Privacy and Personal Data Protection Policy

WHO ARE WE?

Bairro Comercial de Castelo Branco aims to promote the transformation of local commerce in the municipality of Castelo Branco, fostering a digital transition that strengthens and enhances the community. 

By integrating technology strategically, Bairro Comercial de Castelo Branco aims to boost the municipality’s economy and promote the region’s cultural and social heritage.

WHY THIS PRIVACY AND PERSONAL DATA PROTECTION POLICY?

The purpose of this Policy is to inform Users of the Bairro Comercial de Castelo Branco platform, managed by the Municipality of Castelo Branco, of the general rules on privacy and the processing of personal data, which are collected and processed in strict compliance with the provisions of the personal data protection legislation in force at all times, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).

Bairro Comercial de Castelo Branco respects the best practices in the field of security and protection of personal data and, to this end, has taken the necessary technical and organizational measures in order to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent and limited to the authorized purposes.

Bairro Comercial de Castelo Branco is committed to the protection and confidentiality of personal data and has adopted the measures it deems appropriate to ensure the accuracy, integrity and confidentiality of personal data, as well as all the other rights of the respective data subjects.

WHAT DOES THIS POLICY COVER?

This Policy applies exclusively to the collection and processing of personal data for which Bairro Comercial de Castelo Branco is responsible, within the scope of using the platform.

WHAT IS PERSONAL DATA?

Personal data is any information of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person.

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to a name, an identification number, location data, an electronic identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity.

WHAT DOES THE PROCESSING OF PERSONAL DATA CONSIST OF?

The processing of personal data consists of an operation or set of operations carried out on personal data or sets of personal data, whether or not by automated means, namely collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, restriction, erasure or destruction.

WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?

The entity responsible for processing personal data is Bairro Comercial de Castelo Branco, which determines the purposes and means of processing it.

To this end, if the owner of the personal data needs to contact the data controller, they can do so through the following means and contacts indicated:
bairros.comerciais@cm-castelobranco.pt

WHAT TYPE OF PERSONAL DATA ARE PROCESSED?

Bairro Comercial de Castelo Branco, within the scope of making the platform available, processes the personal data necessary for the platform to function, processing data such as:

• Identification Data: Name, surname, e-mail address, telephone number.

Personal data may also be processed for marketing purposes if the data subject has authorized this. If the data subject has given their prior consent, this can be withdrawn at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given.

WHEN AND HOW DO WE COLLECT YOUR PERSONAL DATA?

Bairro Comercial de Castelo Branco collects your personal data, namely by telephone, in writing, through its website, guaranteeing, whenever necessary, the prior consent of the holder of the personal data.

Some personal data is essential for the performance of the contract, without which Bairro Comercial de Castelo Branco will not be able to provide the product or service in question.

If the holder of the personal data is not a Customer/User of Bairro Comercial de Castelo Branco, their personal data will only be processed when it is made available, in which case the rules of this Policy will apply.

The personal data collected may be processed by computer and in an automated or non-automated way, in all cases guaranteeing strict compliance with personal data protection legislation, being stored in specific databases created for this purpose and, under no circumstances, will the data collected be used for any purpose other than that for which it was collected or consent was given by the data subject.

WHO HAS ACCESS TO PERSONAL DATA?

Platform management team: The platform management team has access to merchants’ and buyers’ data, the processing of which is limited to the management of the platform. 

Sellers: Sellers have access to buyers’ information, but only to the extent necessary to process orders and provide services.

Without prejudice to the recipients indicated throughout this Policy, Bairro Comercial de Castelo Branco may communicate Users’ personal data for the purpose of complying with legal obligations, namely to police, judicial, tax and regulatory bodies.

WHAT ARE THE PURPOSES FOR PROCESSING PERSONAL DATA AND THE LEGAL GROUNDS FOR DOING SO?

In general, the personal data collected is based on and intended for the management of the contractual and commercial relationship, the provision of the contracted services, the adaptation of the services to the needs and interests of the User, namely for the purposes of access to specific functionalities, information and marketing actions.

In addition, personal data may also be processed for the purposes of complying with legal obligations.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The period of time for which personal data is stored and retained varies according to the purpose for which the information is processed.

In fact, there are legal requirements that oblige us to keep data for a minimum period of time. Therefore, and whenever there is no specific legal requirement, the data will only be stored and kept for the minimum period necessary for the pursuit of the purposes for which it was collected or subsequently processed, under the terms defined by law.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

As holders of personal data, Users are guaranteed, at any time, the right to access, rectify, update, limit and erase their personal data (except for data that is indispensable to the provision of services by Bairro Comercial de Castelo Branco or to comply with legal obligations to which the controller is subject), the right to object to its use for commercial purposes by Bairro Comercial de Castelo Branco and to withdraw consent, without this compromising the lawfulness of the processing carried out under that consent, as well as the right to data portability.

HOW CAN YOU ACCESS, RECTIFY, UPDATE, LIMIT, ERASE, OPPOSE THE PROCESSING OF YOUR PERSONAL DATA, OR WITHDRAW CONSENT?

Without prejudice to the provisions of the GDPR, the holder of the personal data may do so, directly or by written request, addressed to the respective Data Controller, through the contacts provided for this purpose in this document, as well as other contacts provided by Bairro Comercial de Castelo Branco.

HOW CAN YOU OBJECT TO RECEIVING CONTACTS FOR MARKETING PURPOSES?

Bairro Comercial de Castelo Branco may promote marketing activities with its Users, namely by telephone, e-mail, SMS or any other electronic communications service, if the holder of the personal data has given their consent.

If the data subject does not wish to continue receiving these communications, they can withdraw their consent to the use of their data for marketing purposes at any time.

HOW CAN YOU COMPLAIN?

Without prejudice to being able to submit complaints directly to Bairro Comercial de Castelo Branco through the contacts made available for this purpose, the User can complain directly to the Supervisory Authority, which is the National Data Protection Commission (CNPD), using the contacts made available by this entity for this purpose.

WHAT ARE THE MEASURES TAKEN BY Bairro Comercial de Castelo Branco TO ENSURE THE SECURITY OF YOUR PERSONAL DATA?

Bairro Comercial de Castelo Branco is committed to guaranteeing the protection of the security of the personal data made available to it, and has approved and implemented strict rules in this regard. Compliance with these rules is an obligation of all those who legally access them.

Bearing in mind Bairro Comercial de Castelo Branco’s concern and commitment to protecting personal data, various technical and organizational security measures have been adopted in order to protect the personal data made available to it from unauthorized disclosure, loss, misuse, alteration, processing or access, as well as from any other form of unlawful processing.

In addition, third parties who, in the context of the provision of services, process the personal data of the Client/User in the name and on behalf of Bairro Comercial de Castelo Branco, are obliged, in writing, to implement appropriate technical and security measures which, at all times, meet the requirements of the legislation in force and ensure the protection of the rights of the data subject (in particular, the protection of privacy and personal data).

UNDER WHAT CIRCUMSTANCES IS DATA COMMUNICATED TO OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)?

Bairro Comercial de Castelo Branco, as part of its activity, may use third parties to provide certain services. Sometimes, the provision of these services implies access by these entities to Users’ personal data. When this is the case, Bairro Comercial de Castelo Branco takes the appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees at this level, which is duly enshrined and contractually safeguarded between Bairro Comercial de Castelo Branco and the third party(ies).

Thus, any entity subcontracted by Bairro Comercial de Castelo Branco will process the Users’ personal data in the name and on behalf of Bairro Comercial de Castelo Branco and will adopt the necessary technical and organizational measures to protect the personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access and against any other form of unlawful processing.

In any case, Bairro Comercial de Castelo Branco remains responsible for the personal data made available to it.

UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?

The provision of certain services by Bairro Comercial de Castelo Branco may involve the transfer of your data outside Portugal, including outside the European Union or to International Organizations.

In such a case, Bairro Comercial de Castelo Branco will strictly comply with the applicable legal provisions, namely with regard to determining the suitability of the destination country(ies) with regard to the protection of personal data and the requirements applicable to such transfers, including, where applicable, the conclusion of appropriate contractual instruments that guarantee and respect the legal requirements in force.

HOW CAN YOU FIND OUT ABOUT ANY CHANGES TO THE PERSONAL DATA PROTECTION POLICY?

Bairro Comercial de Castelo Branco reserves the right to make adjustments or changes to this Personal Data Protection Policy at any time.

COOKIE POLICY

WHAT ARE COOKIES?

“Cookies” are small software tags that are stored on devices (computer, tablet, smartphone, etc.) with browser access when visiting a website. These tags only retain information related to preferences and therefore do not include personal data.

WHAT ARE COOKIES USED FOR?

Cookies are used to help determine the usefulness, interest and number of uses of websites, allowing for faster and more efficient browsing, eliminating the need to repeatedly enter the same information.

WHAT KIND OF COOKIES ARE THERE?

There are two groups of cookies that can be used:

• Permanent cookies – these are cookies that are stored in the browser on access devices (PC, mobile and tablet) and are used whenever you visit the Bairro Comercial de Castelo Branco website again. They are generally used to direct browsing to the user’s interests, allowing us to provide a more personalized service.
• Session cookies – these are temporary cookies that remain in the browser’s cookie file until you leave the website. The information obtained by these cookies is used to analyze web traffic patterns, allowing us to identify problems and provide a better browsing experience.

WHAT DO WE USE COOKIES FOR?

Strictly necessary cookies – These allow you to browse the website and use applications, as well as access secure areas of the website. Without these cookies, necessary services cannot be provided.

Analytical cookies – These are used anonymously for the purpose of creating and analyzing statistics in order to improve the functioning of the website.

HOW CAN YOU MANAGE COOKIES?

All browsers allow the user to accept, refuse or delete cookies, and also inform the user whenever a cookie is received, namely by selecting the appropriate settings in their browser. The user can configure cookies in the “options” or “preferences” menu of their browser.

It should be noted, however, that disabling cookies may prevent some web services from working properly, partially or totally affecting navigation on the website.

CHANGES TO THE COOKIES POLICY

Bairro Comercial de Castelo Branco’s cookie policy may be updated from time to time to ensure compliance with current legal regulations or to reflect improvements in our services.