Privacy Policy for the “veronicabarros” Website

GDPR (General Data Protection Regulation)

The new GDPR, effective as of May 25, 2018, has a significant impact on how each company and organization processes the personal data of European citizens.

The protection and preservation of the privacy of your data collected through the contact form are used solely to be able to contact the customer in order to clarify any doubts or requests from the customer. We are committed to protecting and respecting the privacy of all our customers and visitors, ensuring the confidentiality of their data and processing them only for the purposes for which they were collected. The data processing carried out by us is limited to the minimum necessary and in complete compliance with applicable data protection laws and regulations, including the GDPR (General Data Protection Regulation).

In our Privacy Policy, we aim to inform you clearly, transparently, and objectively about the personal data we collect, the purpose for which it is collected, how it is processed, who has access to your personal data, how long it is kept, and how you can exercise your rights regarding the processing of your personal data.

This privacy policy applies to the processing of data collected through our website form within the scope of electronic communications that are established with questions and doubts regarding our services.

Compliance with the GDPR

The processing of personal data carried out by the veronicabarros.pt website follows the best data security practices and complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons concerning the processing of personal data and on the free movement of such data, more commonly known as the General Data Protection Regulation (GDPR).

Data Controller

Regarding the personal data that is collected through the veronicabarros.pt website, our Data Protection Officer can be contacted at epd@veronicabarros.pt.

Personal Data

Personal data refers to any information related to an individual that can, in some way, allow their identification, including Name, Identification Number, Location, Electronic Identifier, among others. The personal data collected through our website includes full name, email, mobile number, IP address, professional ID, country of residence, gender, professional name, address, locality, postal code, tax number, and workplaces.

Consent

Consent is obtained when the processing of data is obtained through your consent, and this authorization is obtained freely through the provision of specific relevant information for the processing with which this data collection is carried out.

Contract Execution

Data collection is necessary to enable future contact when the user contacts us through our website form and in the request for an appointment.

Legitimate Interest

When the processing of personal data is carried out for situations related to business activities that, although not necessarily justified by a legal obligation or contractual clause, can be justified by reasons of legitimate interest.

Rights of Individuals

The General Data Protection Regulation grants a set of rights to individuals who are the subjects of personal data, including:

Right of Access

The right to access, at any time and without delay, the data you provided in the context of registering as a customer or using subscribed services, and the purpose of this processing.

Right to Rectification

The right to make or request the correction of your personal data that is incorrect or to complete the information in your customer profile that is incomplete, such as your name, address, email address, tax number, and telephone contacts.

Right to Be Forgotten

The right to request the deletion of your personal data when it is no longer needed for the purposes for which it was initially collected, provided that there are no situations where its retention is essential, such as the exercise of a contractual relationship or retention to fulfill a legal obligation.

Right to Portability

The right to obtain a digital copy of the data you provided in a structured, machine-readable format that allows you to easily transfer, copy, or transmit your personal data from one service to another.

Right to Object

The right to object to the processing or withdraw your consent to the processing for a specific purpose whenever the processing of personal data is based on your consent, for example, unsubscribing from a newsletter.

Right to Restriction

The right to request the suspension of data processing or limitation of the processing of your personal data for a specific purpose.

Right to Object to Automated Processing

The right to object to the processing of data for automatic profiling of customers based on their preferences and service usage data.

As a customer, you can exercise your rights through the contacts provided in the “Data Controller” section of this Privacy Policy.

Transmission of Data to Subprocessors

The veronicabarros.pt website uses the data collected through its website only for internal use, and there is no sharing or exchange of user data with other entities.

Purpose of Data Processing

In general, the personal data that is collected is intended for subsequent contact with individuals who contact us through our website to clarify their doubts or questions about our services or to schedule an appointment. We always try to limit personal information as much as possible, which is necessary in order to be able to establish contact with the people who ask us questions.

Data Collection

Personal data is usually collected electronically through our website on the contact page, so that we can contact the people who contact us in this way, on the registration page for later access to the software, and on the profile page for the issuance of invoices.

Retention Period for Personal Data

The veronicabarros.pt website retains your personal data only for the period necessary to carry out the processing of the data for the purpose for which it was initially collected. In certain situations, and depending on the legal basis for the data collection, they may be deleted or anonymized if the customer exercises their right to object, the right to be forgotten, or withdraws their consent for processing for that specific purpose. If there is no legal obligation requiring data retention for a specific period, they will be processed in accordance with the law only for the time required to fulfill the purpose for which they were initially collected, following the guidelines and decisions of the National Data Protection Commission.