Privacy Policy

PRIVACY AND SECURITY POLICY

This privacy policy defines how Castro Maia SA, NIPC 500059438, with registered office at Rua D. João IV 399, 4th floor, 4000-099 Porto, owner of the OMNIA brand, uses and protects the information you provide when using the website www.omnia.pt.

Castro Maia SA is committed to ensuring that your privacy is protected.

We may ask you to provide certain information by which you can be identified when using this website, with the assurance that this information will only be used in accordance with this privacy statement.

Castro Maia SA reserves the right to change this policy occasionally, updating this text in accordance with any changes that may be implemented and disclosing them through this means.

Therefore, we recommend that you consult this document regularly and, should any questions or doubts arise, please contact us.

DATA CONTROLLER

The entity responsible for data processing is Castro Maia SA, which can be contacted through the following methods:

Telephone: 22 537 77 68

Address: Rua D. João IV, 399, 4th floor, 4000-302 Porto, Portugal

Email: info@omnia.pt

SCOPE OF THE PRIVACY POLICY

This Privacy Policy applies to data that has been directly provided by the data subject or collected during the data subject's access to our website.

What information do we collect?

Name – to identify you as our customer and/or user of our website;

Email address – for all communications regarding your orders, as well as for sending promotional and informational emails about our products and services;

Address – for sending your orders or accounting documents;

Mobile phone – for the purpose of delivering packages, as well as for matters related to packages whenever contact via email is not possible for any reason;

Tax identification number – for billing purposes;

Order history – so you can view it in your customer area, as well as for statistical analysis of sales;

IBAN – for refund purposes in case of returns.

PROCESSING OF PERSONAL DATA AND CONSENT

By providing their personal data to Castro Maia SA, the data subject freely, informedly, specifically, and unequivocally consents to its processing for the purposes described in this Privacy Policy.

Consent is given by checking the acceptance box and subsequently by confirming via the link you receive at the email address you provide.

WHAT WE DO WITH THE INFORMATION WE COLLECT - PURPOSES

We need this information to understand your needs and provide a better service, and in particular for the following purposes:

The processing of your data is necessary for the conclusion and fulfillment of the purchase and sale or service provision contract to be entered into between you and Castro Maia, SA, or for carrying out pre-contractual steps at your request;

Order processing, including shipping, invoicing and returns, based on the legal grounds of executing a purchase and sale contract; We may periodically send promotional emails about our products, special offers and/or other information that we think may be of interest to you, using the email address you have provided, based on your consent to do so;

Castro Maia may create profiles based on information related to your purchases. Whenever you make a purchase, we record the products purchased, amounts paid, date and time, as well as the place of purchase. This information is analyzed to identify your consumption profile. This analysis allows Castro Maia to send you personalized information tailored to your profile. We use statistical information related to our customers' profiles to improve our offerings and plan our communication; this processing is based on your consent.

We may use the information to personalize the website according to your interests, based on your consent as the legal basis;

DATA RETENTION PERIOD

We retain your personal data for 3 years of inactivity, after which you will be contacted to express your wish to preserve or delete your data from our database, without prejudice to the limitation periods and expiry dates for the exercise of rights of Castro Maia SA, under the law, as well as the retention of personal data arising from legal obligations.

SHARING AND/OR STORING DATA WITH THIRD PARTIES

We share your data with partner companies for specific purposes. We strive to ensure that these companies comply with the GDPR and this privacy policy. We may share shipping data (name, address, and phone number) with the carriers we work with:

– CTT – Correios de Portugal, SA, with registered office at Avenida D. João II, nº 13, 1999-001 Lisbon, which can be contacted by telephone at 707262626 and by email at informacao@ctt.pt

– Chronopost Portugal, headquartered at Av. Infante D. Henrique, lote 10 1849-003 Lisbon, which can be contacted by telephone at 218546000 and by email at comunicacao@chrono-inter.com

– TNT Express Worldwide Portugal, headquartered at Av. D. João II, 41-9ºA 1990-064 Lisbon, which can be contacted by phone at 707100868 or by email at customerservice.pt@tnt.com

We store your data on the e-commerce platform we use (WooCommerce), in our ERP – billing software (PHC), and on the email marketing platform (Mailchimp).

SECURITY

We are constantly committed to ensuring that your information is secure. In order to prevent unauthorized access or disclosure, appropriate physical, electronic, and administrative procedures have been established to safeguard and protect the information we collect online, restricting access to stored data to employees specifically authorized for that purpose.

RIGHTS OF PERSONAL DATA SUBJECTS

The holder of personal data has the right to obtain from Castro Maia SA confirmation as to whether or not data concerning him or her are being processed and, if so, to access his or her personal data and the information provided for by law.

If you require more than one copy of your personal data being processed, Castro Maia SA may charge a fee for this service to cover administrative costs.

RIGHT OF ACCESS

The holder of personal data has the right to obtain from Castro Maia SA confirmation as to whether or not data concerning him or her are being processed and, if so, to access his or her personal data and the information provided for by law.

If you require more than one copy of your personal data being processed, Castro Maia SA may charge a fee for this service to cover administrative costs.

RIGHT OF RECTIFICATION

The holder of personal data has the right to obtain from Castro Maia SA, without undue delay, the rectification of inaccurate or incomplete personal data concerning him or her.

RIGHT TO ERASE DATA ("RIGHT TO BE FORGOTTEN")

The data subject has the right to request Castro Maia SA to erase their data without undue delay, and Castro Maia SA has the obligation to erase personal data when one of the following grounds applies, in particular:

a) The personal data is no longer necessary for the purpose that motivated its collection or processing;

b) The data subject has withdrawn their consent to the processing of data (in cases where the processing is based on consent) and there is no other legal basis for said processing;

(c) The data subject objects to the processing and there are no overriding legitimate interests that justify the processing.

RIGHT TO LIMITATION OF TREATMENT

The data subject has the right to obtain from Castro Maia SA the restriction of processing if one of the following situations applies, in particular:

a) To contest the accuracy of personal data, for a period that allows Castro Maia SA to verify its accuracy;

b) The data processing is lawful and the data subject objects to the erasure of their personal data and requests, instead, the restriction of its use;

c) Castro Maia SA no longer needs the personal data for processing purposes, but this data is required by the data subject for the establishment, exercise or defense of a legal claim.

(d) If you have objected to the processing, until it is verified that the legitimate grounds of the controller override those of the data subject.

RIGHT TO DATA PORTABILITY

If the processing depends on the data subject's consent and that consent has been given by automated means, the data subject has the right to receive the personal data concerning him or her, which he or she has provided to Castro Maia SA, in a structured, commonly used and machine-readable format.

RIGHT OF OBJECTION

In cases where data processing is carried out for the purposes of the legitimate interests pursued by Castro Maia SA, or data processing is carried out for direct marketing purposes; or profiling, the data subject may also, at any time, object to the processing of their personal data.

These rights can be exercised through the following contacts:

Telephone: 225377768

Address: Rua D. João IV, 399, 4º, 4000-302 Porto, Portugal

Email: info@omnia.pt

Responses to your requests may be provided in writing, electronically.

Responses will be provided without undue delay, within 1 month of receiving the request, or within 2 months followed by information to the data subject, when the request is complex or there are multiple requests.

RIGHT TO COMPLAIN

You also have the right to lodge a complaint with the competent supervisory authority, the National Data Protection Commission, if you believe that Castro Maia SA has violated your rights under the GDPR.

REVOCATION OF CONSENT

If consent is legally required for the processing of personal data, the data subject has the right to withdraw consent at any time, although this right does not compromise the lawfulness of the processing carried out based on the consent previously given, nor the subsequent processing of the same data based on another legal basis, such as compliance with a contract or legal obligation to which Castro Maia SA is subject. If you wish to withdraw your consent, you can contact us through the following means:

Telephone: 22 537 77 68

Address: Rua D. João IV, 399, 4th floor, 4000-302 Porto, Portugal

Email: info@omnia.pt

What are cookies?

"Cookies" are small software tags that are stored on access devices through the browser, retaining only information related to preferences, and therefore do not include personal data.

What are cookies for?

Cookies help determine the usefulness, interest, and number of uses of websites, allowing for faster and more efficient browsing by eliminating the need to repeatedly enter the same information.

What types of cookies are there?

There are two groups of cookies that can be used.

Persistent cookies – these are cookies that are stored at the browser level on access devices (PC, mobile and tablet) and are used whenever you make a new visit to one of Castro Maia SA's websites. They are generally used to direct navigation to the user's interests, allowing for a more personalized service.

Session cookies – these are temporary cookies that remain in your browser's cookie file until you leave the website. The information obtained by these cookies is used to analyze web traffic patterns, allowing us to identify problems and provide a better browsing experience.

What do we use cookies for?

Strictly necessary cookies – These allow you to browse the website and use applications, as well as access secure areas of the website. Without these cookies, the requested services cannot be provided.

Analytical cookies – These are used anonymously for the purpose of creating and analyzing statistics, in order to improve the functioning of the website.

Functionality cookies – These cookies save user preferences regarding website usage, so that it is not necessary to reconfigure the website each time it is visited.

Third-party cookies – These measure the success of applications and the effectiveness of third-party advertising. They can also be used to personalize a widget with user data.

Advertising cookies – These cookies target advertising according to each user's interests, in order to direct advertising campaigns taking into account user preferences, and also limit the number of times you see an ad, helping to measure the effectiveness of advertising and the success of the website's organization.

How can you manage cookies?

All browsers allow users to accept, refuse, or delete cookies, and also to inform the user whenever a cookie is received, namely by selecting the appropriate settings in the respective browser. The user can configure cookies in the "options" or "preferences" menu of their browser. You can also find more information about cookies and how to manage them at http://www.aboutcookies.org (English) or consult the "Help" section of your internet browser. Note, however, that disabling cookies may prevent some web services from functioning correctly, affecting, partially or totally, navigation on the website.

LINKS TO OTHER SITES

Our website may contain links to other websites of interest. However, once you have used these links, you should note that we do not have any control over these other websites. Therefore, we cannot be responsible for the protection and privacy of any information you provide while visiting such sites, and such sites are not governed by this privacy statement. You should pay attention to the privacy statement applicable to the website in question.

PERSONAL DATA BREACH

In the event of a personal data breach, the controller shall notify the supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of it, unless the personal data breach is unlikely to result in a risk to the rights and guarantees of natural persons.

CONTACT INFORMATION FOR THE NATIONAL DATA PROTECTION COMMISSION:

Rua de São Bento n.º 148-3.º 1200-821 Lisboa

Tel: +351 213928400

Fax: +351 213976832

e-mail: geral@cnpd.pt

website: www.cnpd.pt