Privacy policy

Privacy and the protection of your personal data are essential for Pinha Mansa – Indústria de Vestuário, Lda, which has always guided its collection, use, consultation, and processing in strict compliance with the applicable legislation on the protection of personal data.

With the application of Regulation (EU) 2016/679, known as the General Data Protection Regulation (GDPR), Pinha Mansa, registered in Portugal with tax number PT506066193, undertakes to provide its customers with detailed information on the use and protection of their personal data, the reasons for processing them, and the rights they have as a result of this processing, in accordance with the provisions of Articles 13 and 14 of the GDPR.

1. Data controller

1.1 Pinha Mansa – Indústria de Vestuário, Lda, with registered office at Rua do Passal N.º 46 – BEIRIZ, 4495-386 Póvoa de Varzim, is the data controller.

1.2 Os utilizadores deste website poderão contactar a entidade responsável pelo tratamento para qualquer questão ou esclarecimento relacionado com a proteção de dados pessoais através dos seguintes contactos:

By email to geral@pinhamansa.com;

By mail to the adress: Rua do Passal. N. 46 - Beiriz, 4495-386 Póvoa de Varzim.

2. Category of personal data

2.1 The personal data that Pinha Mansa collects and processes are only those that the user provides voluntarily, explicitly, and unequivocally when filling out any form on this website.

2.2 Pinha Mansa, depending on the purposes for which it processes your data at each moment, processes various categories of personal data and has classified them as follows:

- Identification data (e.g., name, signature);

- Tax identification data (e.g., tax identification number);

- Address and contact data (e.g., fiscal address, mailing address, phone number);

3. Purposes of the processing and legitimacy grounds

3.1. The user's personal data undergo processing for specific, explicit, and legitimate purposes and will not be subsequently processed in a manner incompatible with these purposes.

3.2 In the interest of minimal and limited data collection, Pinha Mansa only processes data that is strictly necessary, appropriate, and relevant for the purposes for which it is processed.

3.3. The personal data of users may be processed for the following purposes:

- Development, fulfillment, and execution of a sales or service contract, which will occur, for example, when you fill out our contact form and purchase an item. In case it is necessary to deliver the item, the processing of data for transport purposes is also essential.

- Your data will be processed for accounting or billing purposes in compliance with legal obligations. The processing of your data is essential for issuing an invoice or receipt when you purchase a service from us;

- Marketing and communication of products and services. Pinha Mansa processes your data for sending newsletters and campaigns by email and/or Short Message Service (SMS) and to invite you to events. This data processing will occur in pursuit of the legitimate interests of the data controller and/or when the customer has given their free, informed, and explicit consent for this purpose.

- Customer support. Pinha Mansa considers it legitimate to process user data to respond to requests and/or questions related to the products and services we offer.

4. Recipients of personal data

To achieve the purposes described above and to comply with legal obligations, Pinha Mansa may have to transmit users' personal data to entities external to the organization, namely:

- To entities qualified as subcontractors, under the General Data Protection Regulation, for the provision of services related to contractual execution, logistics and transportation, information technology, data storage, auditing, document management, and litigation, including service providers in the areas of transportation and logistics, accounting, information systems, auditing, and litigation. Pinha Mansa will only use subcontracted entities that act in accordance with its instructions and provided they present sufficient guarantees for the execution of adequate technical and organizational measures to ensure that the processing meets, among others, the requirements of security, confidentiality, and integrity, with such guarantees being formalized in a contract signed between Pinha Mansa and each of these entities.

- To entities qualified as third parties by the General Data Protection Regulation, such as the Tax and Customs Authority, Judicial, Judiciary, and Regulatory Entities.

5. Storage period

5.1 Your personal data will continue to be processed for the time necessary or mandatory to fulfill the purposes described above.

5.2 Data processed in the context of the development, fulfillment, and execution of a sales or service contract will be stored for the strictly necessary period to manage the purchase of products or services, including any returns, complaints, or claims associated with the purchase of the product or service in question.

5.3 Data processed for accounting and/or billing purposes will be retained for the time required by law.

5.4 Data collected for marketing and communication of products and services will be retained for 1 (one) year from the customer's last interaction or until the customer withdraws the given consent, as applicable.

5.5 Data processed in the context of customer support will be retained for the time necessary to respond to your request or inquiry.

6. Data subject rights

The user, as the data subject, through data collection and processing, has the following rights:

- Right of access: whenever requested, you may access your personal data, obtain information regarding the processing of your data, and obtain a copy of your personal data being processed;

- Right to rectification: whenever you believe that your personal data is incomplete or incorrect, you may request that it be rectified or completed;

- Right to erasure/deletion of data: without prejudice to legal obligations that may limit the exercise of this right, you may request the erasure of your data when: the data processing is no longer necessary for the purpose that justified its collection or processing; you withdraw the consent on which the data processing is based, and there is no other legal basis for it; you object to the data processing, and there are no prevailing legitimate interests, to be assessed on a case-by-case basis, justifying the processing; when the data has been processed unlawfully; personal data must be erased to comply with a legal obligation to which the data controller is subject; the data was collected in the context of providing information society services referred to in Article 8(1) of the General Data Protection Regulation;

- Right to restriction of processing: you may request the restriction of the processing of your data in the following situations: if you contest its accuracy, for a period that allows the data controller to verify its accuracy; if the processing is unlawful and the data subject opposes the erasure of personal data and requests the restriction of its use; if the data controller no longer needs your data for processing, but they are necessary for the establishment, exercise, or defense of a right in a judicial proceeding; if you have objected to processing until it is established that the legitimate interests of the data controller prevail over yours.

- Right to object: you have the right to object to the processing of your data when the processing is based on the legitimate interest of the data controller or when the processing is carried out for purposes other than those for which the data was collected but are compatible with it.

- If you object to the processing of your data, Pinha Mansa will cease the processing of your data, unless it has legitimate reasons to continue processing that override your interests. You may also, at any time, object to the processing of your data for direct marketing purposes.

- Right to data portability: when your personal data is in a structured, commonly used, and machine-readable format, the processing is based on your explicit consent or the performance of a contract, and is carried out by automated means, you have the right to transmit it to another data controller, provided that this is technically feasible.

- Right to withdraw consent: in situations where the processing is based on your consent, you have the right to withdraw your consent at any time. In this situation, the data controller will stop processing the data in question, unless other reasons justify such processing.

- Right to lodge a complaint with the competent supervisory authority: you have the right to lodge complaints regarding issues related to the processing of your personal data with the National Data Protection Commission.