I – The Privacy and Protection of Personal Data

The privacy and protection of the personal data of all Customers and users of the services provided by Mundo das Velas, Unipessoal Lda., hereinafter called Bouticandles, with registered office at Rua dos Pescadores , Apartment 102, Galeão Building, 8400-512 Carvoeiro – Lagoa, Portugal, with the tax identification number 516 039 350, at each moment, constitute an essential aspect in the way it operates and organizes.

Bouticandles it aims to ensure that all its Clients know, at all times, the rules and principles relating to the protection and processing of personal data, developing all possible efforts to ensure the security of such data, in accordance with the rules and procedures defined in the applicable legislation, namely the Law on the Protection of Personal Data (Law No. 67/98, 26 October).
In this way, the company adopts the best technical and organizational practices to protect customers’ personal data against loss, involuntary or unlawful deletion and improper alteration, as well as against unauthorized integrity, access or disclosure failures.

On the Bouticandles website you can find links to other websites that are unrelated to our company. The availability of such links is made in good faith, and Bouticandles cannot be held responsible for the collection and processing of personal data made on these websites, nor be held responsible for the accuracy, credibility and functionality of websites belonging to third parties. Therefore, the provision of links to other websites other than Bouticandles does not imply any assumption of responsibility for them, and therefore does not apply to this Privacy Policy.

Bouticandles also recommends that its Customers adopt additional security measures, including the maintenance of properly updated and configured equipment and programs, the use of protections against malicious software and firewall, and non-browsing websites for which they do not have the proper guarantees of authenticity.

It is advisable to read this Privacy Policy, Acceptable Use Policy (AUP), General Conditions of Service Provision, as well as the Terms and Conditions of each of the services provided by the company.

This Privacy Policy may, at any time, be subject to change or revision, and any changes or revisions duly disclosed and communicated on the Bouticandles website

II – What Is Personal Data

Personal data is information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. A person who can be identified directly and indirectly, in particular by reference to an identification number or one or more specific elements of his physical, physiological, psychological, economic, cultural or social identity, shall be considered identifiable.

III – Responsible for the Collection and Processing of Personal Data

Bouticandles is responsible for the collection and processing of the personal data of the Clients, in accordance with article 3(d) of Law No. 67/98, 26 October, and it is up to the Client to decide in the context of the provision of Services to the Customer, what personal data are collected, the means of processing the data and the purposes for which they are used.

IV – Liability for data communicated to Third Parties

Bouticandles may, in the exercise of its activity and in the scope of the Services it provides, subcontract third parties for the purposes mentioned above and for the development and management of its services, which may imply access by these entities to personal data of its Customers. Where this happens, Bouticandles takes appropriate measures so that the entities that will have access to the data offer the highest technical, organisational and human guarantees at that level.

Thus, third parties subcontracted by Bouticandles they will be obliged, in the terms legally provided for, as well as by agreement signed with the former, to implement technical and organizational measures appropriate to the protection of personal data against accidental or unlawful destruction, dissemination, alteration, disclosure, unauthorized access and any other form of unlawful processing, as well as will be bound by special duties of professional secrecy and confidentiality.

Outside these cases, Bouticandles will only transmit its Customers’ personal data to Third Parties when:

1. (a) is obliged to do so by force of a legal provision and only to the strict extent of its obligations or,
2. b) in cases where the law expressly permits it, if the Client expressly and specifically authorizes such transmission and is duly informed in writing about the recipients of the personal data and the purposes of the data transmitted.

In any case, Bouticandles remains responsible for the personal data made available by customers.

The provision of certain services by Bouticandles may involve the transfer of your personal data outside Portugal. In such a case, the company declares that it will strictly comply with the determination of the suitability of the country of destination of the information with respect to the protection of personal data and the requirements applicable to such transfers, in the terms legally provided for.

V – Conditions for Collection of Personal Data

Bouticandles only collects and processes the personal data of Customers with the express consent of those, in accordance with each of the specific purposes of the processing in question, in accordance with the provisions of the Personal Data Protection Act.

The consent provided by the Clients may be withdrawn by them at any time, free of charge.
There are, however, personal data that are indispensable to the provision of the Services by Bouticandles(mandatory data), and customers are duly and previously informed of this same need and the consequences of not making such data available.
If the personal data, considered indispensable, are not provided by the Clients or if they prove insufficient, incorrect or outdated, Bouticandles may not provide the subscribed Service(s), assuming the Clients in this case full and exclusive responsibility for the insufficiency or inadequacy of the data transmitted.

VI – Period of Retention of Personal Data

Bouticandles will only retain customers’ personal data for the period of time strictly necessary to allow:

1. a) the provision of the Service(s);
2. b) compliance with the legal obligations to which Bouticandles is attached;
3. (c) the pursuit of the purposes of collection and/or processing;
4. d) the exercise of the rights of the Clients and the fulfilment of the corresponding obligations.

In cases where the National Commission for the Protection of Personal Data (CNPD) authorizes the retention of the personal data of customers for periods longer than the validity of the service contract, taking into account the specific purpose of the processing in question, the Client will be timely and duly informed of this same purpose and the retention period in question.

After the period of retention/storage period, in the terms set out above, customers’ personal data will be permanently deleted by Bouticandles

VI- Customers’ rights in relation to their personal data

In accordance with the provisions of the Personal Data Protection Act, the Customer is guaranteed as the holder of personal data, and free of charge, the right of access, correction, updating and deletion of his/her personal data.

In any of the above cases, the Client may exercise his/her legitimate rights by sending written communication to the email contact info@bouticandles.com, addressed to the Data Protection Officer.

VII – Unsolicited electronic communications for direct marketing purposes

The Customer’s contact details, which is a natural person, may be used by the Bouticandles, if expressly authorized, in direct marketing actions and promotion of services made available by itself, pursuant to the provisions of Article 13 of Law No. 41/2004, August 18 in the version conferred by Law No. 46/2012, August 29.

In the case of a Client who is a legal person, Bouticandles may send unsolicited communications for direct marketing purposes relating to goods and services provided by the company itself or by the company of the same Group, unless the Customer expressly refuses to receive this type of communications in the future and is on the national list of legal persons expressly owe the receipt of unsolicited communications for direct marketing purposes that the General Consumer Directorate (DGC) has to keep up to date.

In any of the above cases, the Customer shall have the right to expressly and freeof charge, via e-mail, to be sent by the Bouticandles of electronic communications for direct marketing purposes, the Client may thus exercise his legitimate rights by sending written communication to the email contact info@bouticandles.com, addressed to the Data Protection Officer.

VIII – Cookie Policy

Bouticandles uses cookies on its website to improve the performance and user experience of bouticandles.

What is a cookie?

A cookie is a small text file that a website places on your computer, phone or any other device with internet access, containing information about your browsing on that site. Cookies are used to make browsing easier and simpler, and do not damage your computer.

What are cookies used for on this site?

Our cookies have different functions:

– Essential Cookies: some cookies are essential to access specific areas of our website. They allow you to navigate the site and use your applications, such as accessing secure areas of the site through login. Without these cookies, the services that require it cannot be provided.

– Analytical Cookies: We use these cookies to analyze how users use the website and monitor its performance. This allows us to provide a high quality experience by customizing our offer and quickly identifying and fixing any issues that arise. For example, we use performance cookies to find out which pages are most popular, which page link method is most effective, or to determine why some pages are receiving error messages. Based on the use of the website, we may also use these cookies to highlight articles or services of the website that we think may be of interest to users. These cookies are used only for the purposes of statistical creation and analysis, without ever collecting personal information.

– Functionality Cookies: We use functionality cookies to allow us to remember your preferences. For example, cookies avoid entering the user’s name each time they access the site.

In summary, functionality cookies save the user’s preferences regarding the use of the website, so that it is not necessary to reconfigure the site each time you visit it.

The cookies used can be:

– Permanent Cookies: they are stored at the level of the internet browser (browser) on your access devices (pc, mobile and tablet) and are used whenever the user makes a new visit to the site. They are generally used to direct navigation according to the user’s interests, allowing us to provide a more personalized service.

– Session Cookies: they are temporary, remain in the cookies of your internet browser (browser) until you leave the site. The information obtained allows you to identify problems and provide a better browsing experience.

Is it possible to disable the use of cookies?

Yes, cookies can be disabled in your browser. Please note, however, that by disabling cookies, you may prevent some web services from functioning properly, affecting, partially or totally, the navigation of the website.

If you want to block or delete cookies from this site, you can do so by modifying your browser configuration. Although the parameterization of each is different, it is common to configure yourself in the menu of “Preferences” or “Tools”. For more details on setting cookies, see your browser’s “Help” menu.

IX – Security Measures adopted for the Protection of Personal Data

In its organisational structure, Bouticandles it has a Data Protection Officer, who assumes responsibility for the enforcement and compliance with applicable legal and regulatory standards regarding the processing of personal data and who is responsible in particular for the maintenance and development of the Security, Confidentiality, Confidentiality and Protection Policy of personal data.

X – Security Procedural and Technical Measures

Bouticandles applies the necessary technical and organizational measures to ensure that, by default, only personal data of customers necessary for each specific purpose of processing will be processed, and these are periodically reviewed and updated by the responsible department.

Bouticandles has also implemented sufficient, necessary and appropriate technical, physical, organisational and security measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, disclosure, unauthorized access and any other form of unlawful processing.

In this way, Bouticandles adopted different security mechanisms and procedures, following best practices in terms of information security in the systems that support the services it provides and that store customers’ procedural data, including the use of firewalls and intrusion detection systems, the existence of restricted access – physical and logical – the log of operations (logging) and their monitoring and auditing , the collection and transmission of personal data through secure means.

The personal data collected by Bouticandles are stored securely in the company’s systems, which, in turn, are in a data center of the company itself covered by all the physical and logical security measures necessary for the protection of personal data.

Whenever it is necessary to communicate personal data of its Customers to Third Parties, Bouticandles will be responsible for the personal data in question and warrants that:

1. a) the sharing of personal information complies with the legal rules in force;
2. (b) the transmission is carried out securely, in particular through the use of encryption protocols and,
3. c) Third parties are contratly obliged to observe the duties of confidentiality and confidentiality and to ensure the security of personal data that, for this purpose, are not being able to use such data for any other purposes, for their own benefit or third parties, nor to correlate them with other data that are in their availability.

XI – Contacts

For more information on how Bouticandles processes/processes its Customers’ personal data or to clarify any questions, file a complaint or leave comments on matters relating to Privacy and Protection of Personal Data, you should send your communications to:

Data Protection Officer
Mundo das Velas, Unipessoal Lda.
info@bouticandles.com
Rua dos Pescadores , Apartamento 102, Edifício Galeão
8400-512 Carvoeiro – Lagoa
Portugal