Privacy and Data Protection Policy
We care about you and the privacy of your personal data. It is essential and necessary for us to provide our users with a service that is as secure and confidential as possible, safeguarding the privacy of their communications and personal data. This privacy policy sets out how we collect, process and use personal data, as well as the security safeguards adopted in this processing for both services we provide.
Please read this Privacy Policy carefully, as accessing our websites and providing your personal data implies knowledge and acceptance of the conditions covered. In other words, by providing your personal data, you authorise the collection, use and disclosure of such data in accordance with the rules set out in this policy.
The DaFábrica4you content email service provided to you (hereinafter 'the user') consists of the daily sending of updated content from the DaFábrica4you.pt website.
The advertising service associated with DaFábrica4you provided to you (hereinafter 'the user') consists of the daily sending of exclusive offers that our partners make available to our users.
Data controller
The data controller is the registered trademark DAFÁBRICA4YOU, registered under number 673549 with the INPI. We have created this privacy policy to demonstrate our commitment and respect for the rules of privacy and protection of personal data of users and subscribers of the DaFábrica4you.pt website.
In this case, the data owner is also the data controller. In other words, by subscribing to either the content service or the advertising service of DaFábrica4you, you are consenting to and authorising the processing of your data exclusively by the company that owns the registered trademark DAFÁBRICA4YOU.
Data collection
DFÁBRICA4YOU collects certain personal data from its subscribers, such as: email address, IP address and, when justified, we also collect name, postcode, gender, telephone number and demographic data on lifestyle.
This collection is done through online forms, questionnaires, product and service promotions, competitions, either through DAFÁBRICA4YOU's commercial partners, through the company's websites, or from commercially available databases.
Your data is always collected with your prior consent, clearly indicating the purpose for which it is intended.
The data collected is adequate, relevant and not excessive in relation to the scope, purpose and services specified, explicit and legitimate on the part of DaFábrica4you.
Purpose and legal basis for data processing
You can browse freely on any DaFábrica4you.pt website without having to provide any personal data.
The purpose of data processing for subscribers registered to the DaFábrica4you newsletter is exclusively to send them newsletters with information about environmental issues and products we produce, as well as promotional campaigns and prizes from the dafabrica4you.pt website, i.e. within the scope of the service for which the data collection itself is intended.
In any of the cases described above, data processing is always carried out by the DAFÁBRICA4YOU brand. Your data will never be transferred to third parties for any purpose. Some of our partners wish to communicate campaigns from major brands to our subscribers, thus using our marketing service, and all data processing for this purpose is always carried out by DAFÁBRICA4YOU and only the promoted content is external.
The processing of subscribers' data is only carried out with their clear, free and informed consent, through a proactive action aimed at obtaining such consent.
What are your rights as a data subject?
As a data subject, you have the following rights regarding the processing of your personal data:
- Right of access: whenever you request it, you can obtain confirmation as to whether your personal data is being processed by the Company and access information about it, such as the purposes of the processing, the storage periods, among others;
- Right to rectification: whenever you consider that your personal data is incomplete or inaccurate, you may request its rectification or completion;
- Right to withdraw your consent: In cases where the processing of data is based on your consent, you may withdraw your consent at any time.
- Right to erasure: you may request that your personal data be erased when one of the following situations applies: (i) the personal data is no longer necessary for the purpose for which it was collected or processed; (ii) you withdraw the consent on which the data processing is based and there is no other legal basis for it; (iii) you object to the processing of the data and there are no overriding legitimate interests, to be assessed on a case-by-case basis, that justify the processing; (iv) the personal data has been processed unlawfully; (v) the personal data must be erased in accordance with a legal obligation; or (v) the personal data has been collected in the context of the provision of information society services;
- Right to restriction of processing: you may request the restriction of the processing of your personal data in the following cases: (i) if you contest the accuracy of your personal data for a period enabling the Company to verify its accuracy; (ii) if you consider that the processing is unlawful; (iii) if the Company no longer needs the personal data for the purposes of the processing, but the data are required for the establishment, exercise or defence of a right in legal proceedings; or (iii) if you have objected to the processing and there is no overriding legitimate interest of the Company;
- Right to portability: you may request that the Company provide you with the personal data you have provided in a structured, commonly used and machine-readable format. You also have the right to request that the Company transmit this data to another data controller, provided that this is technically possible. Please note that the right to portability only applies in the following cases: (i) when the processing is based on express consent or on the performance of a contract; and (ii) when the processing in question is carried out by automated means;
- Right not to be subject to solely automated individual decisions: although we may profile you in order to carry out targeted marketing campaigns, in principle we will not make decisions that affect you based on solely automated processes;
8. Right to lodge complaints with the supervisory authority: If you wish to lodge a complaint regarding matters related to the processing of your personal data, you may do so with the National Data Protection Commission, the competent supervisory authority in Portugal. For more information, please visit www.cnpd.pt.
Location and data controller
Personal data may be stored in an unidentifiable or aggregated form.
The DPO (Data Protection Officer) responsible for the storage, management, collection and safekeeping of data is José Ribeiro, whose email address is jose.salgado.ribeiro@gmail.com
Data storage security
DAFÁBRICA4YOU invests significantly in maintaining the security of all its websites and information systems in order to prevent access to your data by anyone who is not authorised to do so. However, we all know that the internet is not a 100% secure medium and therefore DAFÁBRICA4YOU guarantees, to the best of its ability, the maximum protection of your personal data.
Data retention period
Any personal data will be completely deleted within a maximum period of two years after the last contact.
Access, rectification or opposition to data processing
The user may exercise their rights of access, rectification, cancellation and opposition with regard to their personal data. These rights may be exercised by any means the user deems appropriate:
- a) Through the service cancellation links present in all communications sent via email;
- b) By email:
- Newsletters: informacoes@dafabrica4you.pt .com with the subject line 'remove';
- d) By telephone: + 351 91 4746637
Rejection of data processing for marketing purposes
You may, at any time, object to the processing of your data for marketing/advertising purposes by:
a) Accessing the area for rectifying your data and deselecting the option to receive email marketing campaigns;
b) Using the 'unsubscribe' link in the service present in all communications sent by email.
Disclosure of data to third parties
Your data will never be disclosed to third parties for any purpose.
Data processing is always carried out by DAFÁBRICA4YOU
Some of our partners wish to communicate campaigns from major brands to our subscribers, using our marketing service. All data processing for this purpose is always carried out by DAFÁBRICA4YOU and only the content will be external.
Other websites and New Adventures' limits of liability
DAFÁBRICA4YOU websites may contain links to other websites that are outside the control of DAFÁBRICA4YOU and are not covered by this privacy policy. If you access other websites using links on the dafabrica4you.pt website, you should be aware that these websites may request and collect personal data in accordance with their own privacy policy, which may differ from ours. It is also important to note that the dafabrica4you.pt websites may occasionally provide links to other websites created and managed by other organisations. Since these websites are not our property, we cannot guarantee their quality, suitability or operation, and our relationship with these websites does not imply endorsement of the products and services sold or advertised, nor of any information on the websites in question.
Therefore, we strongly recommend that you pay close attention and take into account that, under no circumstances, DAFÁBRICA4YOU will be responsible or liable, directly or indirectly, for any damage or loss caused or allegedly caused to the user or third parties regarding the use of personal data by other companies without proper authorisation.
We recommend that you always consult the respective Privacy Policy of all websites you visit.
Transfer of data
In the normal course of DAFÁBRICA4YOU's business, changes may occur in the level of ownership and control of associated companies, subsidiaries or affiliates or possibly business areas of the group. In any of these situations, personal assets may be considered transferable, subject to compliance with the requirements and authorisations legally required for the transfer. The same will happen if DAFÁBRICA4YOU or any part or sector of activity or the companies that make up the group, or associated, subsidiary or affiliated companies, are purchased, in which case your personal data will be part of the assets to be transferred, naturally complying with the legally required requirements and authorisations for their transfer.
If DAFÁBRICA4YOU or any part or sector of activity, or the companies that form the group, or associated, subsidiary or affiliated companies are purchased, your personal data will be part of the assets to be transferred, naturally complying with the legally required requirements and authorisations for their transmission.
Changes to the Privacy Policy
DAFÁBRICA4YOU reserves the right to update or revise the privacy policy indicated here at any time to comply with possible legislative changes and other restrictions.
The privacy policy in force (with any changes that may occur) can be consulted at any time in this same space.
Acceptance of the Privacy Policy
It is understood that the user accepts the terms of this privacy policy when providing their data on any of the websites owned by DAFÁBRICA4YOU. Upon completion of the consent forms, we assume that the user authorises the automated processing and use of data in accordance with the privacy policy described herein.