Privacy Policy

This Policy is intended to inform Clients/Users of the general rules for processing personal data, which are collected and processed in strict compliance with the provisions of the personal data protection legislation in force - Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).

Regra Crucial, Unip. Lda with VAT number 509 872 328 is committed to protecting the personal data of its customers and users of the landing page, website and/or online store, and to this end has drawn up this Privacy Policy with the aim of making known its commitment and respect for the rules on privacy and the protection of personal data that we collect and process in compliance with the GDPR.

Regra Crucial, Unip. Lda, hereinafter referred to as Catyn.com, respects the best practices in the field of security and protection of personal data, having for this purpose taken the necessary technical and organizational measures in order to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent and limited to the authorized purposes.

WHAT IS PERSONAL DATA AND WHAT DATA DO WE COLLECT?

Personal data is any information of any nature, regardless of its medium, including sound and image, relating to an identified or identifiable natural person; for example, name, address, e-mail address, etc.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

Catyn.com, within the scope of its activities, processes the personal data necessary to provide services and/or supply products, processing data such as name, address, telephone number and email address, in accordance with more detailed information made available to the holders of personal data.

Without prejudice to compliance with legal rules on the retention and transmission of data for the purposes of investigation, detection, prosecution of serious crimes, as well as other processing to which it is legally obliged, the data provided will be processed by Catyn.com to the extent that it is necessary for the respective provision of services.

Personal data, traffic data, geographic location data and profile data are also processed for marketing purposes or to disseminate offers of goods or services from Catyn.com, if the data subject has authorized this.

Catyn.com collects your personal data, namely by telephone, in writing or through its website, guaranteeing, whenever necessary, the prior consent of the holder of the personal data.

The personal data collected may be processed by computer, in an automated or non-automated way, guaranteeing in all cases strict compliance with personal data protection legislation, being stored in specific databases created for this purpose and, under no circumstances, will the data collected be used for any purpose other than that for which it was collected or the consent of the data subject was given.

RIGHTS OF THE HOLDER

As the data subject affected by the data processing activity, you have the following rights in relation to your personal data, in accordance with Article 15 et seq. of the GDPR:

Right of access - The holder of personal data has the right to obtain confirmation from Catyn.com as to whether or not data concerning them is being processed and, where appropriate, to access their personal data.

Right to rectification - The holder of personal data has the right to obtain from Catyn.com the rectification of incomplete or incorrect data concerning them.

Right to be forgotten - The holder of the personal data has the right to ask Catyn.com to delete the personal data when one of the following reasons applies:

- The personal data is no longer necessary for the purpose for which it was collected or processed;

- The data subject has withdrawn consent for the processing of the data and there is no other basis for such processing.

The same cannot be applied if it is necessary to comply with a legal obligation.

Right to object - You can object to the processing of your personal data whenever it is processed for direct marketing purposes.

As the data subject, you also have the right to withdraw your consent to the processing of your data at any time. This change of consent does not compromise the lawfulness of the processing carried out on the basis of the consent previously given.

When it is technically feasible, the Customer may request the portability of their data to another controller, which will only be kept for the exercise or defense of claims.

Also for this purpose (the sole purpose of declaring, exercising or defending a right in legal proceedings), data may be stored when some of the rights identified above have been exercised.

In the event that you wish to exercise these rights or for any other additional question regarding data protection and processing, you should contact the person responsible in writing using the contact details below. You will always be asked for proof of the data subject's identity.

In addition, if at any time you feel that your rights have not been properly protected, you can lodge a complaint with the National Data Protection Commission.

Further information can be found on the Commission's website: https://www.cnpd.pt/.

WHO IS RESPONSIBLE FOR DATA PROCESSING?

The entity responsible for processing personal data is Catyn.com, which determines the purposes and means of processing it.

To this end, if the owner of the personal data needs to contact the data controller, they can do so through the means and contacts indicated below:

- legal@catyn.com

WHO IS RESPONSIBLE FOR DATA PROTECTION?

The Data Protection Officer ensures, among other things, that data processing complies with the legislation in force, verifying compliance with this Data Protection Policy and defining clear rules for the processing of personal data, ensuring that all those who entrust it with the processing of their personal data are aware of how Catyn.com processes it and what rights they have in this regard.

Therefore, the holders of personal data, if they so wish, can address a communication to the Data Protection Officer, regarding matters related to the processing of personal data, using the following contacts for this purpose:

- legal@catyn.com

- Helder Carvalho

WHAT ARE THE PURPOSES FOR PROCESSING PERSONAL DATA AND THE LEGAL GROUNDS FOR DOING SO?

We use your personal data to provide you with access to our website as a user, to generate usage statistics, to improve and develop our website, to provide you with services, to respond to your requests and messages, to send you our newsletter if you have subscribed to it and to analyze your data in aggregate form for the purpose of analyzing our business.

In compliance with Article 6 of the GDPR, your data will be collected and processed in the following situations:

- The data subject has given their consent to the processing of their personal data for one or more specific purposes;

- The processing is necessary for the performance of a contract to which the data subject is a party, or for pre-contractual steps at the request of the data subject;

- Processing is necessary for compliance with a legal obligation to which the controller is subject;

- Processing is necessary for the protection of the vital interests of the data subject or of another natural person;

- Processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where the interests or fundamental rights and freedoms of the data subject which require the protection of personal data prevail, in particular where the data subject is a child.

FOR HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The length of time for which personal data is stored and retained varies according to the purpose for which the information is processed.

In fact, there are legal requirements that oblige data to be kept for a minimum period of time. Therefore, and whenever there is no specific legal requirement, the data will only be stored and kept for the minimum period necessary for the pursuit of the purposes for which it was collected or subsequently processed, under the terms defined by law.

UNDER WHAT CIRCUMSTANCES IS DATA COMMUNICATED TO OTHER ENTITIES OR UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?

In the course of its business, Catyn.com may use third parties to provide certain services. Sometimes, the provision of these services implies access by these entities to the personal data of Customers/Users. When this happens, Catyn.com takes the appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees at this level, which is duly enshrined and contractually safeguarded.

Thus, any entity subcontracted by Catyn.com will process the personal data of our Clients/Users in the name and on behalf of Catyn.com, adopting the necessary technical and organizational measures in order to protect personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access and against any other form of unlawful processing.

In any case, Catyn.com remains responsible for the personal data made available to it.

The provision of certain services by Catyn.com may involve the transfer of your data outside Portugal, including outside the European Union or to International Organizations.

In such cases, Catyn.com will strictly comply with the applicable legal provisions, in particular as regards determining the suitability of the destination country(ies) with regard to the protection of personal data and the requirements applicable to such transfers, including, where applicable, the conclusion of appropriate contractual instruments that guarantee and respect the legal requirements in force.