Privacy Policy
1. Preamble
The present privacy policy is established between BAN & COST LDA. and its respective customers, hereinafter referred to as 'USERS,' and aims to protect the privacy and security of personal data while acting as customers of the company and simultaneously users of the website, hereinafter referred to as the 'SITE.
In this context, it has been prepared in accordance with Regulation 2016/679 of the European Parliament and of the Council, of April 27, 2016 (EU), the General Data Protection Regulation (GDPR), and other relevant legislation on personal data protection, seeking to adhere to best practices in terms of security and protection of personal data.
In this framework, the processing of personal data covered by this policy refers to the personal data of users of the SITE (website) under the responsibility of the company BAN & COST LDA., in the process of acquiring goods and services as customers.
The domain everban.pt and its respective online store are owned by BAN & COST LDA., which is responsible for the processing of personal data.
For the purpose of providing and acquiring services, personal data will be requested on the respective SITE with the exclusive purpose of processing the order.
The mentioned data will be the minimum necessary, related to the contact form (name, email, phone) and the fulfillment (processing) of orders (name, surname, taxpayer identification number, address, email, and phone number).
The non-provision of data, as requested, for the purpose of acquiring the good or service, will render the respective contracting impossible.
Users will also be asked for their consent to receive a commercial newsletter, for advertising purposes, and other information related to the products and services offered by BAN & COST LDA.
2. Purpose of Data Processing.
- Marketing and Promotion of Products and Services;
- Commercialization of Products;
- Pre-contractual and Contractual Proceedings;
- Acquisition of Goods and Services;
- Billing Management;
- Collections and Payments.
3. Duration of Data Processing
The duration of the processing of personal data provided by clients, USERS of the SITE, for the purpose of acquisitions, billing, or collections, will be governed by applicable legislation, maintained for the strictly necessary time for the purpose of its collection.
After the commercial relationship is terminated, or if the user withdraws consent, the data will be kept for the necessary purposes and time, after which they will be deleted, without prejudice to any mandatory regulations in force at that time.
4. Navigability vs Cookie Policy
In order to clarify, in a simple and transparent manner, how information is collected during navigation on the respective SITE, we refer to the reading of the cookie policy in a general sense.
Cookies are small text files with fragments of information downloaded and stored on the user's device during visits to certain websites.
They can be temporary, automatically deleted as soon as the browser is closed, or they can persist until a predefined expiration date.
Their use is a common practice in accessing websites, and various browsers allow each user to either refuse or accept their use, as well as delete those that have been created in the meantime.
There are various types of cookies, based on validity and type, and their use is aimed at improving the browsing experience to make it simpler and faster.
In practical terms, USERS can choose to fully or partially use the types of cookies generated, internally or externally. However, it should be noted that some sites may be displayed incorrectly if users choose not to activate cookies.
5. User Rights
USERS, as data subjects and the object of data processing, have rights in accordance with this privacy policy and the purpose of the collected data processing, with some of paramount importance highlighted.
Right of access, which consists of obtaining information about one's own data, the purpose of processing, its nature, the storage period, and the origin.
Right to erasure when the data is no longer necessary for the purpose for which it was collected or when the user, on their own initiative, withdraws consent.
Rights enshrined in the GDPR, EU legislation, and other mandatory provisions regarding the processing of personal data to which the domain owner is bound.
6. Final Provisions
In order to safeguard the aforementioned rights inherent to SITE USERS, BAN & COSTA, LDA. has implemented the measures required by Article 32(1) of the GDPR 'Security of Processing,' aiming to achieve a level of security appropriate to the risk:
a) The pseudonymization and encryption of personal data;
b) The ability to ensure the ongoing confidentiality, integrity, availability, and resilience of processing systems and services;
c) The ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident;
d) A process for regularly testing, assessing, and evaluating the effectiveness of technical and organizational measures to ensure the security of processing.
In the event that USERS feel their legitimate interests are compromised during the processing of personal data, they have the right to file a complaint with the competent authorities.
They can also assert the above-described rights through the following contacts, allowing BAN & COST LDA. to act in a timely manner and within the legally stipulated deadlines regarding data protection, to cease any harm or non-compliance, if applicable:
- Email: adm@everban.pt
- By Postal Mail: BAN & COST LDA. | Everban - Bath Furniture | Rua Cancelas, 51 – Armazém C, 4425-445 São Pedro Fins
- Phone: 223 197 430
