Privacy Policy
In accordance with the General Data Protection Regulation (GDPR), which came into force on May 25, 2018, we hereby inform you of the form, scope and purpose of the processing of your personal data when using our online store “https://www.avani.pt/”.
Personal data is any information relating to an identified or identifiable natural person.
1. responsible entity
Data controller, in terms of the European General Data Protection Regulation (GDPR), is the natural or legal person who, alone or jointly with third parties, determines the purposes and means of the processing of personal data.
Within the scope of the GDPR, the entity responsible for processing and handling personal data collected in this Online Shop is:
Banho do Brilho, Lda.
Estrada de Benfica, nº 627 A
1500-087 Lisbon
Tel: (+351) 214 062 427 | TM (+351) 919 273 462 | (+351) 967 956 841
NIF: PT508 918 618
2. Data Collected During Your Visit to Our Online Shop
When you access and browse our Online Shop, the server collects the following information from your device: browser type and version, operating system, previously visited web page (“Referrer”), your IP address and date/time of page display.
The collection and processing of this data is intended to ensure the proper functioning of our site in order to prevent and monitor misuse of our services. We also use the data collected for statistical purposes on the devices and browsers used, allowing us to continually adapt and improve our offer in line with users’ needs.
This data processing is based on Article 6(1)(F) of the GDPR. All of the above personal data will be deleted no later than twelve months after collection.
3. Buy in our online store
When you make a purchase in our Online Shop, we record your name, invoice address, goods shipping address, your and the telephone number related to the shipping address, your and the e-mail address related to the shipping address, which you specify during the ordering process. If you provide additional data with your order (e.g. a different delivery address or telephone number), this data will also be recorded.
We process the data mentioned in the previous paragraph electronically for the proper provision of the service under the contract, in particular for the delivery of goods and services, processing of payments and invoices, returns and complaints. This data processing is based on Article 6(1)(B) of the GDPR.
This data is kept until the end of mutual contractual obligations and compliance with applicable legal and commercial obligations to which we are subject.
In order to conclude a contract for the purchase of goods and services, and in compliance with legal requirements, it is necessary to provide the following data: name, address, tax identification number and e-mail address. Failure to provide complete and correct data makes it impossible to conclude a contract with our company.
No automated data processing processes are applied after the end of the contract.
4. Creating and Deleting a Customer Account
Optionally, you can create a customer account in our Online Shop. The data required to create a customer account comes from the registration form that exists for this purpose. The customer account will be created solely by your action in submitting your data. The legal basis is therefore your consent pursuant to Article 6(1)(F) of the GDPR. We retain the personal data associated with the customer account until you request its deletion. The personal data relating to the contract(s) concluded and order(s) placed will be kept for the period necessary for the supply of goods and services, invoicing and compliance with applicable legal obligations, which also applies to purchases without registration, regardless of the existence of a customer account.
Request Deletion of Customer Account
In your Customer Area (personal data management)
Use Personal Data Change Request Form
5. Delivery and Payment
When we ship physical goods that result from orders and/or purchase contracts, we transmit your necessary data to the transport company identified in the order process, specifically for the purpose of delivering the order, and if applicable, for the purpose of returning your order on the basis of Article 6(1)(B) of the GDPR.
For the payment of your purchase and the processing of the selected payment service, the payment service operator records your data provided for this purpose, depending on the payment chosen. The data protection regulations of the respective payment service operator chosen by the customer also apply. Upon receipt of a payment, we process the data transmitted to us by the payment service provider.
Processing takes place on the basis of Article 6(1)(B) of the GDPR. This data is stored until the end of mutual contractual obligations and compliance with applicable legal and commercial obligations to which we are subject.
6. Companies and Systems Support Subcontracts
Our company uses business management software for accounting and invoicing purposes from the following suppliers:
CERTIPOS, Rua do parque infantil Nº1ª
Rinchoa
2635-336 Rio de Mouro Portugal
Order and contract data is processed through these entities in accordance with Article 28 of the GDPR.
The provision of technical services for the operation of our online store on the Internet is ensured in accordance with Article 28 of the GDPR by the provider, and its respective subcontractors, Viamodul, 2610-141 Amadora – Portugal. The software used for our online store is epages, developed by epages GmbH, 20355 Hamburg, Germany.
7. Contact forms and sending messages by e-mail
When you use the contact form on our website, your submitted data will not be saved, and the only data medium will be an electronic message.
Only as a logged-in user can you optionally receive a copy of the message.
When you send a message by e-mail, we store your message with the information from the transmitted request (name, e-mail address and, if applicable, the data added by your e-mail program or the messaging servers). To receive, store and send e-mails, we use a technical service operator who provides this service in accordance with Article 28 of the GDPR.
The legal basis for data processing is our legitimate interest in responding to your message and being able to answer possible follow-up questions (Article 6(1)(f) GDPR). We will delete your message and associated information no later than twelve months after the last communication about your request, subject to the following conditions in the following paragraph.
If you have a legally relevant statement to the contract (e.g. a revocation or a complaint) that forms the legal basis for processing, regardless of transmission, including Article 6(1)(b) GDPR.
In this situation, we only delete your related data as soon as all mutual claims resulting from the order / contract have been concluded and after compliance with the deadlines of the applicable legal and commercial obligations to which we are subject.
8. Newsletter
By subscribing to our newsletter, we will inform you by e-mail about new offers and functions of our online store and only sent through our company. Your name and address will not be given to third parties. You will receive no more than one newsletter per week. The content always relates to our products and services and may include content directly related to our third-party offer that we consider relevant to the subscriber. We do not send messages through referrals or commercial agreements with third parties.
You can informally object to the use of your e-mail address for advertising purposes at any time, without incurring any costs charged by our company. Costs incurred in transmitting this information (sending a letter by post, etc.) are borne by the subscriber.
If you revoke your consent to the use of your e-mail address for advertising purposes, you can unsubscribe at any time via the “Unsubscribe” link in the footer of all newsletters sent or via the “Newsletter” link in our Online Shop. You will receive a message to confirm cancellation via a link that you must click on (Double-Opt-Out). Your subscription status will then be changed to “unsubscribed”. Your email address will remain on the subscriber list, but the “unsubscribed” status ensures that no messages are sent to this email address or used for other purposes or campaigns. If you have subscribed to more than one of our newsletters, you must unsubscribe from each one individually.
This data processing is based on your consent, in accordance with Article 6(1)(f) of the GDPR.
Access the Newsletter Subscription and Unsubscription page
9. Comments and Evaluations
When you write a comment or an evaluation of one of our products in our Online Shop, we will publish your evaluation in the appropriate place on our Online Shop page together with your user name, for which you can also specify a pseudonym. To prevent misuse of this functionality, we store the IP address of the terminal from which you are submitting the information for a period of twelve months (Article 6(1)(f) GDPR). We reserve the right to delete any inappropriate or thematically inappropriate comments at any time. In addition, we delete comments or a published review only at the request of the respective author.
10. Use of Cookies
When you visit our online store, a “cookie” is placed on your device. This is a small text file that we can use to recognize your device when you return to our Online Shop for a subsequent visit. With the help of the cookie, we can also analyze certain user behavior, for example, which products you are viewing, how long you stay in our Online Shop and when and how often you visit the Online Shop. A stored cookie has an expiration date of twelve months after your last visit to our Online Shop.
This data processing is based on Article 6(1)(f) of the GDPR with the aim of better aligning our product offering with the needs of our visitors and optimizing the functions of our Online Shop as well as the efficiency of recommendations.
However, you can prevent the creation of cookies in the cookie settings of your Internet browser and prevent the creation of cookies from our Online Shop or for all websites. You can also delete cookies that have already been stored.
11. Google Analytics
This Online Shop uses Google Analytics, a web analytics service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter referred to as “Google”). Google places a cookie on your device. With this cookie, Google can collect information about how you use our Online Shop. This information is transmitted to a server in the USA, where it is evaluated by Google and made available to us. The legal basis is Article 6(1)(f) of the GDPR, i.e. our legitimate interest in evaluating and optimizing our Online Shop on the Internet.
As part of the EU-US Privacy Shield Agreement, Google undertakes to comply with the data protection laws of the European Union.
We use Google Analytics with IP anonymization enabled. This means that your IP address will generally be shortened within the scope of the GDPR, so that the IP cannot be linked to your person. Only in exceptional cases is the full IP address sent to a Google server in the USA and shortened there. The IP address provided by your browser will not be combined with other data held by Google. You can prevent the storage of cookies in the settings of your browser.
12. Social networks
In our Online Shop, social media buttons can be displayed; they can be recognized by the logos of the social media platforms (hereinafter, “platforms”) which by default appear in the following form and colors or variations of the color scheme:
Facebook: “F” on blue button, Twitter: blue, silhouette of a bird, Instagram: color scheme of a camera, Linkedin: “in” on blue button, Pinterest: “P” on red button, YouTube: “YouTube” on white / red button, Vimeo: “v” on blue button, Google+: “g+” on red button, Blogger: “B” on orange button, WhatsApps: phone with balloon on green button.
These buttons are links to the respective US-based platforms. A click on each link evokes a link to the website or a function of the respective platform, whereby the IP address of the device as well as the address of the page from which the link was evoked (“Referrer”) are transmitted to the respective platform in the USA. However, we do not collect or process data in connection with social media buttons.
By using one of the functions of these social networks you are aware of and accept the respective privacy policy of each of the entities responsible for the platform.
13. Your Rights
With regard to the personal data we process about you, you can exercise the following rights:
You have the right to request confirmation as to whether we process your personal data. If this is the case, we will inform you about your stored personal data and additional information in accordance with Article 15, paragraph 1 and 2 of the GDPR.
You have the right to correct or request the correction of incorrect data concerning you without delay. In view of the purpose of the data processing, you have the right to demand that your data be supplemented, also through additional statements made.
You have the right to ask us to delete your personal data immediately under the conditions of Article 17 (1) of the GDPR, unless the processing is required by Article 17 (3) of the GDPR.
You have the right to demand the restriction of the processing of your personal data if one of the conditions of Article 18 (1) of the GDPR applies. You can request the restriction of the processing of your data instead of requesting its deletion.
We will disclose any request for correction or deletion of your personal data and restrictions on the processing of your personal data to all entities to which we provide your personal data, unless this is impossible or involves a disproportionate effort. We will also inform you of the identity of these entities if you request it.
You have the right to receive the personal information that you have provided to us in a structured, common and machine-readable format and to demand that we transmit this information, without hindrance, to another responsible person to the extent possible.
As long as you consent to the processing of your data, you have the right to revoke your consent at any time.
Your withdrawal of consent to the processing of your personal data does not affect the lawfulness of the processing of your personal data up to the time of withdrawal.
Right to Object: For reasons arising from your specific situation, you may at any time exercise your right to object to the processing of your personal data;
This right to object to the processing of your personal data refers to the processing of data based on Article 6(1)(f) of the GDPR to protect our legitimate interests or those of a third party, unless your interests or constitutional rights and fundamental freedoms, which require the protection of your personal data, prevail.
When you exercise your right to object, we will no longer process your personal data in question, unless we can prove compelling legitimate grounds for the processing that override your interests, rights and freedoms, or that the processing serves the purpose of asserting, defending or claiming legal rights.
In the event that we process your personal data for the purpose of sending direct advertising (e.g. newsletter), you can always exercise your right to object to the processing of your personal data relevant to this purpose and we will cease to process your personal data for such purposes.
If you believe that the processing of your personal data violates the General Data Protection Regulation (GDPR), you can lodge an appeal through a regulatory body, in particular in the Member State of your residence, your place of work or the place of the alleged violation. This does not exclude other administrative or judicial remedies.
Request Change of Data or Consent or Deletion of Customer Account
In your Customer Area (personal data management)
Use Personal Data Change Request Form
14. About this Privacy Policy
We reserve the right to review and update this Privacy Policy, which will be disclosed through our Online Shop.
Date last updated: June 04, 2020
