(0)
O&C Olive Company, Lda (hereinafter “Olive Company”), in carrying out its activities, in the context of the website www.ethosoliveoil. pt, processes personal data, i.e. all information relating to an identified or identifiable natural person (hereinafter “Data Subject(s)”), an identifiable person being one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an electronic identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Olive Company, in cases where it determines the purposes and means of processing personal data within the scope of its activities, will be considered the Data Controller, ensuring simple compliance with the Data Protection Legislation.
In accordance with the legislation, Olive Company strives to process personal data in accordance with all applicable principles, namely: i) Principle of Lawfulness, Loyalty and Transparency; ii) Principle of Purpose Limitation; iii) Principle of Data Minimization; iv) Principle of Accuracy; v) Principle of Conservation; vi) and Principle of Integrity and Confidentiality.
In total harmony with the principles described above, Olive Company fully respects the rights of Data Subjects about the protection of their personal data. Data Subjects may contact Olive Company for any information related to the processing of personal data, using the contact details provided in point 8.
For the foregoing reasons, this Data Protection and Privacy Policy is established in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 and other applicable related legislation (“Data Protection Legislation”), and Olive Company undertakes to carry out any and all data processing operations in accordance with the provisions and under the terms of the following points:
1. Grounds for Lawfulness and Purposes of Data Processing
The personal data of Data Subjects will be processed by Olive Company on the following lawful grounds:
Grounds of Lawfulness/ What do they consist of?
Consent – Olive Company may process Personal Data if the Data Subject consents to the respective Processing by means of a free, specific, informed and explicit expression of will, by which he or she accepts, by means of a declaration (in writing or orally) or an unequivocal positive act (by filling in an option), that his or her Personal Data will be processed.
Pre-contractual steps or performance of a contract – Olive Company may process Personal Data if it is necessary, without limitation, for the performance of a contract for the provision of services and/or supply of products to which you are a party as an Employee, Customer and/or Supplier, or to carry out pre-contractual steps at your request.
Fulfilment of a legal obligation – Olive Company may process Personal Data to ensure and guarantee the fulfilment of legal obligations to which it is subject under the law of a Member State and/or the European Union.
Defense of the Data Subject’s vital interests – Olive Company may process Personal Data to ensure the defense of the Data Subject’s vital interests, namely when such Processing is essential to the Data Subject’s life.
Legitimate Interests – Olive Company, other Controllers or Third Parties may process Personal Data provided that such Processing does not prevail over their interests or fundamental rights and freedoms.
In view of the above, the collection of personal data based on the above grounds of lawfulness will essentially be for purposes related to the development of Olive Company’s corporate purpose, as well as for the performance of its contracts and legal obligations, whereby the non-collection of personal data will imply the impossibility of performing the purposes for which the personal data are processed.
2 Processing of personal data within the scope of the Website
Within the scope of the Website, Olive Company processes the Data Subject’s personal data as follows:
Personal Data / Purpose / Legal Basis / Retention Period
IP Address / Website Management / Pre-contractual Diligence or Performance of Contract whose terms are governed by the Terms and Conditions made available on the Website / IP For a maximum period of 1 (one) year.
Name and E-mail / Account creation and authentication / pre-contractual steps or Contract performance, the terms of which are governed by the Terms and Conditions available on the Website / Registration validity period.
Purchases Made / History of Purchases Made / Performance of Contract, the terms of which are governed by the Terms and Conditions made available on the Website / Period of 10 (ten) years.
Payment Data / Provision of Services / Pre-contractual Diligence or Contract Performance, the terms of which are governed by the Terms and Conditions made available on the Website / Period of 10 (ten) years.
Name and E-mail / Newsletter Subscription / Consent / Period of 1 (one) year.
Personal data will also be used to identify possible consumer preferences, including non-intrusive profiling, based on your purchase and consumption history at Olive Company. The prediction of consumer preferences and profile identification is aimed at designing personalized marketing actions, optimizing the range of products made available online, as well as communicating in advance campaigns that are expected to be of interest to the Data Subject, which can be assigned and communicated automatically. The Customer may opt out of receiving communications via the contacts provided in Paragraph 8.
3. Processing methods
The processing of personal data will be carried out automatically and manually by computerized tools, applying logic strictly related to the purposes and, in any case, guaranteeing the security and confidentiality of personal data.
4. Disclosure and Transmission of Personal Data
Regarding the disclosure and transmission of personal data, Olive Company employees will process personal data and will therefore be able to access the personal data of Data Subjects. Olive Company employees will process the personal data of Data Subjects exclusively for the purposes specified in the terms of this Policy and in strict compliance with current or future Data Protection Legislation.
Third parties who may process personal data on behalf of Olive Company may also access Data Subjects’ personal data as Processors, including, without limitation, IT service providers necessary for the operation of information systems, outsourcing or cloud computing service providers, professionals, and consultants.
Data Subjects have the right to obtain a complete and up-to-date list of the subcontractors (if any) appointed by Olive Company, by sending a specific request to Olive Company under the terms specified in paragraph 8 of this Policy.
5. International Transfers
Olive Company may transfer your Personal Data outside the European Economic Area (“EEA”) to locations that may not guarantee the same level of protection.
However, if applicable, Olive Company will only carry out transfers of personal data outside the EEA in accordance with the following measures:
– When the transfer is made to a location or by a method or in circumstances that the European Commission considers ensuring adequate protection of personal data;
– When you have implemented standard contractual data protection clauses approved by the European Commission or a competent Data Protection Authority; or,
– When none of the above apply, but the law nevertheless authorizes such transfer, for example, if it is necessary for the establishment, exercise or defense of a right in legal proceedings.
You can request detailed information on the security measures that Olive Company has in place regarding transfers of personal data outside the EEA and, where applicable, a copy of the standard data protection clauses in force at Olive Company through the contacts provided in Section 8.
6. Rights of Data Subjects
Under the terms of current or future Data Protection Legislation, Olive Company informs you that Data Subjects have the right of access, rectification, limitation, portability, erasure and the right to object to the Processing of Personal Data, in certain circumstances, which may be exercised under the terms of this chapter of the Data Protection and Privacy Policy.
Rights/What they consist of
Right to information – The Data Subject has the right to obtain clear, transparent, and easily understandable information about how Olive Company uses their Personal Data and what their rights are. That is why Olive Company provides all this information in this Data Protection and Privacy Policy.
Right of access – The Data Subject has the right to obtain information about what Personal Data Olive Company processes (if any) and certain information (like that provided in this Privacy Policy) about how that Data is processed. This right enables you to know and confirm that we use your Data in compliance with Data Protection Legislation. Olive Company may refuse to provide the requested information where, in order to do so, Olive Company would have to disclose another person’s Personal Data or the information would adversely impact another person’s rights.
Right to rectification – If the Data Subject’s Personal Data is incorrect or incomplete (for example, if their name or address is wrong), a request can be made for Olive Company to take reasonable steps to correct it.
Right to erasure of data – This right is also known as the “right to be forgotten” and, in simple terms, allows the Data Subject to request the erasure or deletion of their data, provided there are no valid grounds for Olive Company to continue using it or its use is unlawful. This is not a general right to erasure, as exceptions are allowed (for example, whenever this data is necessary for the defence of a right in legal proceedings).
Right to restriction of processing – The Data Subject has the right to “block” or prevent future use of their Data while Olive Company evaluates a request for rectification or as an alternative to erasure. Whenever Processing is limited, Olive Company can still store your data, but will not be able to use it later. The Olive Company keeps a list of data subjects who have requested that future use of their data be “blocked” to ensure that this limitation is respected.
Right to data portability – The Data Subject has the right to obtain and reuse certain Personal Data for their own purposes in various organizations. This right applies only to Personal Data provided to Olive Company and processed by Olive Company with consent and those processed by automated means.
Right to object – The Data Subject has the right to object to certain types of processing, for reasons related to his or her situation, at any time when such processing takes place, for the purposes of the legitimate interest of Olive Company or third parties. Olive Company may continue to process such Data if it can provide evidence of “overriding legitimate grounds for processing that override your interests, rights and freedoms” or if such Data is necessary for establishment, the exercise or defense of a right in a court case. Right to lodge a complaint – The Data Subject has the right to lodge a complaint with the competent supervisory authority, the National Data Protection Commission – CNPD, if you consider that the Processing of Personal Data violates your rights and/or the Data Protection Legislation. You may at any time, in writing, exercise the rights enshrined in the Data Protection Legislation and other applicable legislation through the methods described in point 7 of this Policy.
7. Security and Confidentiality
To ensure the security and confidentiality of the personal data collected by Olive Company are used protected databases, among others, appropriate firewalls, and passwords, in accordance with the provisions of the Data Protection Legislation, current or future, and in other legal terms. Access to personal data is only possible to authorized employees who have an effective need to use the data in accordance with the principles of security and confidentiality. Violations of the Data Protection and Privacy Policy by Olive Company employees may give rise to disciplinary action. Compliance with standards and procedures by Olive Company staff is monitored and verified periodically.
8. How to Contact Olive Company on Privacy and Data Protection Matters
Data Subjects may exercise their rights by contacting Olive Company using the following methods:
i) O&C Olive Company, Lda, Quinta de São Lourenço 6300-025 Aldeia Viçosa;
ii) Sending e-mail to the mailbox comercial@ethosoliveoil.pt.