Gardi is committed to safeguarding your privacy. Please contact us if you have any questions or problems regarding the use of your personal data and we will be happy to help you. By using this website and/or our services, you agree to the processing of your personal data as described in this Privacy Policy.
Contents
- Definitions used in this policy
- Data protection principles we follow
- What rights do you have with regard to your personal data?
- What personal data we collect about you
- How we use your personal data
- Who else has access to your personal data
- How we protect your data
- Contact information
Definitions used in this policy
Personal Data – any information relating to an identified or identifiable natural person.
Processing – any operation or set of operations which is performed on Personal Data or on sets of Personal Data.
Data Subject – a natural person whose personal data is being processed.
Child – a natural person under the age of 16.
Us – Gardi
Data protection principles we follow
We promise to adhere to the following data protection principles:
- Processing is legal, fair and transparent. Our processing activities are carried out for legal reasons. We always consider your rights before processing personal data. We will provide information on processing upon request.
- Processing is limited to the purpose. Our Processing activities are tailored to the purpose for which the Personal Data was collected.
- Processing is done with minimal data. We only collect and process the minimum amount of personal data necessary for any purpose.
- Processing is limited by a period of time. We do not store your personal data for longer than necessary.
- We will do our best to ensure the accuracy of the data.
- We will do our best to guarantee the integrity and confidentiality of the data.
Data subjects’ rights
The data subject has the following rights:
- Right to information – means that you have the right to know whether your Personal Data is being processed; what data is collected, where it is obtained from, why and by whom it is processed.
- Right of access – meaning that you have the right to access the data collected from/about you. This includes your right to request and obtain a copy of your personal data collected.
- Right to rectification – which means that you have the right to request the rectification or deletion of your Personal Data that is inaccurate or incomplete.
- Right to erasure – which means that, in certain circumstances, you can request that your personal data be deleted from our records.
- Right to restrict processing – i.e. when certain conditions apply, you have the right to restrict the processing of your personal data.
- Right to object to processing – this means that in certain cases you have the right to object to the processing of your personal data, for example in the case of direct marketing.
- Right to object to automated Processing – meaning that you have the right to object to automated Processing, including profiling; and not to be subject to a decision based solely on automated Processing. This right can be exercised whenever there is a result of profiling that produces legal effects relating to or significantly affecting your person.
- Right to data portability – you have the right to obtain your Personal Data in a machine-readable format or, if feasible, as a direct transfer from one Processor to another.
- Right to lodge a complaint – in the event that we refuse your request under the Rights of Access, we will provide you with a reason why. If you are not satisfied with the way your order has been handled, please contact us.
- Right to help from the supervisory authority – which means that you have the right to receive help from a supervisory authority and the right to other legal remedies, such as claiming damages.
- Right to withdraw consent – you have the right to withdraw any consent to the processing of your personal data.
Data we have gathered
Information you have provided to us This can be your e-mail address, name, address, telephone number, etc – mainly information necessary to deliver a product/service, participation in an event or to improve the visitor’s experience with us. We save the information you provide so that you can comment or carry out other activities on the site. This information includes, for example, your name and e-mail address. Information automatically collected about you This includes information that is automatically stored by cookies and other session tools. For example, your IP address, your purchase history (if any), etc. This information is used to improve the customer experience. When you use our services or visit the content of our website, your activities may be recorded. Information from our partnersWe collect information from our trusted partners with confirmation that they have legal grounds to share this information with us. This is information that you have provided directly to them or that they have collected about you for other legal reasons. See the list of our partners here. Publicly available information We may collect information about you that is publicly available.
How we use your personal data
We use your personal data to:
- provide you with our service. This includes, for example, registering your account/order; providing other products and services you have requested; providing promotional items at your request and communicating with you regarding such products, services and events; communicating and interacting with you; and notifying you of changes to any services.
- improve the customer experience;
- to fulfill a legal or contractual obligation;
We use your personal data for legitimate reasons and/or with your consent. In connection with entering into a contract or fulfilling contractual obligations, we process your personal data for the following purposes:
- to identify it;
- to provide you with a service or send/offer you a product;
- to communicate in the event of sales or invoicing;
Based on legitimate interest, we process your personal data for the following purposes:
- to send you personalized offers or communications (from us and/or our carefully selected partners);
- manage and analyze our customer base (purchasing behavior and history) in order to improve the quality, variety and availability of products / services offered / provided;
- conducting satisfaction surveys;
- for other purposes for which we have requested your consent;
With your consent, we process your personal data for the following purposes:
- send newsletters and campaign offers (from us and/or our carefully selected partners);
- for other purposes for which we have requested your consent;
We process your personal data to fulfill obligations arising from the law and/or to use your personal data for actions provided for by law. We reserve the right to anonymize the Personal Data collected and to use such data. We will use data outside the scope of this Policy only when it is anonymized. We will store your billing information and other information collected about you for as long as necessary for accounting purposes or other obligations under the law, but no longer than 10 years. We may process your Personal Data for additional purposes that are not mentioned here, but are compatible with the original purpose for which the data was collected. To do this, we ensure that:
- the link between the purposes, context and nature of the Personal Data is suitable for further Processing;
- additional Processing will not prejudice your interests and
- there will be an appropriate safeguard by the Processor.
We will inform you of any further processing and purposes.
Who else can access your personal data
We do not share your personal data with strangers. Personal Data about you is, in some cases, provided to our trusted partners in order to make the service/access available to you or to improve the customer experience. We will share your data with: Connected third-party partners:
- Google, LLC
- Microsoft Corporation
- Ifthenpay, Lda
We only work with processing partners who can guarantee an adequate level of protection for your personal data. We will disclose your personal data to third parties or public officials only when legally obliged to do so. We may disclose your Personal Data to third parties if you have consented or if there are other legal grounds for doing so.
How we protect your data
We do our best to keep your personal data safe. We use secure protocols for communication and data transfer (such as HTTPS). We use anonymization and pseudonomization where appropriate. We keep our systems up to date against possible vulnerabilities and attacks. Although we try our best, we cannot guarantee the security of the information. However, we promise to notify the competent authorities of data breaches. We will also notify you if there is a threat to your rights or interests. We will do everything reasonably possible to prevent security breaches and to assist the authorities if breaches occur. If you have an account with us, please note that you need to keep your username and password secret and secure.
Children
We do not intentionally collect or gather information from children. We don’t target children in our services. We use Google Analytics to measure traffic to our website. Google has its own privacy policy which you can review here. If you want to disable tracking by Google Analytics, visit the Google Analytics opt-out page.
Contact information
Privacy Concerns
Write an e-mail to general [at] gardi.pt with the subject Privacy Concerns indicating the URL of the site and use the message to explain your concerns in as much detail as possible.
Supervisory Body
CNPD
geral@cnpd.pt
+351 21 392 84 00
Changes to this privacy policy
We reserve the right to make changes to this Privacy Policy. Last modified on December 27, 2024.
Alternative Dispute Resolution
In the event of a dispute, the consumer can turn to an Alternative Dispute Resolution Body: CACCRAM, 291508349, www.madeira.gov.pt/cacc. More information on the Consumer Portal www.consumidor.pt.