In this document, we explain what personal data we collect, for what purposes we can use it, how we treat it, with whom we share it, how long we keep it, as well as ways to get in touch with us and exercise your rights.
General Data Protection Regulation
The new GDPR sets out the rules relating to the processing, by a person, a company or an organisation, of personal data relating to persons in the European Union (EU).
The GDPR protects personal data regardless of the technology used to process such data, the protection is neutral in technological terms, and applies to both automated and manual processing, provided that the data is organized according to predefined criteria. (for example, in alphabetical order). It is also irrelevant how the data is stored, in a computer system, through video surveillance, or on paper; in all these cases, personal data are subject to the protection requirements set out in the RGPD.
Who is responsible for data processing?
Rui Alexandre Ferreira Pinto de Oliveira is responsible for the processing of personal data, within the scope of the RGPD.
What kind of information does Fábrica de Calçado da Mata, Lda collect?
Fábrica de Calçado da Mata, Lda collects two types of information: personal information and anonymous information. Anonymous information occurs while the holder of personal data visits digital platforms and aims to improve its functioning, including the management and prioritization of content. Personal information is voluntarily provided by the holder of personal data upon optional registration. All data collected is processed automatically, and the information collected from the holder of personal data is encrypted and managed with advanced security.
The registration serves for the holder of personal data to access the services provided by Fábrica de Calçado da Mata, Lda
What are personal data?
Personal data is information relating to an identified or identifiable person. A person who can be directly or indirectly identified is considered identifiable. Also constituting personal data is the set of distinct information that may lead to the identification of a particular person.
Examples of personal data:
Name and Nickname;
address of a residence;
Number of an identification card;
Location data (for example, the location data function on a mobile phone);
IP address (internet protocol);
Your phone’s advertising identifier;
Data held by a hospital or doctor that allows a person to be uniquely identified;
Sound or image.
Who is the holder of personal data?
The holder of personal data is the natural person to whom the data relate and who used the digital platforms and services of Fábrica de Calçado da Mata, Lda
Personal data categories
Examples (not exhaustive):
main identifiers Name, civil or tax identification number, passport number, date of birth, marital status, address, telephone, e-mail address, nationality, photographs and files from the mobile device, data relating to the household, data relating to kinship.
Additional identification IBAN, geo-location, education level, gender, profession, socio-economic data, personal ID, IP address, social network addresses, type of mobile device, operating system, operating system version.
special protection Personal data of minors under 16 years of age.
When and how do we collect your personal data?
We collect personal data, namely, when you purchase products or services from Fábrica de Calçado da Mata, Lda, make requests for a quote or schedule services.
The collection can be done orally, in writing or through the digital platforms of Fábrica de Calçado da Mata, Lda.
What is the basis for processing your personal data?
Your consent must be express – in writing, orally or through the validation of an option – and prior, provided in a free, informed, specific and unequivocal manner; or
Execution of contract and pre-contractual diligences
When the processing of personal data is necessary for the conclusion, execution and management of a contract entered into with Fábrica de Calçado da Mata, Lda; or
Compliance with legal obligation
When the processing of personal data is necessary to comply with a legal obligation to which Fábrica de Calçado da Mata, Lda is subject, such as, for example, the communication of identification or traffic data to police, judicial, fiscal or regulatory entities or of location data to ensure emergency services; or
The processing of personal data by Fábrica de Calçado da Mata, Lda may be justified by reasons of legitimate interest related to the execution of tasks related to its activity as a company, such as the processing of data to improve the quality of service, detection of fraud and protection of revenue and when our reasons for using it should prevail over your data protection rights.
How long does Fábrica de Calçado da Mata, Lda process and keep your personal data?
Fábrica de Calçado da Mata, Lda treats and preserves your personal data according to the purposes for which they are treated and only for the period of time necessary to fulfill the purposes that motivated their collection and conservation, and always in accordance with the law, guidelines and decisions of the CNPD, or, as applicable, until you exercise your right of opposition, right to be forgotten or withdraw consent.
There are situations in which the law determines the retention of data for a minimum period of time, namely: for one year, traffic and location data for the purposes of investigation, detection and prosecution of serious crimes or for 10 years the data necessary for information to the Tax Authority.
After the respective conservation period has elapsed, Fábrica de Calçado da Mata, Lda will eliminate or anonymize the data whenever they should not be kept for a different purpose that may persist.
Rights of the holder of personal data
The holder of personal data has rights to information, access and rectification or erasure of personal data and the right to data portability, the right to limit or oppose the processing of their data, within the scope and under the terms of the RGPD and other applicable legislation. .
The holder may withdraw, at any time, the consent he has given for the processing of his personal data, within the framework of the RGPD. The revocation of consent will not affect the lawfulness of the processing of personal data that has been carried out so far, based on the consent that you have previously provided.
You also have the right to file a complaint regarding the processing of your data addressed to the CNPD.
Exercise your rights through the following contacts:
Rua da Mata, 159 3880-872 S. Vicente de Pereira (Jusã)
The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive or unreasonably reiterated request, in which case a reasonable fee may be charged taking into account the costs.
The response to requests must be provided, without undue delay, within one month of receipt of the request, unless it is a particularly complex request or occurs in exceptional circumstances. That period may be extended by up to two months, where necessary, taking into account the complexity of the request and the number of requests received.
As part of your request, you may be asked to provide proof of your identity in order to ensure that personal data is only shared with the respective holder.
Transmission of personal data
The data may be transmitted to entities to whom the data must be communicated by law, such as the Tax Authority, judicial authorities, criminal police bodies, among others.
Responsibility for Fábrica de Calçado da Mata, Lda and third-party digital platforms and services
What are the security procedures that guarantee the protection of your data?
Fábrica de Calçado da Mata, Lda takes all the necessary and legally required precautions to ensure the privacy of personal data processed and/or transmitted through its digital platforms. These precautions ensure the online and offline security of this information.
Whenever sensitive information is collected or used, the data will be encrypted using the SSL protocol. This so-called Secure Socket Layer technology is used to improve the security of data transmission over the Internet, encrypting and protecting data and sensitive information using the HTTPS protocol. SSL guarantees the holder of personal data that the data will not be fraudulently intercepted and that all information is treated with maximum security.
If you have any questions about any of the topics covered in this document, please contact us at:
Rua da Mata, 159 3880-872 S. Vicente de Pereira (Jusã)
Last update: 16 of April 2021.
General Data Protection Regulation (GDPR) : Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free circulation of these data and repealing Directive 95/46/EC (General Regulation on Data Protection) (OJ L 119 of 4.5.2016).