Privacy Policy

A - INTRODUCTION


Welcome to the privacy policy of the website of Cama em Ponto.
In Cama em Ponto, we value your privacy and are committed to protecting your personal data. This privacy policy describes how we collect, use, store and protect the information of visitors to our website and customers who place orders or use our services.

We are committed to providing a safe and reliable experience when browsing and interacting with our website. We recognize the importance of maintaining the privacy of your personal data and guarantee that all information collected will be handled in accordance with applicable data protection laws.

We recommend that you read this privacy policy carefully to understand what information will be processed when you use the website Cama em Ponto. By continuing to browse our site or use our services, you agree to the practices described in this policy.

Please note that this privacy policy applies exclusively to the website Cama em Ponto and does not cover third-party sites that may be linked from our website.

If you have any questions or concerns about our privacy policy, please contact us through the channels provided at the end of this document. We are always happy to answer any questions regarding the processing of your personal data and your privacy.

Thank you for trusting Cama em Ponto. We are committed to protecting your privacy and ensuring a safe experience on our website.

Sincerely,
The Cama em Ponto

B - GENERAL PART

As part of the provision of the website hosted on https://camaemponto.com ("site"), the Ricardo Costa, Noble Home, Unipessoal, Lda.headquartered at Rua Alto da Bandeira, n.º 450, 1º direito, Creixomil, Guimarães, registered at the Commercial Registry Office of Guimarães, under the legal person identification number 517854716, hereinafter ("CAMA EM PONTO"), may request the user to provide personal data, that is, information provided by the user that allows the Cama em Ponto identify and/or contact you ("personal data").

Through this Privacy Policy, Cama em Ponto provides the user, under the terms of their right to information set out in the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016) and the Personal Data Protection Act (Law No. 58/2019, August 8), with detailed information about the nature of the data collected and the purpose and processing that will be carried out in relation to their Personal Data.

1. Collection and processing of user data

The website Cama em Ponto collects and processes the following personal data:

1.1 Information provided by the user

  • When creating an account on the website:
    Name, e-mail address, telephone contact, address (for billing and shipping), and tax number.
  • When placing orders:
    Products purchased, delivery method, payment preferences (ATM, MB Way or bank transfer) and purchase history.
  • Via the contact form:
    Name, e-mail address, telephone contact and message submitted.

1.1.2 Cookies and similar technologies

We use cookies to optimize the user experience. See our Cookie Policy for more details on how to manage your preferences.

1.1.3 Third-party links

The website Cama em Ponto may contain links to third-party websites, such as partners, affiliates or suppliers. This Privacy Policy applies only to our website and does not cover third-party sites. We recommend that you review the privacy policies of these sites before providing any personal information.

1.1.4 Security

We implement appropriate security measures to protect the information collected automatically during your visit to our website. This includes the use of security protocols, such as SSL encryption, to protect the information transmitted between your browser and our server. However, it is important to note that no method of transmission over the internet or electronic storage is 100% secure. Although we strive to protect your personal data, we cannot guarantee the absolute security of the data you provide.

1.1.5 Changes to the Privacy Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will take effect as of the update date indicated at the top of this page. We recommend that you periodically review this Privacy Policy to stay informed about how we protect your information.

2. Data communication

The personal data collected is not shared with third parties without the user's consent, with the exception of the following situations:

  • Communications required by law: In compliance with legal or regulatory obligations.
  • Service providers as subcontractors: As described in point 2.1 of this Privacy Policy.

2.1 Subcontractors

When processing user data, the Cama em Ponto uses or may use third parties, subcontracted by it, on behalf of Cama em Ponto and in accordance with the instructions given by the latter, process the user's data in strict compliance with the provisions of the law and this privacy policy.

These subcontractors may include, but are not limited to:

  • Carriers: For parcel delivery (e.g. CTT, UPS, DPD).
  • Payment services: For processing online payments (e.g. Multibanco, MB Way, or bank transfer).
  • Technology and hosting providers: To maintain the proper functioning of the website and associated services.

These subcontractors may not pass on the user's data to other entities unless Cama em Ponto has previously authorized in writing, and is also prevented from contracting with other entities without prior authorization.

The website Cama em Ponto undertakes to subcontract only entities that provide sufficient guarantees that the appropriate technical and organizational measures will be implemented to ensure that the user's rights are protected. All entities subcontracted by Cama em Ponto They must be bound to the latter by a written contract which regulates, among other things:

  • The rights and obligations of the parties.
  • The purpose and duration of the treatment;
  • The nature and purpose of the treatment;
  • The type of personal data and the categories of data subjects;

3. General principles applicable to the processing of user data

With regard to the processing of personal data, the Cama em Ponto undertakes to ensure that user data is:

  • Object of lawful, fair and transparent treatment in relation to the user;
  • Collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes;
  • Adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
  • Accurate and up-to-date whenever necessary, with all appropriate measures being taken to ensure that inaccurate data, taking into account the purposes for which it is processed, is erased or rectified without delay;
  • Kept in a way that allows the user to be identified for no longer than is necessary for the purposes for which the data is processed;
  • handled in a manner that ensures their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction or damage, and appropriate technical or organizational measures are taken.

4. Legitimacy for processing personal data

The data processing carried out by Cama em Ponto are lawful when at least one of the following situations occurs:

  • The user has given their explicit consent to the processing of the data for one or more specific purposes;
  • Processing is necessary for the performance of a contract to which you are a party (e.g. processing orders and shipments), or for pre-contractual steps at your request;
  • Processing is necessary for compliance with a legal obligation to which the Cama em Ponto is subject to;
  • Processing is necessary for the protection of the vital interests of the user or another natural person;
  • Processing is necessary for the purposes of the legitimate interests pursued by Cama em Ponto or by third parties (unless the interests or fundamental rights and freedoms of the user that require the protection of personal data prevail).

The website Cama em Ponto undertakes to ensure that user data is only processed under the conditions listed above and in compliance with the principles mentioned in point 3.

When user data is processed on the basis of consent, the user has the right to withdraw consent at any time. However, withdrawing consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given.

5. Personal data retention period

The user's personal data is stored and kept only for the period necessary for the purposes for which it was collected or further processed, or as required by law. After the end of this period, the data will be deleted or anonymized.

Data associated with orders, for example, can be kept for as long as necessary:

  • Ensuring the rights of Cama em Ponto in legal proceedings.
  • Comply with legal archiving requirements (e.g. for tax or accounting purposes);
  • Resolve disputes;

6. Purposes of processing personal data

As part of the online store and website operations, the Cama em Ponto processes the user's personal data for the following purposes:

  • Order management: This includes processing payments, preparing and dispatching orders and sending updates on their status.
  • User account management: For access to order history and customization of services.
  • Marketing and communications: Sending newsletters and promotions, with the user's prior consent.
  • Website maintenance and improvement: Monitoring usage and traffic patterns to optimize the user experience.

7. Technical, organizational and safety measures implemented

In order to guarantee the security of user data and maximum confidentiality, the Cama em Ponto treats your personal data in an absolutely confidential manner, in accordance with its internal security and document classification policies and procedures, which are periodically updated as necessary, as well as in accordance with the legally established terms and conditions.

Depending on the nature, scope, context and purposes of the data processing, as well as the risks arising from the processing for the rights and freedoms of the user, the Cama em Ponto undertakes to apply, both at the time of defining the means of processing and at the time of the processing itself, the necessary and appropriate technical and organizational measures for the protection of user data and compliance with legal requirements.

It also undertakes to ensure that, by default, only the data necessary for each specific processing purpose is processed and that this data is not made available without human intervention to an indeterminate number of people.

In terms of general measures, the Cama em Ponto adopts the following:

  • Regular audits in order to assess the effectiveness of the technical and organizational measures implemented;
  • Awareness-raising and ongoing training of the staff involved in the processing of personal data;
  • Pseudonymization and encryption of personal data, where applicable, to protect sensitive information, including account and order data;
  • Robust security protocols, SSL/TLS encryption to protect the transmission of data on the site;
  • Access control systemsThis ensures that only authorized personnel have access to personal data;
  • Mechanisms capable of ensuring permanent confidentiality, availability and resilience information systems;
  • Backup and restoration mechanisms that ensure the timely recovery of data and access to information in the event of a physical or technical incident;
  • Activity monitoring and mitigation of security risks, with a view to protecting against unauthorized access, alteration, improper disclosure or destruction of personal data.

8. Data transfers outside the European Union

The personal data collected by Cama em Ponto are not, as a rule, transferred outside the European Union. If such a transfer is necessary in the future, the Cama em Ponto will ensure that it complies with all applicable legal requirements, particularly with regard to the adequacy of the third country for data protection.

C - Data subjects' rights

9. Right of access to personal data

The website Cama em Ponto guarantees the means by which users can access their personal data

The user has the right to obtain from Cama em Ponto confirmation as to whether or not personal data concerning you is being processed and, where applicable, the right to access your personal data.

Upon request, the Cama em Ponto will provide the user, free of charge, with a copy of the user's data that is being processed. The provision of other copies requested by the user may entail administrative costs.

10. Right to rectification of personal data

The user has the right to request the rectification of their personal data at any time, as well as the right to have incomplete personal data completed, including by means of an additional declaration.

If the data is rectified, Cama em Ponto communicates to each recipient to whom the data has been transmitted the rectification thereof, unless such communication proves impossible or involves a disproportionate effort for the recipient of Cama em Ponto.

11. Right to erasure of personal data ("right to be forgotten")

The user has the right to obtain from Cama em PontoYou can request the deletion of your data when one of the following reasons applies:

  • The user's data is no longer necessary for the purpose for which it was collected or processed;
  • The user withdraws the consent on which the processing of the data is based and there is no other legal basis for said processing;
  • The user objects to the processing under the right to object and there are no overriding legitimate interests justifying the processing;
  • If the user's data is processed unlawfully.

Under the applicable legal terms, the Cama em Ponto is under no obligation to delete the user's data insofar as the processing is necessary for compliance with a legal obligation or for the purposes of declaring, exercising or defending a right of the user. Cama em Ponto in a court case.

In the event of data deletion, the Cama em Ponto notifies each recipient/entity to whom the data has been transmitted of its deletion, unless such communication proves impossible or involves a disproportionate effort.

12. Right to restriction of processing of personal data

The user has the right to obtain from Cama em PontoIf one of the following situations applies, the processing of the user's data may be restricted:

  • If you dispute the accuracy of the personal data, for a period that allows the Cama em Ponto verify its accuracy;
  • If the processing is unlawful and the user opposes the erasure of the data, requesting instead that its use be restricted;
  • If Cama em Ponto no longer needs the user's data for processing purposes, but such data is required by the user for the purposes of declaring, exercising or defending a right in legal proceedings;
  • If the user has objected to the processing, until it is established that the legitimate reasons for the Cama em Ponto take precedence over those of the user.

When the user's data is subject to limitation, it may, with the exception of storage, only be processed with the user's consent or for the purposes of declaring, exercising or defending a right in legal proceedings, defending the rights of another natural or legal person, or for reasons of public interest legally provided for.

13. Right to portability of personal data

The user has the right to receive personal data concerning him/her which he/she has provided to the Cama em PontoThe right to receive data in a structured, commonly used and machine-readable format, and the right to transmit this data to another controller, provided that:

  • The processing is based on consent or a contract to which the user is a party; and
  • The treatment has been carried out by automated means.

14. Right to object to processing

The user has the right to object, at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her, in cases where the processing is based on legitimate interests pursued by Cama em Ponto or when the data is processed for purposes other than those for which it was initially collected, including profiling, or for statistical purposes.

If the user exercises the right to object, the Cama em Ponto will immediately cease processing the data, unless there are compelling legitimate reasons that prevail over the interests, rights and freedoms of the user, or for the purposes of declaring, exercising or defending a right in legal proceedings.

You also have the right to object to the processing of your personal data for direct marketing purposes, including the definition of profiles related to such marketing. In this case Cama em Ponto will cease processing the data for this specific purpose.

In addition, you have the right not to be subject to decisions taken solely on the basis of automated data processing, including profiling, which produce significant effects in your legal sphere or which affect you in a similar way, except in the following cases:

  • Where such a decision is necessary for the conclusion or performance of a contract between the user and the Cama em Ponto;
  • When the decision is authorized by applicable legislation to which the Cama em Ponto is subject to;
  • When the decision is based on the user's explicit consent.

In cases where automated processing is necessary or authorized, the Cama em Ponto undertakes to implement appropriate measures to protect the rights, freedoms and legitimate interests of the user, including the right to request human intervention, express their point of view or contest the decision.

15. Procedures for users to exercise their rights

The right of access, the right to rectification, the right to erasure, the right to restriction, the right to portability and the right to object may be exercised by the data subject, by contacting the Data Protection Officer of the company. Cama em Pontoby emailing geral@camaemponto.com or written communication to:
Rua Alto da Bandeira, n.º 450, 1.º direito, 4835-014 Guimarães.

The website Cama em Ponto will respond in writing (including by electronic means) to the user's request within a maximum of one month from receipt of the request, except in cases of particular complexity, where this period may be extended by up to two months.

If the requests made by the user are manifestly unfounded or excessive, in particular due to their repetitive nature, the Cama em Ponto reserves the right to charge administrative costs or refuse to comply with the request.

In addition, the user can always lodge a complaint with the Supervisory Authority with jurisdiction over the specific case:

Portugal:
Data Protection - National Data Protection Commission, located at Av. D. Carlos I, 134 - 1.º 1200-651 Lisboawith the phone (+351) 213928400 and email: geral@cnpd.pt

Spain:
Spanish Data Protection Agency, located at C/ Jorge Juan, 6 28001-Madridwith the phone (+34) 900 293 183and electronically at the following address hyperlink.

France:
Commission nationale de l'informatique et des libertés at 3 Place de Fontenoy TSA 80715 75334 PARIS CEDEX 07with the phone +33 (0)1 53 73 22 22and electronically at the following address hyperlink.

Belgium:
L'Autorité de protection des données (APD) located at Rue de la Presse, 35 à 1000 Bruxelleswith the phone +32 (0)2 274 48 00 and by email: contact@apd-gba.be

Switzerland:
Federal Data Protection and Information Commissioner (FDPIC)
CH - 3003 Bernewith the phone +41 (0)58 462 43 95 and electronically at the following hyperlink.

16. Personal data breaches

In the event of a personal data breach that is likely to involve a high risk to the rights and freedoms of the user, the Cama em Ponto undertakes to notify the user of the breach without undue delay.

Under legal terms, this communication will not be required in the following cases:

  • If direct communication to the user would involve a disproportionate effort, in which case the Cama em Ponto shall make a public announcement or take an equivalent measure to inform affected users.
  • If Cama em Ponto has implemented appropriate technical and organizational measures, such as encryption, that render the compromised personal data unintelligible to unauthorized third parties;
  • If Cama em Ponto has taken subsequent measures to ensure that the high risk to the rights and freedoms of the user is no longer likely to materialize;

D - Final part

17. Changes to the privacy policy

The website Cama em Ponto reserves the right to change this Privacy Policy at any time. The date of the last update will be indicated at the bottom of this page. In the event of significant changes, a prominent notice will be placed on the website.

18. Applicable law and jurisdiction

This Privacy Policy and any issues related to the processing of personal data are governed by the General Data Protection Regulation (Regulation (EU) 2016/679) and the applicable Portuguese legislation.

Any disputes relating to the interpretation, validity or execution of this Privacy Policy shall be submitted to the exclusive jurisdiction of the courts of the district of Guimarães, unless otherwise provided by law.

Privacy Policy updated on: November 30, 2024