Privacy policy
Castelbel – Produtos de Beleza, SA, which has its head office at Rua Conselheiro Araújo de Barros, nº 209, 4475-178 nº 209, 4475-178 Castêlo da Maia, may need to collect and process personal data of users of the Castelbel website (www.castelbel.com), which it does under the terms of this Privacy and Data Protection Policy.
1 – Purpose of data processing
Castelbel processes the data of its users and customers for the sole purpose of satisfying orders for products and services made online through its website, so that it can record purchases, send products and any returns and/or exchanges of these products, as well as respond to contact requests via the website and send newsletters to promote its goods and services.
2 – Legal basis for data processing
We may process your personal data in the following circumstances:
Consent
If you give us your express consent, such as when you subscribe to the newsletter on the website and agree to receive information about Castelbel products
or
For the performance of contracts and pre-contractual procedures
When it is necessary to process personal data for the conclusion, execution and management of a contract with Castelbel for the online purchase of products or for the management of contact details, information and requests for the management of billing, collection and payment,
or
Compliance with a legal obligation
When the processing of personal data is necessary for the fulfilment of a legal obligation to which Castelbel is subject, such as compliance with its tax obligations.
4 – Who is responsible for data processing?
The data controller is Castelbel.
5 – Storage period for personal data
Subject to legal provisions or regulations to the contrary, the data will only be kept for the minimum time necessary for the purposes for which it was collected or later processed.
7 – Security procedures
In accordance with European data protection laws, Castelbel has appropriate procedures in place to prevent unauthorised access to and misuse of personal data.
Castelbel uses appropriate business systems and procedures to protect and safeguard personal data provided. Security procedures and technical and physical restrictions on access and use of personal data are used on Castelbel servers. Only authorised personnel are allowed to access personal data during the performance of their duties.
9 – Cookies
We use cookies on the www.castelbel.com website, as set out in our cookie policy, which you can view here.
11 – Changes in the Privacy policy
Our privacy policy may be changed at any time by www.castelbel.com.
If you are already a registered user on the www.castelbel.com website, you will be notified of the changes made to our privacy policy as soon as you access your personal area.
Data collected
Castelbel collects the following personal data for the following purposes:
a) sending newsletters to promote its goods and services: email address;
b) buying and selling of products: name, email address, postal address, telephone number and tax number;
c) contact requests: name, email address.
If Castelbel plans to process personal data later for a purpose other than that for which the data was collected, it will provide the owners of the data with information on the said purpose and provide any other relevant information prior to starting such processing.
3 – Recipient of personal data
Castelbel does not give your information to third parties without obtaining your written consent to do so.
Your personal information will never be shared with third parties without your obtaining your prior approval to do so.
If Castelbel needs to transfer your personal information to other companies so that they can supply a product or service, we guarantee that only the minimum information necessary to meet your request will be shared.
6 – International transfer of data to other entities
The data collected will not be transferred to entities outside the territory of the European Union.
8 – Website
In general, you can browse the website without having to share any information.
a) The use of the website www.castelbel.com does not entail the recording of any personal information unless you decide to register your details in the personal area. If personal information is requested for registration, the reason for this request will be indicated.
b) User data registered on Castelbel servers is always protected by a login name and password.
The www.castelbel.com website also uses an SSL protocol, which means that the exchange of information on the Castelbel site is completely secure.
c) If there are services that involve sending automatic emails, they will only be activated after you have provided prior authorisation. You always have an option available to cancel the subscription.
d) As a further guarantee of your safety, Castelbel does not store your credit or debit card details on its www.castelbel.com.
e) In certain situations, you can find links to other sites on the www.castelbel.com website. The www.castelbel.com website does not share your personal information with these sites and takes no responsibility for their privacy policy. Users must consult the privacy policy of the sites they are browsing.
f) In spite of all efforts, Castelbel cannot guarantee the security of all the information that you transmit, notably due to possible intrusion by hackers.
10 – Personal data ownership rights
Under the terms of applicable law and as holders of Personal Data, users have the following rights:
Right of access – Right to obtain confirmation about what personal data has been processed and information about the same, e.g. the purpose of the processing, storage times, among others.
Right to correct – Right to request the correction of inaccurate personal data or the completion of incomplete data, such as address, TIN, email, telephone numbers, or others.
Right to data erasure – Right to request erasure of your personal data, provided that there are no valid grounds for it to be stored.
Right to portability -Right to receive the data you have provided us in a current, automatically read digital format or to request the direct transfer of your data to another entity, which will then be responsible for your personal data.
Right to withdraw consent or right to oppose – Right to object or withdraw consent to data processing at any time, for example in the case of data processing for marketing purposes, provided that no legitimate interests prevail over your interests, rights and freedoms, such as defending a right in a lawsuit.
Right to limit – Right to request limitation of the processing of your personal data, in the form of (i) suspension of processing or (ii) limitation of the scope of processing to certain purposes or data categories.
The user has the right to presente a complaint to the Data Protection National Comission.
In order to exercise those rights or obtain clarification related to our Privacy or Cookies Policy, please contact Castelbel in writing at the abovementioned address or email shoponline@castelbel.com.
Castelbel will respond within a reasonable time, estimated to be no longer than thirty days.