Privacy and Data Protection Policy
The processing of personal data collected within the scope of this application will be carried out in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (GDPR), in Law No. 58/2019, of August 8, which implements the aforementioned Regulation in the national legal system, and other legislation in force.
This Privacy and Cookie Protection Policy aims to inform you how your personal data is collected, protected and processed.
1. Identification of the Data Controller
The entity responsible for processing personal data is the company “ Eco Iris Lda. ”, henceforth Eco Iris, with NIPC 510 610 668 and headquarters in António Ferreira Rito Street, Pavilion No. 5, 4705-819 Braga.
2. Definitions
In order to facilitate the understanding of this Privacy Policy, the definitions below are used, in accordance with article 4 of the GDPR:
Personal Data – information relating to an identified or identifiable natural person (data subject). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier;
Processing – any operation performed on personal data, whether by automated or non-automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or interconnection, restriction, erasure or destruction;
Controller – the natural or legal person who determines the purposes and means of processing personal data;
Subcontractor – a natural or legal person who processes personal data on behalf of the controller;
Supervisory Authority – an independent public authority, which in Portugal is the National Data Protection Commission (CNPD), responsible for monitoring the application of data protection legislation.
3. Consent
By using our website and platforms, you agree to our Privacy and Data Protection Policy.
By providing us with personal data, you are giving your express consent for it to be used for the purposes set out in this Privacy and Data Protection Policy.
4. Your personal data
When browsing our website, no personal information or data is collected, unless it is provided voluntarily and with consent, through the creation of a user account, filling out and sending forms, contact requests and/or uploading files.
Depending on your interaction on our website and the services you wish to use, the following personal data will be collected: identification data (name, date of birth, address, tax number, email address, telephone number), financial and transaction data (payment or card details, information relating to your purchases, orders, returns, transaction history), information about your interests and preferences , and/or other identifiable data requested in the available forms.
Please note that failure to fill in the mandatory data required to access any functionality or services on the website will prevent access to the functionalities for which the data was requested.
If personal data that is considered sensitive or not necessary for the purposes below is provided, it will be immediately deleted.
5. Legal grounds and purposes of processing personal data
Eco Iris collects and processes personal data, understood as minimum, necessary and adequate for the respective purposes.
The personal data processed have specific grounds, depending on the purposes for which they are intended, as can be seen in the table below.
|
Purpose
|
Legal basis
|
More information
|
|
Establishing contacts via email, written messages, telephone contact, WhatsApp, social networks or other available means of communication with a view to meeting your requests for quotes, contact or information |
- Pre-contractual steps at the request of the data subject (article 6, no. 1, al. b), of the GDPR). - Consent of the data subject for processing (article 6, no. 1, al. b) of the GDPR). |
- This website also has a chat , where you can ask questions or make requests more quickly and easily.
|
|
User account and registration management |
- Pre-contractual steps at the request of the data subject (article 6, no. 1, al. b), of the GDPR). - Consent of the data subject for processing (article 6, no. 1, al. b), of the GDPR). |
-All personal data provided must be accurate and complete. Users must update the data provided whenever it changes. - The user may request the cancellation of their user account by sending an email to the following address:
|
|
Management, processing and execution of the purchase or service provision contract, as well as establishing contacts to send information and updates about them |
- Performance of a contract to which the data subject is a party (Article 6, paragraph 1, letter b) of the GDPR). - Compliance with legal obligation (article 6, no. 1, al. c), of the GDPR). |
- The processing of your data is necessary for the conclusion of the purchase or service provision contract concluded on our website, including for managing payments made and sending receipts/invoices. |
|
Storage of payment data for future purchases or contact to inform about the availability of our products |
- Consent of the data subject for processing (article 6, no. 1, al. b), of the GDPR).
|
- In these cases, you may withdraw your consent by sending your request to the following email address: suporte@ecoiris.pt |
|
Customer support
|
- Consent of the data subject for processing (article 6, no. 1, al. b), of the GDPR). - Legitimate interest pursued by the Controller (article 6, no. 1, al. f), of the GDPR).
|
- Eco Iris has a legitimate interest in responding to your customer support requests, as it allows us to adequately resolve your issues, provide you with technical support or after-sales assistance, and effectively respond to your requests. |
|
Complaint management and warranty activation for products purchased on the website |
- Performance of a contract to which the data subject is a party (Article 6, paragraph 1, letter b) of the GDPR). - Compliance with legal obligation (article 6, no. 1, al. c), of the GDPR). - Legitimate interest pursued by the Controller (article 6, no. 1, al. f), of the GDPR).
|
- When the order is related to complaints about purchased products or warranty activation, Eco Iris is legally and contractually obliged to process your data. - In addition, it has a legitimate interest in processing the data, as it allows for the effective resolution of complaints or problems raised, as well as guaranteeing the quality of the products. |
|
Subscription to direct marketing communications and information about new products and/or services, via email, written message, or through instant messaging platforms such as WhatsApp, Messenger, Instagram or Facebook. |
- Consent of the data subject for processing (article 6, no. 1, al. b) of the GDPR). |
You may unsubscribe at any time by following the instructions provided in each communication or by sending an email to: suporte@ecoiris.pt
|
|
Conducting satisfaction surveys regarding customer service, products and services. |
- Legitimate interest pursued by the Controller (article 6, no. 1, al. f), of the GDPR).
|
- Eco Iris may conduct surveys to assess customer satisfaction, as it has a legitimate interest in processing data to analyze website functionality, improve customer experience, and offer a higher quality service. |
|
Security of information systems and prevention of fraud or misuse of the website |
- Compliance with legal obligation (article 6, no. 1, al. c), of the GDPR).
|
- Eco Iris carries out all necessary checks to prevent and detect any fraud or fraudulent use of the website, in compliance with its legal obligations. |
6. How personal data is collected
Eco Iris collects your personal data, provided voluntarily and with consent, through the creation of a user account and by filling out any available form, uploading any file, through communication and interaction, as well as through messages or requests you send.
7. Transfer of personal data to third parties
The sale, exchange, sharing or transfer of your personal data to third parties is expressly prohibited, except with your express consent or to comply with any legal or judicial obligation.
This prohibition does not cover trusted third parties (subcontractors) who help manage the Eco Iris website and provide services to it, such as data center management, maintenance and technical support, marketing, payment processing (depending on the method chosen), who only have access to personal data strictly necessary for the contracted purposes.
Eco Iris ensures that these third parties keep this information confidential and provide sufficient guarantees that they implement appropriate technical and organizational measures that comply with the GDPR.
No data is transmitted beyond that strictly necessary for the provision of contracted services, with Eco Iris remaining responsible for the personal data provided.
8. Protection of your information
Eco Iris has implemented appropriate procedures to ensure compliance with security obligations in processing, notification to the supervisory authority and data subjects in the event of a personal data breach, data protection impact assessment and prior consultation, such as those provided for in applicable legislation.
However, it is important to keep in mind that no method of data transmission or storage is 100% secure. Therefore, we decline any responsibility for any damages of any nature, direct or indirect, incurred by you or any user related to computer fraud, theft, robbery, or any other violation or circumstance in which your information and data are accessed or disclosed without express authorization.
9. Intellectual property and copyright and related rights
All website materials, including design, text, graphics, photographs, and content presented, are the intellectual property of Eco Iris and are also protected by copyright. Modification, reproduction, copying, duplication, sale, distribution, or any other form of exploitation, for commercial or non-commercial purposes, is strictly prohibited.
10. Subscription to newsletters and sending of commercial and/or promotional communications
If you authorize subscribing to the Newsletter or receiving commercial and/or promotional communications, we will provide you with personalized information regarding our products and/or services through different means, such as email or other equivalent electronic means of communication (SMS, etc.).
However, you may unsubscribe by expressing your intention to do so to the following email address: suporte@ecoiris.pt
11. Cookies
We use cookies on this website, which are small text files containing information related to user navigation, whose main purpose is to improve the user experience. By continuing to browse this page, we assume you accept their use.
We do not store sensitive personal information, such as your address, password, credit or debit card details, etc., in the cookies we use. A cookie alone does not personally identify any user/visitor.
12. Data retention period
Personal data will be stored and maintained for as long as the relationship between Eco Iris and the respective data subjects remains in force, or if the purposes for which they were collected are maintained, after which they will be deleted, without prejudice to the obligation to preserve the data for a longer period by legal imposition, especially for the fulfillment of tax obligations or during the time in which some type of liability arising from a legal relationship, the execution of a contract or the application of pre-contractual measures may be required.
13. Your Rights
Under applicable legislation, you have the right to access, rectify and complete your data, to the portability and erasure of data based on consent, as well as to the limitation and opposition to processing, which may be exercised by sending a letter, with acknowledgment of receipt, addressed to Eco Iris, to Rua António Ferreira Rito, Pavilhão nº 5, 4705-819 Braga, or to the following email address suporte@ecoiris.pt
If you believe that any violation of current legislation regarding data protection has been committed with regard to the processing of your personal data by Eco Iris or if you have any questions regarding its processing, you can contact us at the same address.
You also have the right to file a complaint with the National Data Protection Commission (CNPD). More information about the CNPD can be found at www.cnpd.pt.
14. Declaration on knowledge of the use of collected data and respective consent
Being aware that Eco Iris will collect and process personal data, you acknowledge that by checking the checkbox “I have read and accept the Privacy Policy”, you certify that the information you provide is correct and true and that you intend to submit the requested personal data, therefore expressly authorizing the use of the same by Eco Iris, exclusively for the purposes of the form you completed, taking into account that:
· The data will be processed by Eco Iris Employees who carry out the activities necessary to provide the service;
· The information will only be used to evaluate your request and in the context of any procedures related to the respective form; and this
· The information database application software, which stores the data you provide, protects your personal data in accordance with applicable legislation.
By accepting this Privacy Policy, you accept and consent to the free use and reproduction, by Eco Iris, of your content publicly available and/or published on social media platforms in which you have explicitly and specifically referred to, or tagged/hashtagged, Eco Iris, our products or services.
15. Transfer of data outside the European Union
Personal data collected and processed will not be made available to third parties established outside the European Union. If, in the future, such a transfer occurs for the aforementioned reasons, Eco Iris undertakes to ensure that the transfer complies with applicable legal provisions, in particular regarding the determination of the adequacy of that country with regard to data protection and the requirements applicable to such transfers.
16. The minors
The application's services are not directed to minors under the age of 18, so we request that minors do not provide us with any personal data.
17. Privacy Policy Change
Eco Iris reserves the right to change, rectify or update this Privacy and Personal Data Protection Policy, whenever it deems necessary and in accordance with current legislation.
Your continued use of our website, services and features offered after such changes will be deemed for all applicable purposes to be your acceptance of such changes.
Latest version: May 2024.