliminate potential risks and fraud (especially your IP address) and, more often, to improve and optimize our Site.
BEHAVIOURAL ADVERTISING
We may use your Personal Information to provide you with targeted adverts or marketing communications that may be of interest to you.
SHARING YOUR PERSONAL INFORMATION
Your data may be passed on to the following organizations, which will be responsible for processing it:
- Google Analytics
- Mailchimp
- PayPal (in case you pay through them)
To find out more about how Google Analytics helps us understand how our customers use the Ana Kintsugi Store website.
Finally, we may also share your Personal Information to comply with applicable laws and regulations and to respond to subpoenas, search warrants, or other legal requests regarding information we receive.
At any time, the holder of Personal Data may exercise their rights of access, rectification, erasure, limitation, opposition, and portability under the terms of the Law, by making an express request to the Data Protection Officer at the e-mail address dpo@anakintsugipoetry.com.
The rights of the holders of personal data provided for in the Law are, specifically:
Right of Access: The right to obtain information on what data we collect, the purposes for which it is processed, retention periods, etc.
Right to Rectification: The right to request the rectification of personal data that is inaccurate, as well as the completion of incomplete personal data, such as your e-mail address, VAT number, and telephone contact details.
Right to erasure or “right to be forgotten”: The right to have your data erased without undue delay, provided there are no exceptions or valid grounds for its retention, such as the fulfillment of a legal obligation requiring its retention.
Right to Object: The right to object or withdraw your consent at any time to process your data, including the right not to be subject to decisions based exclusively on automated means.
Right of Limitation: Right to limit the purposes for which your data is processed.
Right of Portability: The right to receive the data you have provided in a commonly used, machine-readable digital format or to request that your data be transmitted directly to another organization.
Right not to be subject to automated decisions and profiling: The right not to be subject to any automated decision that significantly affects you, except with your express consent. The data subject is also guaranteed the right to review the decision by means of human intervention.
According to the GDPR, if the data subject wishes to lodge a complaint or claim in the context of data protection, they can do so with the National Data Protection Commission (www.cnpd.pt) and by emailing geral@cnpd.pt.
COOKIES
This website uses strictly necessary cookies that are essential to guarantee the security of the site, for it to function correctly and to allow the user to consult the site in the best way.
Essential cookies can be installed without the user’s consent, as they are essential for the normal functioning of the website.
You can configure your browser to block these cookies, but this may prevent you from using some features of the website.
Data Protection Officer (DPO) Contacts:
Name: Ana Silva
Email: dpo@anakintsugipoetry.com
Address: Sintra, PORTUGAL