Introduction

1. Who is responsible for handling your data
2. What data do we collect from our customers, how do we use them, and on what grounds
3. Who are the recipients of your data
4. Where we store your data
5. What are your rights when you give us your data
6. How long do we store your data
7. Warranties


Introduction

For PUKACA, the privacy and protection of your Personal Data is very relevant. PUKACA expresses its firm commitment to comply with the legislation in force at any time and to treat your personal data (“Personal Data”) in accordance with this privacy policy (“Privacy Policy”).
Each time you use PUKACA’s Shop on ETSY https://www.etsy.com/shop/pukaca/ (“website”) or when it otherwise relates to PUKACA (eg registration on the website and in applications subscription to Newsletter, order fulfillment), the Personal Data you transmit to us will be treated in accordance with the Privacy Policy in force at any time, so we suggest that you carefully read these policies in order to evaluate if you agree with them.
PUKACA’s ESTY Shop website may contain links to websites and services of other companies, which have their own privacy policies.
We recommend that you carefully read the privacy policies of such third parties. PUKACA is not responsible for the practices or contents of these third party privacy policies.
At the moment of registering on the PUKACA’s ESTY Shop Website or when downloading any application to your device, there is information in it that can be transmitted. This transmission is the result of services contracted with third parties. We recommend that you carefully read the privacy policies of such third parties. PUKACA is not responsible for the practices or contents of these third party privacy policies.
PUKACA reserves the right to modify the Privacy Policy in accordance with new legal and / or regulatory requirements, for security reasons or for the purpose of adapting said Policy to the instructions of the control authorities regarding data protection.
Whenever any change in the Privacy Policy is introduced, the user will be informed of the changes through PUKACA’s ESTY Shop website or, if warranted, through a communication, and will be asked to renew consent regarding the text of the Privacy Policy.


1. Who is responsible for handling your data

The entity responsible for processing Personal Data is PUKACA, Lda., a private legal entity, with registered office at Rua 1 Dezembro, 11, 2840-500 SEIXAL, PORTUGAL, owner of the identification number of corporate person 510743960. The user may contact PUKACA, through the following means:
– Tel .: (+351) 212 271 436
– Email address: info@pukaca.com


2. What data do we collect from our customers, how do we use them, and on what grounds

PUKACA collects various types of Personal Data for the different purposes, collecting in particular the following:
• Full name
• Date of birth
• E-mail address
• Phone number
• Address
• Billing Address
• NIF (EIN)
• Transaction information including purchased products
• Purchases historic
• NIB (BBAN) (applicable only to Business customers)
• Position held (applicable only to Business customers)
• Company name (applicable only to Business customers)

The purposes of the treatment of Personal Data are as follows:
a. Marketing: PUKACA may use your e-mail address or telephone number to communicate with you by sending you e-mail or SMS, including:
– Dissemination of activities and other events;
– Newsletter dissemination on ongoing activities at PUKACA;
– Disclosure of product promotions sold in our Online Store;
– Invitations under the PUKACA Mission.

b. Communication: PUKACA may use your personal data to communicate with you, in particular to send you news related to services and products, or to send invitations, as well as to provide assistance in aspects related to customer support (including to respond and deal requests through customer service channels, as well as the monitoring of service quality);

c. Supply of products and services: PUKACA uses your Personal Data to execute the contract of purchase and sale of the products available in the Online Store or the service agreement to be made with us. We may also use your Personal Data to contact you to finalize your order when you have saved your shopping cart or placed products in your cart without completing the payment process; inform you when a product you intended to purchase is available; treat and monitor your order, including delivery of the product at the address indicated by you; manage the payment of your order; manage any contact with us regarding your order; prevent and investigate possible misuse of these and to assist in aspects related to customer support.

d. Recruitment: PUKACA during the personnel selection and recruitment process collects and processes the personal data of its candidates. The personal data processed will be those contained in the application form and the Curriculum Vitae, as well as any personal data that you spontaneously decide to transmit to PUKACA, including, but not limited to, name, age, sex, photograph, contact details (e-mail address and phone number), education information, employment history, immigration status (in case you need a work permit).

You may cancel the subscription of the Newsletter as well as any other communications identified above at any time by using the option that we make available in each communication.
With the exception of treatment for the purpose of supplying products and services (treatment necessary for the execution of a contract), treatment in recruitment procedures, where treatment is based on the legitimate interest of PUKACA), the legal basis of the processing is the consent of the holders.
Personal Data collected when making an order or service request to PUKACA are necessary for the execution of the respective contract, so if the user in any way opposes the respective treatment, PUKACA can not comply with the execution of the contract.


3. Who are the recipients of your data

PUKACA may subcontract other companies for the provision of certain services, such as delivery / collection services, tax and accounting advice, marketing (including sending of sms and emailing) or maintenance of the website and digital suppliers. In these cases, these third-party companies may need to access certain information and data from the data holders. PUKACA guarantees that, in such cases, these third parties will have limited access to the information of the data holders, restricted only to those data necessary for the execution of the contracted tasks and that a contract has been made between the parties in which the data protection of Personal Data is regulated, these third parties undertake not to disclose, in any way, the Personal Data, nor to use them for purposes other than the
Likewise, PUKACA may communicate its Personal Data when it is determined by law, in the context of a judicial process or in the context of investigations of suspicious activities.
In no case shall PUKACA carry out international transfers of its data to a third country or international organization outside the European Union.
PUKACA does not intentionally collect personal information from minors under the age of 18. If you discover that you unintentionally collect personal information from persons under 18 years of age, PUKACA will take the necessary steps to eliminate the information as soon as possible, unless it is required by applicable law to keep it.


4. Where we store your data

PUKACA stores on servers that are in a secure environment, protected from unauthorized access, use or disclosure of the Personal Data that you provide. When personal information (such as a credit card number) is provided on the website for payment, it will not be retained by PUKACA, but by Unicre – Credit Institution, S.A., under fiscal identification number 500292841.
PUKACA adopts the technical, electronic and organizational procedures necessary and adequate to ensure the security of your Personal Data and to prevent its loss, misuse or improper access.
It states that you will only process your data for the purposes for which it was collected, in accordance with the terms of this Privacy Policy.
PUKACA frequently reviews its data collection, storage and processing policies to ensure that it only collects, stores and processes information that is essential to the provision or improvement of services.
PUKACA adopts appropriate procedures to ensure that your information is accurate, complete and current, but it is up to you to update or correct your personal information when necessary.
Once the Personal Data collection is done in an open network (internet), these may eventually circulate on the network without security conditions, and may be viewed and / or used by unauthorized third parties for this purpose, despite having appropriate safety measures have been taken against accidental or unauthorized destruction and accidental loss and also against unauthorized access, modification or dissemination.
PUKACA does not make automated decisions.


5. What are your rights when you give us your data

In accordance with the applicable legislation, PUKACA undertakes to respect the confidentiality of your personal information and ensure the exercise of its rights to:
a) Right to be informed: our customers have the right to obtain clear, transparent and understandable information on how PUKACA uses their Personal Data. That is why we hereby make this Privacy Policy available to you.

b) Right of access: in addition to the right to information, you can access your personal data that we treat and keep. In these cases, PUKACA will provide you with a copy of the personal data that is processed. In addition, when requested through electronic process, the information will be provided in an electronic format of common use.

c) Right of rectification: you have the right to rectify your personal data if they are incorrect, out of date or if you wish to complete them. To do so, you can contact us for the above contacts or, alternatively, if you have registered on the website, go to your “customer area”.

d) Right of deletion / right to be forgotten: you can ask us to delete your data, however, please note that this is not an absolute right, since we may have legal grounds or other legitimate interests for the retention of your personal data.

e) Opt-in right, including direct marketing: You can either unsubscribe from PUKACA’s Newsletter or opt-out of our direct marketing communications at any time. The easiest way to do this is by clicking on the link “unsubscribe”. On any email or communication we send you, you can also contact us for that purpose.

(f) The right to withdraw consent at any time for the processing of data: you may withdraw your consent to the processing of data when such processing is based on your consent. Withdrawal of consent does not affect the legality of consent-based treatment prior to withdrawal.

g) Right to file a complaint with the CNPD: If you consider that the treatment of your personal data by PUKACA violates the applicable data protection legislation, you may file a complaint with the National Data Protection Commission (“CNPD”). Please feel free to contact us before submitting any complaint to the CNPD.

h) Right to the portability of data: you have the right to move, copy or transfer the data from our database to another.

i) Right to limit treatment: you have the right to request the restriction of the treatment of your data in the following situations: if you dispute the accuracy of the data, if the treatment is unlawful and do not want to erase your data, but only limit it, if the data are no longer required by PUKACA, but necessary to the visitor / customer or if you have exercised the above right of opposition, during the period of time in which PUKACA examines whether or not its legitimate interests for treatment prevail over that right .

In order to request the exercise of any of the rights listed above, in addition to the forms specifically mentioned in the respective paragraphs, you may send a communication addressed to the abovementioned address or by sending an e-mail to the e-mail address also mentioned above, which you may also use if you have any questions regarding this Privacy Policy.


6. How long do we store your data

We only store Personal Data for the time required to achieve the purpose for which it was collected, to respond to your needs or to comply with our legal obligations.

In order to determine the period for which we store your data, we use the criteria listed below. If multiple criteria are applied simultaneously, we will keep your personal data in accordance with the criterion that entails the preservation of your Personal Data for the longest period of time.

a) When purchasing products and / or services, we will keep your personal data for the duration of our business relationship, including any complaints that may arise, as well as for a period of two years after termination, without prejudice to the fulfillment of obligations of the controller;

b) When you contact us to ask questions, we will keep your personal data for the period of time necessary to resolve your question;
c) When creating a client account, that is, when registering on our website, we will keep your data until you ask us to delete it or after a period of inactivity of two years;

d) When you consent to the sending of direct marketing, we will keep your personal data until you cancel the subscription or ask us to eliminate it;
(e) for data collected during the recruitment procedure, for a maximum period of one year from the close of the procedure;

f) The period of time provided in the applicable legislation; or

(g) until the specific purpose applicable to certain data ceases to exist.

In any of these situations, if there is pending legal or judicial proceedings, the data will be kept for the duration of the process and up to six months after a final decision is passed.
We may also retain some of your personal data to the extent necessary to comply with our legal obligations, as well as to manage or enforce our rights, including through recourse to the courts.
After the above mentioned periods of conservation, the Personal Data will be deleted and / or erased in a secure way.


7. Warranties

The data holder guarantees that the Personal Data communicated to PUKACA is correct and accurate and undertakes to notify any change or modification to them and assumes sole responsibility for the losses and damages caused by the erroneous, inexact or incomplete communication of the data.
The owner of the data is expressly warned that when disclosing Personal Data in PUKACA public media such as Facebook, Twitter and Instagram, this information may be seen and used by third parties. PUKACA does not read any personal communications published on the websites of its clients.


Contacts

PUKACA welcomes your comments regarding this Privacy Policy. If you believe that PUKACA does not fulfill your obligations, please contact us. We will try to evaluate your suggestion and respond to you as soon as possible.