Privacy police
Privacy police
1. USER INFORMATION
Who is responsible for processing your personal data?
TRILHA VERÃO PORTUGAL is the data controller responsible for processing the USER’s personal data and informs that such data will be processed in accordance with Regulation (EU) 2016/679 of 27 April, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation – GDPR).
For what purpose do we process your personal data?
The USER’s personal data is processed in order to maintain a commercial, administrative and contractual relationship. The processing operations include:
- Sending commercial and promotional communications, subject to the USER’s prior consent, by email, fax, SMS, MMS, social media or any other electronic or physical means, present or future, that enables commercial communications. These communications will be carried out by the CONTROLLER and will relate to its products and services or those of its partners or suppliers with whom promotional agreements have been established. In no case will third parties have access to personal data.
- Conducting market research and statistical analysis.
- Managing orders, requests, enquiries or any type of request made by the USER through the contact channels available on the CONTROLLER’s website.
- Sending online newsletters containing news, offers and promotions related to the brand’s activity.
What is the legal basis for processing your data?
Personal data processing is carried out in accordance with Article 6 of the GDPR, based on:
- The USER’s consent, for sending marketing communications and newsletters.
- The performance of a contract or pre-contractual measures, when the USER makes a purchase or requests a service.
- The legitimate interest of the CONTROLLER, for improving services, conducting statistical analysis and managing requests made by the USER, while always respecting the USER’s fundamental rights and freedoms.
How long do we retain your personal data?
Personal data will be retained only for as long as necessary to fulfil the purposes for which it was collected or while legal obligations require its retention.
Once it is no longer necessary, the data will be securely deleted or anonymised.
Who do we share your personal data with?
Personal data will not be disclosed to third parties except where necessary for the development and execution of the purposes of processing, particularly to service providers related to communications, technology and operational support, with whom the CONTROLLER has entered into the required confidentiality and data processing agreements in accordance with applicable legislation.
Some service providers may be located outside the European Economic Area. In such cases, the CONTROLLER ensures that data transfers are carried out in compliance with the legal mechanisms provided for under the GDPR, such as standard contractual clauses approved by the European Commission.
What are your rights?
The USER may exercise the following rights at any time, in accordance with the GDPR:
- The right to withdraw consent.
- The right of access to personal data.
- The right to rectification of inaccurate or incomplete data.
- The right to erasure of data when it is no longer necessary.
- The right to restriction of processing.
- The right to object to processing.
- The right to data portability.
The USER also has the right to lodge a complaint with the competent supervisory authority, in particular:
- Spain: Spanish Data Protection Agency (AEPD – www.aepd.es)
- Portugal: Portuguese Data Protection Authority (CNPD – www.cnpd.pt)
Contact details to exercise your rights
TRILHA VERÃO PORTUGAL
Address: Rua dos Sobreiros, 25 - 1 esquerdo - Cascais - 2750-611
Email: trilhaverao.pt@gmail.com
2. MANDATORY OR OPTIONAL NATURE OF THE INFORMATION PROVIDED BY THE USER
By ticking the corresponding boxes and entering data in the fields marked as mandatory, the USER expressly, freely and unequivocally accepts that such data is necessary to process their request by the service provider. The provision of data in the remaining fields is voluntary.
The USER guarantees that the personal data provided to the CONTROLLER is accurate and undertakes to notify any changes to such data.
The CONTROLLER informs that the data requested as mandatory is necessary for the proper provision of the service. If all required data is not provided, it cannot be guaranteed that the information and services offered will fully meet the USER’s needs.
3. SECURITY MEASURES
In accordance with the provisions of the GDPR, the CONTROLLER has adopted the necessary technical and organisational measures to ensure an appropriate level of security, taking into account the risks associated with the processing of personal data.
These measures are intended to protect personal data against unauthorised access, loss, alteration or unlawful disclosure.
The processing of personal data is carried out in compliance with the principles of lawfulness, fairness, transparency, data minimisation and purpose limitation, as set out in Article 5 of the GDPR.
For more information about the use of cookies and similar technologies, the USER may consult the Cookies Policy available on the website.
Cookies police
In accordance with Regulation (EU) 2016/679 of 27 April (General Data Protection Regulation – GDPR) and Directive 2002/58/EC on privacy and electronic communications (ePrivacy Directive), it is mandatory to obtain the user’s explicit consent before using non-essential cookies on websites.
This website uses first-party and third-party cookies to ensure its proper functioning, improve user experience and, subject to prior consent, carry out statistical analysis and marketing activities.
WHAT ARE COOKIES?
Cookies and other similar technologies, such as pixels or identifiers, are small files that are downloaded to the user’s device when accessing certain websites.
These tools allow information about the user’s browsing activity to be stored and retrieved and may be used to recognise the user, remember preferences, analyse website usage and improve the services provided.
COOKIES SUBJECT TO CONSENT AND EXEMPT COOKIES
In accordance with European legislation, user’s informed consent is required for cookies that are not strictly necessary, including:
- Analytics or measurement cookies
- Advertising cookies
- Behavioural advertising cookies
- Affiliate cookies
Technical or functional cookies, which are necessary to enable navigation and the provision of services expressly requested by the user, are exempt from consent.
TYPES OF COOKIES
ACCORDING TO PURPOSE
- Technical and functional cookies: enable website navigation and the use of the various options or services available.
- Analytics cookies: allow the controller to monitor and analyse user behaviour in order to improve website performance.
- Advertising cookies: enable the effective management of advertising spaces included on the website.
- Behavioural advertising cookies: collect information about user browsing habits to display personalised advertising (retargeting).
- Social media cookies: set by social media platforms to enable content sharing and may track user activity outside the website.
- Affiliate cookies: allow tracking of visits from other websites with which an affiliate agreement exists.
- Security cookies: store encrypted information to protect data against unauthorised access.
ACCORDING TO THE ENTITY THAT MANAGES THEM
- First-party cookies: sent to the user’s device from a domain managed by the website owner.
- Third-party cookies: sent from a domain managed by an entity other than the website owner.
ACCORDING TO STORAGE PERIOD
- Session cookies: collect and store data only for the duration of the user’s session.
- Persistent cookies: remain stored on the user’s device for a defined period, which may range from a few minutes to several years.
PERSONAL DATA PROCESSING
TRILHA VERÃO PORTUGAL is the data controller responsible for processing the user’s personal data in accordance with the GDPR.
Purpose of processing
The purposes of processing are detailed in the section relating to the cookies used on this website.
Legal basis for processing
Data processing is based on the user’s consent, except for technical cookies necessary for the operation of the website (Article 6(1) GDPR).
Data retention criteria
Data will be retained for the periods specified in the information relating to each type of cookie.
Data disclosure
Personal data will not be disclosed to third parties, except in the case of third-party cookies or where required by law.
USER RIGHTS
The user may exercise the following rights:
- The right to withdraw consent at any time;
- The right of access, rectification, erasure and data portability;
- The right to restriction of or objection to processing;
- The right to lodge a complaint with the competent supervisory authority.
Supervisory authorities:
- Spain: Spanish Data Protection Agency (www.aepd.es)
- Portugal: Portuguese Data Protection Authority (www.cnpd.pt)
CONTACT DETAILS
TRILHA VERÃO PORTUGAL
Address: Rua dos Sobreiros, 25 – 1st floor left – Cascais – 2750-611
Email: trilhaverao.pt@gmail.com
