Legal & Privacy

Identification Of The Responsible For Treatment

Company: Plínio Leal & Ana Leal, Limitada (hereinafter “André Opticas”)

Headquarters: Rua da Figueirinha 24 A, 2780-014 Oeiras, Portugal

NIPC: 501495606

Introduction

This Privacy Policy explains how André Opticas collects and treats the personal data that is required in order to provide the services available on the Website (andreopticas.com).

The General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter “RGPD”) and the RGPD Implementing Law in the Portuguese legal order (Law no. 58/2019 of 8 August, hereinafter “LPDP”) ensures the protection of individuals with regard to the processing of personal data and the free movement of such data.

According to the law, “personal data” means any information of any nature whatsoever and regardless of its support, including sound and image, relating to an identified or identifiable natural person, so protection does not cover data of legal persons.

André Opticas maintains a database with the registration of its customers. The data contained in this database are solely the data provided by the customers at the time of registration, and are automatically collected and processed by André Opticas, the entity responsible for the corresponding file.

Personal Data Collected, Purposes And Grounds For Legitimity

The categories of personal data we collect (directly or through third parties) and our privacy procedures depend on your use of the Website and applicable legal requirements.

André Opticas seeks to collect only information relevant to the purposes of the treatment.

André Opticas will collect and process the following personal data:

Purpose: User Account Creation and Management
Data Collected: Name, address, tax ID, email addresses, phone contact.
Legitimity Basis: Contract Execution
Purpose: Order Processing
Data Collected: Name, address, telephone contact, purchased product.
Legitimity Basis: Contract Execution
Purpose: Payment Processing
Data Collected: Name, payment details (credit card number, ATM reference, IBAN).
Legitimity Basis: Contract Execution
Purpose: Returns Processing
Data Collected: Name, address, email address, payment details (credit card number, ATM reference, IBAN).
Legitimity Basis: Legal Obligation
Purpose: Communication with Customers, Questions and Technical Assistance
Data Collected: Name, email address.
Legitimity Basis: Contract Execution
Purpose: Complaint Processing
Data Collected: Name, address, email address.
Legitimity Basis: Legal Obligation
Purpose: Statistical Analysis Activities
Data Collected: Statistical data based on information collected automatically when you use the website (IMEI, browser type and language, geolocation information, hardware type, operating system).
Legitimity Basis: Legitimate Interests
Purpose: Submission of Newsletters or Other Publications That You Have Requested and/or May Be of Interest to You
Data Collected: Name, email address, address, phone contact.
Legitimity Basis: Your Consent
Purpose: Fraud Prevention
Data Collected: Name, order amount, payment details (credit card number, ATM reference, IBAN), email address.
Legitimity Basis: Legitimate Interests

André Opticas guarantees the confidentiality of all data provided by its customers. Although André Opticas collects and processes data securely and prevents it from being lost or manipulated using the most advanced techniques, we inform you that open network collection allows the circulation of personal data, having the risk of being seen and used by unauthorized third parties.

At the time of collection of personal data, except where otherwise indicated, the user may voluntarily make personal data available without the lack of response implying a decrease in the quality or quantity of the corresponding services (unless otherwise stated. However, failure to respond to the data, which is considered mandatory, will mean that you will not be able to access the service for which the data was requested.

If you do not agree to the above conditions, André Opticas may not contract with you through the Website.

Personal Data Storage Date

Your personal data will be stored for as long as necessary for the purposes for which they are collected, in accordance with Portugal’s legal obligations.

Assignment Of Personal Data

André Opticas may use third parties to provide certain services, such as maintenance, technical support, marketing, billing management or payments, which may have access to some personal data that we collect, in particular, the data required for contractual purposes.

André Opticas guarantees that the entities that have access to the data are credible and offer protection guarantees. André Opticas does not transmit data to third parties beyond what is necessary to provide the contracted services, but André Opticas remains responsible for the personal data you provide.

André Opticas may also transmit data to third parties in the course of investigations, inquiry and judicial or administrative proceedings, or with similar nature, provided from a court order.

Safety Measures

André Opticas declares that it has implemented and will continue to implement the technical and organizational security measures necessary to ensure the security of personal data provided to it, in order to prevent its alteration, loss, processing and / or unauthorized access, taking into account the current state of the technology, the nature of the stored data and the risks they are exposed.

André Opticas guarantees the confidentiality of all data provided by its customers either at registration or in the process of purchasing / ordering products or services. The collection and processing of data is performed safely and prevents its loss or manipulation. All data will be inserted into a Secure Server (128 bit SSL) which encrypts it (turns it into code). You will be able to verify that your browser is secure if the lock symbol appears or if the address starts with https instead of http.

Personal data are treated with the level of protection legally required to ensure their security and to prevent unauthorized alteration, loss, processing or access, taking into account the state of the technology.

Whenever accessed any personal data, André Opticas undertakes to:

Store them through legally enforceable security measures of technical and organizational nature to ensure their safety, thereby preventing unauthorized alteration, loss, treatment or access, in accordance with the state of the technology at any given time, nature of the data and the possible risks to which they are exposed;
Use the data exclusively for previously defined purposes;
Make sure that the data are processed only by workers whose intervention is required to provide the service and are bound by the obligation of secrecy and confidentiality. In the event that the information may be disclosed to third parties, they should be required to maintain appropriate confidentiality in accordance with the provisions of this document.

Commercial And Promotional Communications

One of the purposes for which we treat personal data provided by users is to send electronic communications with information regarding health, commercial and promotional communications.

Whenever we make such a communication, it will be directed exclusively to users who have expressly and previously authorized them.

Pursuant to Decree-Law No. 7/2004, of 7 January, in case the user wishes to stop receiving commercial or promotional communications from André Opticas, they may request the opposition of the service by sending an email to the following address: support@andreopticas.com.

Exercise Of Rights

In accordance with the provisions of the RGPD and LDPD, the user may at all times exercise his rights of access, rectification, deletion, limitation, opposition and portability by request by any of the following means:

Post Office: Rua da Figueirinha, 24 A, 2780-014 Oeiras, Portugal

Email: protecaodados@andreopticas.com

If you wish to cease to be part of André Opticas database, you may exercise this right at any time through these contacts.

Data Transfer To Third Countries

If data transfers to third countries (countries outside the European Economic Area) occur, André Opticas will comply with applicable law, in particular as regards the adequacy and level of protection applied to personal data in the country of destination. André Opticas will also apply the necessary mechanisms to ensure that transfers are carried out in accordance with the law.

Minors

André Opticas services are not intended for minors under 18 years. To this extent, we request that such minors not provide us with personal information.

Control Authority

Under the law, the data subject has the right to submit a personal data protection complaint to the competent supervisory authority, the National Data Protection Commission (CNPD). For more information, visit: www.cnpd.pt.