PRIVACY POLICY

Privacy Policy

PAPEL&CA reaffirms its commitment to respecting your privacy and protecting your personal data.

Who We Are

The PAPEL&CA online store is owned by PEDRO DELERUE, UNIPESSOAL, LDA. at www.papelca.pt

This Privacy Policy establishes PAPEL&CA's commitment to its Customers regarding personal data protection, maintaining their relationship of trust and proximity. Through this Privacy Policy, PAPEL&CA informs its Customers about the processing it performs with their data, as well as the rights it recognizes them as personal data subjects.

PAPEL&CA operates in strict compliance with the principles described in this policy, Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable data protection legislation, in all personal data processing activities for which it is responsible. PAPEL&CA processes personal data through various operational and technical means that support its business process activities.

What personal data is collected and how it is collected

The new General Data Protection Regulation establishes a more comprehensive definition of the concept of personal data. Personal data is any information, regardless of its nature and the medium in which it is presented, capable of identifying a person.

At PAPEL&CA, we process your personal data with your consent when you make a purchase, contract a service, or use our website. This processing can be done orally, in writing, or through our website.

Contact forms

The collected data are exactly those described in each form; we always ask for the minimum data. The entered data may be kept for the time necessary to provide the desired service. The data may be deleted if the user expresses this intention; to do so, simply send a message from the contact form on this site requesting the right to be forgotten.

Cookies

If you have an account and log in to this site, a temporary cookie will be set to determine if your browser accepts cookies. This cookie contains no personal data and will be deleted when you close your browser.

When you log in, several cookies will be set up to save your session information and your screen display choices. Login cookies last for one year. If you select "Remember Me", your session will persist for two weeks. When you log out, the login cookies will be removed.

What we do with your data

PAPEL&CA guarantees that your personal data is only processed for the purposes communicated to you and will not be used for any other purpose.

Direct Marketing

With your express consent when creating a customer account or in the newsletter form, for direct marketing purposes, so that you receive emails from PAPEL&CA with information about news, opportunities, and promotions that may interest you.

Customer Management

To send your online purchases to your home without you having to visit one of our stores. To inform you when your purchase is ready for collection at our store.
Circumstances that allow us to process your personal data when you execute a contract for the purchase and sale of products or services from PAPEL&CA.

To whom we transmit your data

Whenever necessary, PAPEL&CA may transmit your personal data to third parties, namely to goods transport companies, solely and exclusively for the purpose of executing a service you contracted, such as home delivery of a product.

Your personal data may also be communicated, in compliance with the law, to State entities, such as the Tax Authority.

The User is informed that the online store PAPEL&CA is hosted by Shopify, and that Shopify may process your personal data whenever you visit or make purchases in the store, including for the provision of services based on your interactions with other merchants and with Shopify itself. User information may be shared with Shopify and with third parties located in other countries, with the aim of enabling the provision of services, including those that use data resulting from the User's interactions with other merchants and with Shopify. It is recommended to consult Shopify's Terms of Service and Privacy Policy, available at Shopify Legal - Shopify for more information on the processing of personal data carried out by this entity.

PAPEL&CA does not, under any circumstances, share your personal data with other companies or brands for other commercial purposes.

What rights you have over your data

Right of access to information
You can obtain confirmation of what personal data of yours is processed by PAPEL&CA, as well as relevant information about the purposes of processing or the retention periods of such data.

Right to rectification
You can request the amendment of your personal data that is incorrect or incomplete.

Right to erasure
You can request the erasure of your personal data, provided there are no legal obligations for its retention.

Right to portability
You can receive the personal data you provided to us in a structured, machine-readable digital format.

Right to object
You can object to or withdraw consent you previously gave to the processing of your personal data.

Right to restriction of processing
You can request the restriction of processing of your personal data, in the form of:
1. Suspension of processing;
2. Limitation of the scope of processing to certain categories of data or processing purposes.

Right not to be subject to automated individual decisions
You can request not to be subject to any decision taken solely based on automated processing. These decisions are related to PAPEL&CA's definition of consumption profiles, based on your tastes, interests, and preferences, search and purchase history, etc., namely to provide a quality service and adapt marketing communications.
You can exercise these rights in writing, using the contact form on our website.

How your data is protected

All collected data is encrypted through the use of a security certificate – SSL. The data is stored in a database and used exclusively by PEDRO DELERUE, UNIPESSOAL, LDA. We constantly monitor access to information technology systems with a view to preventing, detecting, and preventing the misuse of your personal data.

Procedures foreseen in the event of a data breach

In the event of a data breach, PAPEL&CA will obligatorily notify the supervisory authority and the personal data subjects of the fact. In situations of serious breaches, notification to the supervisory authority must occur within a maximum of 72 hours.

This Privacy Policy may be revised and updated, which will be disclosed through our website.