01. INTRODUCTION

The General Data Protection Regulation (GDPR), which has been in effect since May 25, 2018, aims to regulate the processing of personal data and ensure its protection.

Through the implementation of this regulation, all rules intended to prevent the improper use of personal data are established, applying new control mechanisms to ensure their privacy. This regulation applies to all personal data of natural persons residing in the European Union.

Our Commitment:
As the Data Controller, Cosmética Click will collect only the data that are strictly necessary for the purposes authorized by the data subject. We will not use the data for purposes other than those to which consent has been given. We will only retain the data for the period necessary to provide our services. We also commit not to transfer your data to third parties, except when strictly necessary and authorized by the data subject.

Your Commitment:
In all our communications, we aim to be transparent and clear regarding our data privacy policy. Therefore, taking into account your choice, if you wish to continue receiving communication from us, we will need your consent. At no time do we intend to send spam, but rather to provide information that is relevant and of interest to you.

• CONSENT:
  We intend to communicate only with people who have given their explicit consent. Exceptionally, we may communicate when the communication is essential for the provision of a service.
  You may change your personal data privacy settings at any time in your customer area.

• TRANSPARENCY
  Our goal is to remain transparent in all communications related to our services and information of interest to the data subject.

• RIGHT TO BE FORGOTTEN
  You may delete your personal data at any time; however, you will lose access to your customer account. We commit not to carry out any processing of your data after this request. Please note, however, that the data will be stored for the legally required period in order to comply with legal obligations.

• SECURITY
  Cosmética Click is aware that personal data are extremely confidential and has therefore implemented all possible standards and rules to prevent any potential security breaches that could put your data at risk.

02. RESPONSIBILITY FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA AND APPOINTMENT OF A DATA PROTECTION OFFICER

Your data will be collected and processed by Decada Abstrata Lda., legal entity number 513 691 405, with registered office at Rua Nova da Aldeia n.19, 4535-485 São Paio de Oleiros, hereinafter Cosmética Click. This company is responsible for the processing of personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (hereinafter GDPR). For any matters related to the processing of your personal data, you may contact Cosmética Click through the following means:

Telephone: (+351) 222 427 768 (Call to the national landline network), with customer service hours: Monday to Friday from 9:30 a.m. to 7:00 p.m. and Saturday from 9:30 a.m. to 1:00 p.m.;
Registered mail: Customer Service

DECADA ABSTRATA LDA (NIF 513 691 405)
Rua da Igreja nº109
4535-446 São Paio de Oleiros
Portugal

Cosmética Click has appointed a Data Protection Officer, who may be contacted through the following email address:
Email: suporte@cosmeticaclick.pt

Cosmética Click has appointed a Data Protection Officer, who may be contacted through the following email address:
Email: suporte@cosmeticaclick.pt

03. PROCESSING AND CHANGES

By providing your personal data to Cosmética Click, the customer acknowledges and consents that such data will be processed in accordance with this Privacy Policy and with the rules and principles set out in the respective terms and conditions of the services used. In this regard, and with respect to the processing of personal data, the customer should read this Privacy and Cookies Policy together with the General Terms and Conditions of Use. We inform you that, whenever deemed necessary, we will amend this Privacy and Cookies Policy without the need for any prior authorization.

04. WHAT ARE PERSONAL DATA?

They consist of any information, of any nature and regardless of its format, relating to an identified or identifiable natural person, directly or indirectly (data subject).

05. WHAT PERSONAL DATA ARE COLLECTED AND PROCESSED AND ON WHAT LEGAL BASIS?

The personal data collected by Cosmética Click are those strictly necessary for the purpose of processing, namely the name, address, tax identification number, telephone number or email address of our customers. Other data necessary for the supply of products or services may also be collected. Personal data will be processed based on the express and specific consent previously given. Cosmética Click may also process data that are necessary, in particular, for the performance of a contract or for compliance with legal obligations.

06. WHEN AND FOR WHAT PURPOSE DO WE COLLECT PERSONAL DATA?

The personal data we collect from our customers are requested when making a purchase or order of products or services on our website, as well as when creating a customer account on the Cosmética Click website. Some personal data are mandatory. Cosmética Click will inform you of such obligation. The provision of incorrect or inaccurate data is the sole responsibility of the customer who is the data subject.

The collection and processing of personal data by Cosmética Click have the following purposes (1.) Customer management, (2.) Marketing or Telemarketing, (3.) Profiling.

07. SHARING OR TRANSFER OF PERSONAL DATA

Cosmética Click may use subcontractors for the maintenance, hosting and management of its IT systems and equipment, under the terms permitted by the legislation governing the processing of personal data. These entities are obliged to maintain confidentiality and ensure the security of the personal data to which they have access, and must not use such data for any other purposes, for their own benefit, or relate them to other data they may hold.

Personal data may also be made available to courts and other competent authorities, in strict compliance with the law.
The personal data collected by Cosmética Click will be processed within the territory of the European Union.

08. PERSONAL DATA RETENTION PERIOD

Cosmética Click retains personal data for the retention periods identified above and only for the time necessary, or to comply with legal obligations to which it is subject. In any case, once the relationship with the data subjects has ended, their data will no longer be processed for commercial purposes.

09. SECURITY AND CONFIDENTIALITY OF PERSONAL DATA

Cosmética Click is committed to implementing all necessary precautions to preserve the confidentiality and security of the personal data collected and processed, preventing them from being distorted, damaged, destroyed, or accessed by unauthorized third parties.

Advanced technical and organizational security measures have been developed, especially with regard to information systems. However, we do not control all risks related to the use of the Internet and therefore warn of the existence of possible risks associated with its use and operation, and consequently, with the sharing of personal data through this means.

10. RIGHTS OF THE PERSONAL DATA SUBJECT

In accordance with the legislation in force, the personal data subject has the right to access and rectify their data, as well as the right to request their deletion, to object to their processing, and to obtain restriction or portability, insofar as applicable.

You may also object to your data being used for the purpose of creating your customer profile, in which case you will no longer benefit from personalized offers or services.

The exercise of any of the legally granted rights by the respective data subject must be made by letter (or email) signed by the data subject.

The granted rights may be exercised by direct contact with Cosmética Click through:

• Registered mail: Customer Service

• DECADA ABSTRATA LDA (NIF 513 691 405)
  Rua da Igreja nº109
  4535-446 São Paio de Oleiros
  Portugal

• Email: suporte@cosmeticaclick.pt

The personal data subject should be aware that, in certain cases (for example, due to legal requirements), their request may not be immediately fulfilled. In any case, they will be informed of the measures taken in this regard within a maximum period of one month from the date the request is made.

The personal data subject may also withdraw their consent at any time, when applicable, through the channels made available by Cosmética Click. However, the withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent previously given, nor the subsequent processing of the same data based on another legal basis, such as compliance with a contract or a legal obligation to which Cosmética Click is subject.

11. RIGHT TO LODGE A COMPLAINT

For any questions regarding the collection and processing of data by Cosmética Click, the respective data subject may contact the Data Protection Officer by email at suporte@cosmeticaclick.pt.
You may also lodge a complaint with the National Data Protection Commission (CNPD), R. de São Bento 148, 1200-031 Lisbon, regarding the way Cosmética Click collects and processes personal data.

12. USE OF COOKIES

As previously mentioned, Cosmética Click collects and processes the personal data necessary for the provision and operation of its website, while ensuring adequate levels of security and protection of its users’ personal data. For this purpose, several physical, logical, technical and organizational security measures have been adopted in order to protect personal data against disclosure, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.

Notwithstanding the security measures adopted by Cosmética Click, the user must keep their access codes confidential, not sharing them with third parties, and must also follow recommended security practices, namely with regard to the installation and updating of the necessary security applications, such as antivirus software.

Cosmética Click uses cookies on its website, which are small text files containing relevant information that the access device (computer, mobile phone/smartphone or tablet) loads, through the internet browser, whenever a website is visited by the user.

The cookies used by Cosmética Click help improve the performance and browsing experience of its users, increasing response speed and efficiency and eliminating the need to repeatedly enter the same information. The placement of cookies not only helps the website recognize the user’s device the next time it is visited, but is also essential for its proper functioning. The cookies used on the Cosmética Click website do not collect personal information that allows the user to be identified, storing only generic information, such as the form or place/country of access and the way the user uses the website, among others. Cookies only retain information related to user preferences, and the user may, at any time and through their internet browser, choose to be notified of the receipt of cookies or block their entry into their system.

Please note, however, that refusing the use of cookies may result in the inability to access some areas of the Cosmética Click website.

13. COOKIES USED BY COSMÉTICA CLICK

Cosmética Click uses different types of cookies, as described below:

1. Essential cookies – some cookies are essential to access specific areas of the Cosmética Click website, allowing navigation and use of its applications, such as access to secure areas of the website through login. Without these cookies, the services that require them cannot be provided;

2. Functionality cookies – functionality cookies allow the website to remember the user’s preferences regarding navigation, thus eliminating the need to reconfigure and personalize it each time the user visits;

3. Analytical cookies – these cookies are used to analyze how the user uses the website, allowing us to highlight products or services that may be of interest, and to monitor the website’s performance, identifying which pages are most popular, which linking methods between pages are most effective, or to determine why some pages are receiving error messages. These cookies are used solely for statistical creation and analysis purposes and never collect personal information.

In this way, Cosmética Click can provide a high-quality experience by personalizing its offer and quickly identifying and correcting any issues that may arise.

Regarding their validity, there are also two types of cookies:

1. Persistent cookies – these are cookies that remain stored on access devices for the strictly necessary period of time (according to their expiration date), at the level of the internet browser, and are used whenever the user revisits the Cosmética Click website. In general, they are used to direct navigation according to the user’s interests, allowing Cosmética Click to provide a more personalized service;

2. Session cookies – these are temporary cookies that are generated and remain available until the session is closed. The next time the user accesses their internet browser, these cookies will no longer be stored. The information obtained allows session management, problem identification, and the provision of a better browsing experience.

The user may disable part or all of the cookies at any time. Each browser has its own configuration process for this purpose. Not accepting cookies may prevent the use of some of the functionalities of the Cosmética Click website.

Cosmética Click may also use cookies when opening newsletters/emails for statistical purposes, allowing it to know whether they are opened and to verify clicks through links or advertisements within the newsletter. The user always has the possibility to deactivate the sending of newsletters/emails through the specific option in their footer.

14. Klarna

In order to offer Klarna’s payment methods, at the time of checkout we may transmit your personal data included in the contact form and order details to Klarna during the purchase process, so that Klarna can assess whether you meet the requirements to access its payment methods and adapt those payment methods to your profile. Your personal data are processed in accordance with the provisions of Klarna’s privacy policy.