Privacy Policy

  1. Within the scope of this website , provided by Ecoxperience, Lda., NIPC and NIF 514164450, with headquarters at HIESE – Quinta Vale do Espinhal, EM558 1, 3230-343 Penela, this entity, as responsible for the treatment, may request users to make available of personal data, that is, data that allows Ecoxperience to identify or contact such users.
  2. Through this Privacy Policy, Ecoxperience provides the user, within the scope of their legally provided right to information, with detailed information about the nature of the data collected, and the purpose and processing carried out in relation to their personal data, under the terms and for the purposes provided for in the General Data Protection Regulation [Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016] and in the Personal Data Protection Law [Law No. 58/2019, of 8 of August].
  3. Ecoxperience collects and processes personal data from users, with a view to achieving the purposes for which they were collected. Thus, identification, contact, profile, contractual relationship, banking (if associated), and navigation and usage data (including cookies ) are collected.
  4. Ecoxperience collects such data directly, from the User, or indirectly, through partner entities or third parties.
  5. The personal data collected is not shared with third parties without the User's consent, as is the case with communication platforms and social networks, with the exception of the following situations:
  6. In the context of the processing of personal data, Ecoxperience uses or may use third parties, subcontracted by it, to, on its behalf and in accordance with the instructions given by it, carry out the processing of personal data, in compliance with the legislation in force in matters of data protection and this Privacy Policy. No subcontractor may transmit Users' personal data to other entities without Ecoxperience having previously given written authorization to do so, and they are also prevented from contracting other entities without prior authorization. Ecoxperience is committed to subcontracting only entities that present sufficient guarantees of carrying out appropriate technical and organizational measures, in order to ensure the defense of the User's rights. All subcontractors are bound by a written contract which regulates, in particular, the object and duration of the processing, the nature and purpose of the processing, the type of personal data, the categories of holders and the rights and obligations of the parties.
  7. Ecoxperience may also communicate personal data to other third parties not qualified as subcontractors. These entities are subject to the duty of confidentiality and cannot transmit the User's personal data to other entities without Ecoxperience having given prior written authorization to do so. Under applicable legal terms, Ecoxperience may transmit or communicate the User's data to other entities if such transmission or communication is necessary for the execution of the contract established between it and the User, or for pre-contractual measures at the User's request, if it is necessary to comply with a legal obligation to which Ecoxperience is subject, or if it is necessary for the purpose of pursuing the legitimate interests of Ecoxperience or third parties. If User Data is transmitted to third parties, Ecoxperience makes every effort considered reasonable to ensure that the recipient uses personal data in a manner consistent with this Privacy Policy and in accordance with current legislation on data protection.
  8. Ecoxperience is committed to ensuring that the data it processes is:
  9. Ecoxperience is committed to ensuring that the processing of personal data carried out by it is lawful, and will only be carried out when at least one of the following situations occurs:
  10. When the processing of personal data is carried out by Ecoxperience based on the User's consent, the User has the right to withdraw their consent at any time. The withdrawal of consent, however, does not compromise the lawfulness of the processing carried out by Ecoxperience based on the consent previously given by the User.
  11. The period of time for which data is stored and preserved varies according to the purpose for which the information is processed. There are legal requirements that require data to be kept for a minimum period of time. Therefore, and whenever there is no specific legal requirement, the data will be stored and preserved only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, after which it is deleted.
  12. In general terms, Ecoxperience processes personal data for the following purposes:
  13. The user acknowledges that failure to provide all data classified as essential by Ecoxperience may make the contractual relationship between the parties difficult or impossible.
  14. To guarantee the security of User Data and maximum confidentiality, Ecoxperience treats the information provided to it in an absolutely confidential manner, in accordance with internal security and confidentiality policies and procedures, which are periodically updated according to needs, as well as as in accordance with the legally stipulated terms and conditions. Depending on the nature, scope, context and purposes of data processing, as well as the risks arising from processing for the User's rights and freedoms, Ecoxperience undertakes to apply, both when defining the means of processing as well as at the time of the processing itself, the necessary and appropriate technical and organizational measures to protect personal data and comply with legal requirements. It also undertakes to ensure that, by default, only the data necessary for each specific processing purpose is processed and that these data are not made available without human intervention to an indeterminate number of people. Although Ecoxperience collects and processes data in a secure manner that prevents loss or manipulation, using the most advanced techniques for this purpose, the collection of such data in an open network allows the circulation of personal data without conditions of security, running the risk of being seen and used by unauthorized third parties.
  15. As a rule, Ecoxperience does not transfer data outside the European Economic Area. However, if this transfer is necessary to fully comply with the purposes mentioned in this Privacy Policy, Ecoxperience undertakes to ensure that the transfer complies with the applicable legal provisions, namely regarding the determination of the suitability of such country with regard to the protection of data and the requirements applicable to such transfers.
  16. Ecoxperience guarantees means that allow the User to access their Personal Data. The User has the right to obtain from Ecoxperience confirmation that the personal data concerning him or her are being processed or not and, if applicable, the right to access them, as well as the respective information about the purposes of the processing and the storage periods for this data.
  17. The User has the right to request, at any time, the rectification of their personal data and also the right to have their incomplete personal data completed.
  18. The User has the right to obtain, from Ecoxperience, the erasure of their data, when one of the following reasons occurs:
  19. Ecoxperience is not obliged to delete personal data to the extent that the processing proves necessary to comply with a legal obligation to which it is subject or for the purposes of declaring, exercising or defending a right of Ecoxperience in the context of any legal proceedings. .
  20. When Ecoxperience has transmitted the User's data and is obliged to delete it under the right to erasure, it undertakes to ensure reasonable measures, including technical ones, taking into account the available technology and the costs of its application, to inform those responsible for the effective processing of personal data that the User has requested the deletion of links to such personal data, as well as copies or reproductions thereof.
  21. The User has the right to obtain, from Ecoxperience, the limitation of the processing of their data, if one of the following situations occurs (the limitation consists of inserting a mark in the personal data stored with the aim of limiting its processing in the future ):
  22. When User data is subject to limitation, it can only be processed, with the exception of conservation, with the User's consent or for the purposes of declaring, exercising or defending a right in legal proceedings, defending the rights of another natural person or collective, or for legally foreseen reasons of public interest.
  23. The User has the right to receive the personal data that concerns him or her and that he or she has provided to Ecoxperience, in a structured, commonly used and machine-readable format, and the right to transmit this data to another person responsible for processing (whenever applicable) .
  24. The User has the right to object, at any time, for reasons related to their particular situation, to the processing of personal data concerning them based on Ecoxperience's legitimate interests.
  25. When the User's personal data is processed for the purposes of direct marketing ( marketing ), the User has the right to object at any time to the processing of data concerning him or her for the purposes of said marketing, which includes the definition of profiles , insofar as it is related to direct marketing. For this purpose, Ecoxperience ceases to process data for this purpose.
  26. The User also has the right not to be subject to any decision taken exclusively based on automated processing, including the definition of profiles, that produces effects in their legal sphere or that significantly affects them in a similar way, unless the decision:
  27. Rights relating to data protection can be exercised by the User by contacting Ecoxperience, through the contact details indicated on the respective website .
  28. Ecoxperience responds in writing to the User's requests, within a maximum period of one month from receipt, except in cases of special complexity, in which this period may be extended up to two months. If requests submitted by the User are manifestly unfounded or excessive, particularly due to their repetitive nature, Ecoxperience reserves the right to charge administrative costs or refuse to follow them up.
  29. In the event of a data breach and to the extent that such breach is likely to pose a high risk to the User's rights and freedoms, Ecoxperience undertakes to communicate the personal data breach to the User without undue delay. Under legal terms, communication to the User is not required in the following cases:
  30. Ecoxperience reserves the right to change this Privacy Policy at any time. If the Privacy Policy is modified, the date of the last change, available at the bottom of this page, is also updated, and a notice is also placed on the website .
  31. Any disputes arising from the validity, interpretation or execution of the Privacy Policy, or which are related to the processing of the User's personal data, must be submitted exclusively to the jurisdiction of the judicial courts of the district of Coimbra, without prejudice to the applicable mandatory legal rules.
  32. By browsing the Ecoxperience website , the user declares to be aware of this privacy policy and to provide their informed, express, free and unequivocal consent for their personal data, provided through the Ecoxperience website , to be processed and preserved by it and any subcontractors, under the terms set out here and in other applicable legislation on the protection of personal data.
  33. For further clarification, Ecoxperience can be contacted using the contact details indicated on the respective website . Additionally, you can always file a complaint with the National Data Protection Commission, located at Avenida D. Carlos I, no. cnpd.pt.