ABOUT US
The BAIRRO COMERCIAL DIGITAL ‘VAI-ME À LOJA: CENTRO HISTÓRICO’ is an innovative urban digital intervention project limited to the Historic Center of Santa Maria da Feira, which includes 127 establishments.
This project is a strategic initiative to revitalize and boost traditional commerce, local accommodations, and restaurants. It focuses on digitizing the local economy, supporting merchants in adopting new technologies, digitally transforming business models, and training workers and entrepreneurs. This initiative aims to strengthen the competitiveness of local commerce, making it more dynamic and adapted to the demands of the digital environment.
SCOPE
The privacy and personal data protection policy of BAIRRO COMERCIAL DIGITAL ‘VAI-ME À LOJA: CENTRO HISTÓRICO’ (hereinafter referred to as BCD VALCH) aims to inform users of the BCD VALCH website of the general rules on privacy and the processing of personal data, collected and processed in strict compliance with the applicable personal data protection laws, namely the European Union’s (EU) General Data Protection Regulation (GDPR) 2016/679 of the European Parliament and of the Council of 27 April 2016.
BCD VALCH complies with best practices in the field of security and personal data protection, having taken the necessary technical and organizational measures to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent, and limited to authorized purposes. BCD VALCH is committed to the protection and confidentiality of personal data, having adopted the measures it considers appropriate to ensure the accuracy, integrity, and confidentiality of personal data, as well as all other rights of the respective data subjects.
WHAT DOES THIS POLICY COVER?
This policy applies exclusively to the collection and processing of personal data for which BCD VALCH is the entity responsible for collection and processing, within the scope of the services and products made available to its users and whenever personal data is processed.
WHAT IS PERSONAL DATA?
Personal data refers to any information, in any form and of any nature, including sound and image, relating to an identified or identifiable natural person. A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.
WHAT DOES THE PROCESSING OF PERSONAL DATA ENTAIL?
Personal data processing consists of an operation or set of operations performed on personal data or sets of personal data, through automated means or otherwise, namely the collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure, or destruction.
RESPONSIBLE FOR DATA PROCESSING
The entity responsible for processing personal data is BCD VALCH, which determines the purposes and means of processing such data. To this end, if the data subject needs to contact the data controller, they may do so by contacting us at vaimealoja@cm-feira.pt.
As the data controller, BCD VALCH: i) ensures that your personal data is processed within the scope of the purpose(s) for which it was collected or for purposes compatible with the initial purpose(s); ii) is committed to implementing a culture of data minimization in which only the necessary personal data is collected, used, and stored; iii) does not disclose or share your personal data for commercial or advertising purposes.
TYPE OF PERSONAL DATA USED
Within the scope of its activities, BCD VALCH collects and processes personal data based on applicable confidentiality legislation, as well as the express consent required, in order to ensure the protection of users’ vital interests.
The personal data that is collected and processed may include: name, date of birth, address, telephone number, and email address, as voluntarily provided by the respective data subjects. This data may also be processed for marketing purposes, to promote goods or services, or to request quotes from BCD VALCH, if the respective data subject has given their consent.
WHEN AND HOW DO WE COLLECT PERSONAL DATA?
BCD VALCH collects your personal data through its website and in writing, always ensuring the prior consent of the data subject. The personal data collected may be processed electronically, either automatically or non-automatically, ensuring in all cases strict compliance with personal data protection legislation. It is stored in specific databases created for this purpose and, under no circumstances, will the data collected be used for any purpose other than that for which it was collected or for which consent has been given by the data subject.
Some personal data is essential for the performance of the contract, without which BCD VALCH will not be able to provide the product and/or service in question. If the data subject is not a customer/user of BCD VALCH, their personal data will only be processed when made available, in which case the rules of this policy will apply.
RECIPIENTS OF PERSONAL DATA
Without prejudice to the recipients indicated throughout this policy, BCD VALCH may communicate the personal data of the customer/user for the purpose of complying with legal obligations, such as to law enforcement, judicial, tax, or regulatory authorities.
PURPOSES OF PERSONAL DATA PROCESSING AND LEGAL BASIS
In general, the personal data collected is based on and intended for the management of the contractual and commercial relationship, the provision of contracted services, the adaptation of services to the needs and interests of the customer/user, namely for the purposes of accessing specific service features, information and marketing actions. In addition, personal data may also be processed for the purposes of complying with legal obligations.
RETENTION AND STORAGE PERIOD OF PERSONAL DATA
The period of time during which personal data is stored and retained varies according to the purpose for which the information is processed. In fact, there are legal requirements that oblige us to retain data for a minimum period of time. Therefore, and whenever there is no specific legal requirement, data will be stored and retained only for the minimum period necessary to fulfill the purposes for which it was collected or further processed, as defined by law.
RIGHTS OF DATA SUBJECTS
As owners of personal data, customers/users are guaranteed, at any time, the right to access, rectify, update, limit, and delete their personal data (except for data that is essential for BCD VALCH to provide services or to comply with legal obligations to which the data controller is subject), the right to object to the processing of such data for marketing or commercial purposes by BCD VALCH and to withdraw consent, without compromising the lawfulness of the processing carried out under that consent, as well as the right to data portability.
ACCESS, MANAGE, AND CONTROL YOUR PERSONAL DATA
Without prejudice to the provisions of the GDPR, the data subject may rectify, update, restrict, erase, object to, or withdraw consent for the processing of personal data, either directly or by written request addressed to the respective data controller, using the contact details provided for this purpose in this document, as well as any other contact details provided by BCD VALCH. To exercise their legally admissible rights, data subjects should contact the Data Protection Officer at rgpd@cm-feira.pt.
CANCEL MARKETING COMMUNICATIONS SUBSCRIPTION
BCD VALCH may promote new products or services to its customers/users, namely by telephone, email, SMS, or any other electronic communications service, if the data subject has given their consent. If the data subject no longer wishes to receive these communications, they may withdraw their consent to the use of their data for marketing purposes at any time.
COMPLAINTS
Without prejudice to the right to submit complaints directly to BCD VALCH through the contacts provided for this purpose, the customer/user may submit a complaint directly to the Supervisory Authority, which is the National Data Protection Commission (CNPD), using the contacts provided by this entity for this purpose.
MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA
BCD VALCH is committed to ensuring the protection of the security of the personal data made available to it, having approved and implemented strict rules in this regard. Compliance with these rules is an obligation for all those who legally access them.
Given BCD VALCH’s concern and commitment to the protection of personal data, various technical and organizational security measures have been adopted to protect the personal data made available to it against its dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.
In addition, third parties who, in the context of providing services, process the personal data of the customer/user on behalf of and for BCD VALCH, are required, in writing, to implement appropriate technical and security measures that, at all times, meet the requirements of current legislation and ensure the protection of the rights of the data subject (namely, the protection of privacy and personal data).
SHARING DATA WITH OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)
BCD VALCH, within the scope of its activity, may use third parties to provide certain services. Sometimes, the provision of these services involves access by these entities to the personal data of customers/users. When this happens, BCD VALCH takes the appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees in this regard, which is duly established and safeguarded contractually between BCD VALCH and the third party(ies). Thus, any entity subcontracted by BCD VALCH will process the personal data of our customers/users on behalf of and for the account of BCD VALCH, adopting the necessary technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination, or unauthorized access, and against any other form of unlawful processing.
In this case, BCD VALCH uses EGOI as an email marketing platform. By agreeing to our policies, you acknowledge that your information will be transferred to EGOI. Learn more about EGOI’s privacy policies here https://bo.egoiapp.com/legal/anti-spam-policy?lang=br. You can unsubscribe at any time by clicking on the link at the bottom of our emails.
In any case, BCD VALCH remains responsible for the personal data made available to it.
CIRCUMSTANCES FOR TRANSFER OF PERSONAL DATA
The provision of certain services by BCD VALCH may involve the transfer of your data outside Portugal, including outside the European Union or to international organizations. In such cases, BCD VALCH will strictly comply with the applicable legal provisions, namely regarding the determination of the suitability of the destination country(ies) with regard to the protection of personal data and the requirements applicable to such transfers, including, where applicable, the conclusion of appropriate contractual instruments that guarantee and comply with the legal requirements in force.