Privacy Policy

A Gaffashion — Comércio de Acessórios de Moda, Lda, company with the tax identification number 507432215, based in Rua Pintor André Padilha nº 144, 4900-002 Viana do Castelo, is responsible for processing your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable data protection legislation. For questions related to privacy or the processing of your personal data, you can contact us via email: shop@gaffashion.com.

1. Personal Data Collected 

We collect different types of personal data as necessary for the purposes described below:

User Accounts:

Full name

Date of birth

Email address

Phone number

Tax Identification Number

Address

Contact Form

When users communicate with us through our Contact page and fill out the contact form, they may be asked to provide some data to establish communication. It is important to note that this contact will not be used for marketing purposes.

Our website uses a contact form plugin, and the personal data entered in these forms will be stored in our database and managed internally by our employees, according to the reason for the communication.

The retention period of this personal information will depend on the duration necessary to process the data until the process is completed, according to the reason for the contact. In the case of Recruitment, the information sent will be analyzed by the person responsible for that processing, and personal data and resumes will be kept as long as we deem it important to maintain them in our database as potential candidates.

Newsletter Subscription

On our website, users have the possibility to subscribe to newsletters, requesting the sending of information related to our company to their email. We provide the option to easily cancel the subscription. For this newsletter management service, we collaborate with email marketing platforms that operate in compliance with the privacy policy of the General Data Protection Regulation.

Comments

When our visitors/users leave comments on our website, we save the data provided in the comment form, as well as the IP address and the browser's user agent, solely for the purpose of detecting spam through an automatic verification service. This data will be stored and visible indefinitely, to recognize and automatically approve any subsequent comments, instead of placing them in a moderation queue.

2. Purposes of Processing

Your personal data is processed for the following purposes:

Customer management: Includes order processing, product delivery, customer account management, and customer support.

Marketing: Sending newsletters, promotions, and information about products and services, subject to your consent. You can withdraw your consent at any time.

Improving our services: Personalização e melhoria dos serviços oferecidos, bem como desenvolvimento de novos produtos e serviços.

3. Legal Basis for Processing

We process your personal data based on the following legal conditions:

Contract performance: To fulfill contractual obligations and provide our services.

Consent: For sending marketing communications, where consent is explicitly given.

Legitimate interests: To improve our services and interact effectively with our customers.

Compliance with legal obligations: To meet legal and regulatory requirements.

4. Sharing Personal Data

Your personal data may be shared with third parties in the following circumstances:

Subcontracted services: For carriers and other service providers necessary for contract execution.

Legal obligations: When required by law or by competent authorities.

5. Data Security

We implement technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

6. Data Retention Period

Your personal data will be retained only for the period necessary to fulfill the purposes for which they were collected, as described below:

For marketing: Until you withdraw your consent.

For customer management: During the term of the contract and for the legally required periods.

7. Data Subject Rights and How to Exercise Them

Under the GDPR, you have the following rights:

Right of access: Obtain confirmation as to whether or not your personal data is being processed and, if so, access it.

Right to rectification: Request the correction of incorrect or incomplete personal data.

Right to erasure: Request the deletion of your personal data, where applicable.

Right to restriction of processing: Request the restriction of the processing of your data in certain circumstances.

Right to object: Object to the processing of your personal data for direct marketing purposes.

Right to data portability: Object to the processing of your personal data for direct marketing purposes.

Pode exercer os seus direitos contactando-nos através do e-mail shop@gaffashion.com.

8. Cookies

We use cookies to improve the user experience on our site. You can view our cookie policy here.

9. Changes to the Privacy Policy

We may update this Privacy Policy periodically. We recommend that you review this policy regularly to stay informed about how we protect your personal data.

10. Contact and Questions

For any questions about this Privacy Policy or about how we handle your personal data, please contact us via email shop@gaffashion.com.