Privacy Policy

WHO ARE WE?

Casa do Polvo is committed to protecting the personal data of Customers/Users of Casa do Polvo’s products and services, as well as personal data in all situations where personal data processing occurs. In this context, this Policy has been developed, underlying our commitment to respecting the rules of personal data protection.

WHY THIS PERSONAL DATA PROTECTION POLICY?

This Policy aims to inform Customers/Users about the general rules of personal data processing, which are collected and processed in strict compliance with the legislation on personal data protection in force at any given time, particularly the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).

Casa do Polvo adheres to best practices in the field of security and protection of personal data, having taken the necessary technical and organizational measures to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent, and limited to authorized purposes.

Casa do Polvo is committed to protecting the confidentiality of personal data and has adopted measures it deems appropriate to ensure the accuracy, integrity, and confidentiality of personal data, as well as all other rights granted to data subjects.

The rules set forth in this Personal Data Protection Policy complement the provisions regarding the protection and processing of personal data included in contracts that Customers/Users enter into with Casa do Polvo, as well as the rules set forth in the terms and conditions governing the offering of various products and services, which are duly advertised on the website.

WHAT DOES THIS PERSONAL DATA PROTECTION POLICY COVER?

This Personal Data Protection Policy applies exclusively to the collection and processing of personal data for which Casa do Polvo is responsible for processing, within the scope of the services and products provided to its Customers/Users and in all situations where personal data processing occurs by Casa do Polvo.

Casa do Polvo’s website may contain links to other websites that are not operated by Casa do Polvo. The provision of such links is made in good faith, and Casa do Polvo cannot be held responsible for the collection and processing of personal data carried out through those websites, nor does Casa do Polvo assume any responsibility for such websites, including their accuracy, credibility, and the functionalities provided on them.

WHAT IS PERSONAL DATA?

Personal data means any information of any nature and regardless of its format, including sound and image, relating to an identified or identifiable individual.

An identifiable person is one who can be identified, directly or indirectly, particularly by reference to a name, identification number, location data, electronic identifiers, or one or more specific elements of their physical, physiological, genetic, mental, economic, cultural, or social identity.

WHAT DOES THE PROCESSING OF PERSONAL DATA CONSIST OF?

The processing of personal data consists of an operation or set of operations performed on personal data or sets of personal data, whether automated or not, including collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure, or destruction.

WHO IS RESPONSIBLE FOR THE PROCESSING OF DATA?

The entity responsible for the processing of personal data is Casa do Polvo itself, which determines the purposes and means of the processing.

If data subjects need to contact the data controller regarding their personal data, they can do so through the means and contacts indicated below:

Through the Casa do Polvo website – using the contact form or the alternative contact methods presented in the website footer.

WHO IS THE DATA PROTECTION OFFICER?

The Data Protection Officer plays a relevant role in the processing of personal data, ensuring, among other things, compliance with the applicable legislation, verifying compliance with this Personal Data Protection Policy, and defining clear rules for the processing of personal data, ensuring that all those who entrust their personal data processing to Casa do Polvo are aware of how Casa do Polvo treats the data and their rights in this matter.

Therefore, data subjects, if they wish, can communicate with the Data Protection Officer regarding issues related to the processing of personal data, using the contact information provided on the “Contacts” page.

WHAT TYPES OF PERSONAL DATA ARE PROCESSED?

Casa do Polvo, in the scope of its activities, processes personal data necessary for the provision of services and/or supply of products, as well as in the context of social intervention, processing data such as name, address, telephone number, and email address, as more detailed information is provided to data subjects.

Without prejudice to compliance with legal requirements regarding data retention and transmission for the purposes of investigation, detection, and repression of serious crimes, as well as other treatments that Casa do Polvo is legally obliged to carry out, traffic data, geographical location, profile, and/or consumption data of Customers/Users will be processed by Casa do Polvo to the extent necessary for the provision of services. As a result, based on location, profile, and/or consumption, Customers/Users will have access to specific features of the services, content suggestions, and proximity information services.

Information about location may also be recorded and transmitted to organizations with legal competence to receive emergency calls, for the purpose of responding to received calls.

Personal data, traffic data, geographical location, profile, and/or consumption data are also processed for marketing purposes or disclosure of offers of goods or services from Casa do Polvo, if the respective data subject has authorized it.

Personal data will also be processed if the data subject has authorized it, for the purpose of disclosing informative services and lists, within the scope of the universal service, including transmission to third parties for the publication of said lists and provision of informative services.

If there is prior consent from Customers/Users, it can be withdrawn at any time, without compromising the lawfulness of the processing carried out based on the previously given consent.

WHEN AND HOW DO WE COLLECT YOUR PERSONAL DATA?

Casa do Polvo collects your personal data, namely through telephone, written means, and through the website, always ensuring, when necessary, the prior consent of the data subject.

Some personal data is essential for the execution of the contract, and in the absence or insufficiency of such data, Casa do Polvo will not be able to provide the product or service in question.

If the data subject is not a Customer/User of Casa do Polvo, their personal data will only be processed when provided, particularly through the subscription to receive newsletters, in which case the rules of this Personal Data Protection Policy will apply.

The personal data collected may be processed by electronic or non-electronic means, always strictly complying with the legislation on personal data protection, stored in specific databases created for this purpose, and, under no circumstances, will the collected data be used for any purpose other than that for which they were collected or for which the data subject has given consent.

WHO ARE THE RECIPIENTS OF PERSONAL DATA?

Without prejudice to the recipients indicated throughout this Personal Data Protection Policy, Casa do Polvo may disclose personal data of Customers/Users, for the purpose of complying with legal obligations, particularly to police, judicial, fiscal, and regulatory entities.

WHAT ARE THE PURPOSES OF PROCESSING PERSONAL DATA?

In general, the personal data collected are based on and intended for the management of the contractual relationship, the provision of contracted services, and the adaptation of services to the needs and interests of Customers/Users. Casa do Polvo may also, where legally admissible, use the personal data provided by the data subject for other purposes, such as sending suggestions, disseminating institutional information about the brand, informing about campaigns, promotions, advertising, and news regarding Casa do Polvo’s products and/or services, as well as conducting market studies or evaluation surveys.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The period during which personal data is stored and retained varies according to the purpose for which the information is processed.

Indeed, there are legal requirements that obligate the retention of data for a minimum period of time. Therefore, whenever there is no specific legal requirement, data will be stored and retained only for the minimum period necessary for the pursuit of the purposes that led to their collection or subsequent processing, in accordance with the law.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

As data subjects, Customers/Users are guaranteed the right to access, rectify, update, restrict, erase, oppose the processing of their personal data (except for data that is indispensable for the provision of services by Casa do Polvo, as identified in the Form as mandatory to provide or to comply with legal obligations to which the data controller is subject), the right to object to their use for commercial purposes by Casa do Polvo and the withdrawal of consent, without compromising the lawfulness of the processing carried out based on such consent, as well as the right to data portability.

HOW CAN YOU ACCESS, RECTIFY, UPDATE, RESTRICT, ERASE, OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA, OR WITHDRAW YOUR CONSENT?

Without prejudice to the provisions of the GDPR, the data subject can do so, directly or through a written request addressed to the respective data controller, using the contacts provided for this purpose in this document, as well as other contacts provided by Casa do Polvo.

HOW CAN YOU OBJECT TO RECEIVING MARKETING CONTACTS?

Casa do Polvo may promote promotional actions to its Customers/Users regarding new products or services, including by phone, email, SMS, MMS, or any other electronic communication service, if the data subject has given their consent.

If the data subject does not wish to continue receiving these communications, they can withdraw their consent to the use of their data for marketing purposes at any time.

HOW CAN YOU LODGE A COMPLAINT?

Without prejudice to the possibility of submitting complaints directly to Casa do Polvo, using the contacts provided for this purpose, Customers/Users can also complain directly to the Supervisory Authority, the National Data Protection Commission (CNPD), using the contacts provided by this entity for this purpose.

WHAT MEASURES HAS CASA DO POLVO ADOPTED TO ENSURE THE SECURITY OF YOUR PERSONAL DATA?

Casa do Polvo is committed to ensuring the protection of the security of the personal data provided, having approved and implemented strict rules in this matter. Compliance with these rules is an obligation of all those who legally access them.

Given the concern and commitment that Casa do Polvo shows in the defense of personal data, various security measures, of a technical and organizational nature, have been adopted to protect the personal data provided against disclosure, accidental or unlawful loss, alteration, unauthorized access or use, or any other form of unlawful processing.

Additionally, third-party entities that, in the context of service provision, process personal data of Customers/Users on behalf and on behalf of Casa do Polvo, are contractually obligated to implement the appropriate technical and security measures that, at all times, comply with the requirements of the current legislation and ensure the defense of data subjects’ rights (including the protection of the privacy and personal data of Customers/Users).

In this sense, on Casa do Polvo’s website, personal data collection forms require encrypted sessions of the browser, and all personal data provided is securely stored on Casa do Polvo’s systems, which, in turn, are hosted on Casa do Polvo’s server, protected by all the necessary physical and logical security measures that Casa do Polvo deems essential to protect personal data.

Despite the security measures adopted by Casa do Polvo, it is important to note that all Internet users should take additional security measures, particularly ensuring the use of a PC and a browser updated with properly configured security patches, active firewall, antivirus, and anti-spyware, and ensuring the authenticity of the websites they visit on the Internet, avoiding websites whose reputation they do not trust.

UNDER WHAT CIRCUMSTANCES ARE DATA COMMUNICATED TO OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)?

In the scope of its activity, Casa do Polvo may resort to third parties for the provision of certain services. Sometimes, the provision of these services involves the access, by these entities, to personal data of Customers/Users. When this happens, Casa do Polvo takes appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees at this level, which is duly established and safeguarded in writing between Casa do Polvo and the third party(ies).

Therefore, any entity subcontracted by Casa do Polvo will process the personal data of our Customers/Users on behalf and on behalf of Casa do Polvo and will adopt the necessary technical and organizational measures to protect the personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination, or unauthorized access and any other form of unlawful processing.

In any case, Casa do Polvo remains responsible for the personal data provided.

UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?

The provision of certain services by Casa do Polvo may imply the transfer of your data outside Portugal, including outside the European Union or to International Organizations.

In such cases, Casa do Polvo will strictly comply with the applicable legal provisions, particularly regarding the determination of the adequacy of the country(ies) of destination in terms of the protection of personal data and the requirements applicable to such transfers, including, whenever applicable, the conclusion of the appropriate contractual instruments that guarantee and respect the legal requirements in force.

HOW CAN YOU BE AWARE OF ANY CHANGES TO CASA DO POLVO’S PERSONAL DATA PROTECTION POLICY?

Casa do Polvo reserves the right to adjust or change this Personal Data Protection Policy at any time, and these changes will be duly publicized on the various communication channels of Casa do Polvo.