COLLECTION AND PROCESSING OF PERSONAL DATA
Buraca Roasters collects the personal data of each client – namely the name, address, TIN, telephone and email contact – for managing orders, invoicing and information according to the express authorization given for such purposes while undertaking a privacy and security commitment in the processing and maintenance of each user’s personal data under the “Lei da Proteção de Dados Pessoais” (LPDP) (Portuguese Personal Data Protection Law), Law No. 67/98 of 26 October, and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter referred to as the “GDPR”.
PURPOSES OF THE PERSONAL DATA PROCESSING
The personal data collected and processed through this page shall be used exclusively for:
- Processing of orders;
- Communication with clients;
- Processing of complaints;
- Statistical analysis;
- Direct marketing communications, should the user consent to the personal data processing for this purpose;
- Fraud prevention and combat;
- Conducting satisfaction surveys;
- Managing and participating in events, hobbies and campaigns;
CONFIDENTIALITY OF THE DATA COLLECTED
Buraca Roasters guarantees the confidentiality of all data provided by its clients. Although Buraca Roasters collects and processes data in a secure manner using the most advanced techniques, any open network collection allows personal data to circulate without the desired security, risking being viewed and used by unauthorized third parties.
At the time of collecting the personal data, the user may voluntarily make available the respective personal data without implying a decrease in the quality or quantity of the corresponding services due to a possible lack of response. However, failure to respond to mandatory data will mean that the client will not be able to access the service for which the data was requested, in particular regarding online shopping through our website.
TRANSFER OF PERSONAL DATA TO THIRD PARTIES
Buraca Roasters may need to transfer the user’s personal data collected through the website to other entities, which will process them for the following purposes: management and processing of payments; order management and shipping; management and participation in events, hobbies and campaigns.
Buraca Roasters hereby declares it has implemented and will continue to implement the technical and organizational security measures necessary to ensure the security of the personal data provided to it in order to prevent their alteration, loss, processing and/or unauthorized access, taking into account the current state of technology, the nature of the stored data and the risks to which they are exposed to.
Buraca Roasters guarantees the confidentiality of all data provided by the user during the registration process on the site and while ordering products. The collection and processing of data is performed securely and prevents their loss or manipulation. Users will be able to verify that their browser is secure if a padlock symbol appears or if the address starts with https instead of http.
Personal data are treated with the level of protection legally required to ensure their security as well as to prevent their alteration, loss, processing or unauthorized access, taking into account the state of the technology, and the user is aware and accepts that Internet security measures have vulnerability risks.
Whenever accessing any personal data, Buraca Roasters undertakes to:
- Store them using legally enforceable security measures of technical and organizational nature to ensure their security, thereby preventing any alteration, loss, treatment or unauthorized access in accordance with the state of the technology at any given time, the nature of the data and the possible risks to which they are exposed to;
- Use the data exclusively for the aforementioned purposes;
Ensure that data are processed only by workers whose intervention is required to provide the service concerned and who are bound by the obligation of secrecy and confidentiality. In the event that information may be disclosed to third parties, the latter should be required to maintain the applicable confidentiality in accordance with the provisions of this document.
Data retention period:
The personal data collected will be kept for the duration of the business relationship established and once concluded they shall be retained for a period of 60 months, which Buraca Roasters considers a reasonable period for such data to be used as evidence in any possible disputes. After this period all data will be destroyed, except those related to invoicing (Name, Address and TIN), which will be retained for a period of 10 years in accordance with the law in force [article 40 of the “Código Comercial” (Commercial Code) and article 123 of the “Código do IRC” (Corporate Income Tax Code)]. This period may be updated by amendment of the law or extended due to any pending judicial process;
Regarding information requests, the personal data collected shall be retained for 12 months after the client´s registration date, a period that Buraca Roasters considers reasonable for maintaining the business relationship with its clients or any proceedings previous to the contract. After this period the data will be destroyed;
EXERCISING THE RIGHTS OF ACCESS, RECTIFICATION AND DELETION OF DATA
In accordance with the provisions of the LDPD and the GDPR, users may exercise their rights of access, rectification, deletion, limitation, opposition and portability at any time upon request by any of the following means:
Address: Parque Industrial Meramar I
Estrada de Polima 673
Edifícios de Escritórios R/C
2785-543 S. Domingos de Rana
Telephone: 800 208 623
Under the terms of the law, the data holder has the right to submit a complaint regarding personal data protection to the competent supervisory authority, the “Comissão Nacional de Proteção de Dados” (National Data Protection Commission) (CNPD).