Dear Client,

As you are aware, the law implementing Regulation (EU) 2016/679 of the Parliament and of the Council of 27 April 2016, on the protection of individuals with regard to the processing of personal data and the freedom circulation of these data, also known as the General Data Protection Regulation (hereinafter referred to as the GDPR).
For the purposes of complying with the provisions of the GDPR, the entity Jocasori – Têxteis, Unipessoal Lda., hereinafter referred to as Jocasori, which has this website http://jocasori.pt, informs that:

1. Responsible for data processing
The main person responsible for processing your data for the purposes of our services is Jocasori – Têxteis, Unipessoal Lda., with the corporate identification number 507986466 and headquartered in Quinta do Lameirinho, Lotes Nº 24 and 25 4835-326 Guimarães. Any question related to the processing of your personal data may be sent in writing to the following email address geral@jocasori.pt.

2. Collection and use of personal data
2.1. With a view to carrying out its activity and for the purpose of contacting its customers, Jocasori may collect, with the authorization of the respective holders, data of a personal nature, voluntarily provided by natural or legal persons, in any form, namely: names of persons legal entities, tax identification number, address/headquarters, email address and telephone number.
2.2. The data identified above is collected and processed for the purpose of its proper use and compatible with the correct and necessary development of Jocasori’s commercial activity and for legal and functional issues inherent to the operation of its goods and/or services.
2.2.1. The personal data collected may be used, when permitted by law, for the following purposes: visiting the website, ordering products, communications with a view to providing information regarding the activity of Jocasori and its goods and services, marketing, communications with a view to with a view to concluding contracts, any type of communications/questions regarding contracts about to be concluded or concluded or in progress, invoicing, deliveries, returns, customer support and other actions that may be necessary within the scope of the relationship established between Jocasori and the data holder.
2.3. The data subject authorizes Jocasori to collect, process and use their personal data under the terms and for all purposes described in this document. Authorization can be withdrawn at any time.

3. Legal basis
3.1. The processing of personal data carried out by Jocasori is based on several legal bases, depending on the respective purposes:
a) Execution of a contract or pre-contractual steps at the request of the data subject (visit to the website; ordering of products; communications with a view to providing information regarding the activity of Jocasori and its goods and services; communications with a view to execution of contracts; communications/questions concerning contracts about to be concluded or concluded or in progress and invoicing);
b) Consent of the data subject (use of performance cookies for statistical analysis and marketing);
c) Jocasori’s legitimate interest to manage and improve its website, as well as to ensure that its use is made in accordance with its terms and conditions, fraud control and prevention;
d) Compliance with legal obligations to which Jocasori is subject.
3.2. When the processing of data is based on Jocasori’s legitimate interest, we take the necessary measures to analyze the effects that the processing has on your interests. Jocasori will not process your personal data if from this analysis it concludes that our interests are superseded by your rights and freedoms.

4. Confidentiality, security and data conservation
4.1. The data collected by Jocasori is stored on its system and is treated by it in a secure and confidential manner.
4.2. The processing and access to data is restricted to Jocasori employees/employees who carry out professional tasks that, by their nature, imply the intervention and/or management of the same relationship with the data subject.
4.3. Personal data will be kept by Jocasori for the necessary time of use, namely, for as long as the relationship between it and the respective data subjects is maintained or the purpose for which the data was collected remains. Once the period that justifies its conservation has expired, the data will be destroyed within an adequate period for this purpose.

5. Data transfer
5.1. Without prejudice to their confidentiality and proper treatment, the holder authorizes Jocasori to transfer their data (only those strictly necessary) to third parties, such as accounting firms contracted by us externally where accounting services are provided to us.
5.2. Your data may also be transmitted to third parties, whenever there is a legal obligation that justifies the communication of the data.
5.3. Jocasori will not trade any data collected with third parties.

6. Amendment of the privacy statement
6.1. Jocasori reserves the right at any time and without prior notice and with immediate effect, but without prejudice to the legal rights granted to data subjects, to change, add or revoke, partially or totally, this privacy policy.
6.2. Any changes will be published on this same website, so we recommend that you periodically visit this page to find out about the most recent version.

7. Data subject rights
7.1. The data subject provided to Jocasori has the right to request access to their personal data (known as “data subject access request”). This allows you to receive a copy of the personal data we hold about you and to verify that we are processing it legally.
7.2. The data subject provided to Jocasori has the right to request corrections to any data we hold about you. This allows you to correct any incomplete or incorrect data we have about you, although we are obliged to verify the accuracy of the new data you provide to us.
7.3. The data subject provided to Jocasori has the right to request the limitation of the processing of their personal data. This allows you to request the suspension of the processing of your personal data in the following circumstances: (a) if you want us to determine the accuracy of the data; (b) whenever our use of the data does not comply with the law; (c) whenever you need us to keep your data, even if we do not need them, in case you need to establish, exercise or defend against legal claims; or (d) if you have objected to our use of your personal data, although we are required to verify that there are overriding legitimate interests in order for us to continue to use it.
7.4. The data subject provided to Jocasori has the right to request the deletion of their personal data. This allows you to request that we erase or remove your personal data where there is no good reason for us to continue to process it. You also have the right to ask us to erase or remove your personal data whenever you have successfully exercised your right to refuse the processing thereof (see below), whenever we have processed your information unlawfully or whenever we are obliged to erase your personal data for the purposes of compliance with local law. Please note that, for certain purposes, we may be legally required to retain your data.
7.5. The data subject provided to Jocasori has the right to object to the processing of their personal data whenever we use a legitimate interest (or the legitimate interest of a third party) and whenever there is something related to their personal situation that leads them to object to your processing under these terms, as you consider that this may have a fundamental impact on your fundamental rights and guarantees. He also has the right to object whenever we process his personal data for direct marketing purposes. In some cases, we may demonstrate that we have legitimate and compelling reasons that override your rights and guarantees to process your information.
7.6. The data subject provided to Jocasori has the right to request the portability of their personal data to themselves or to a third party. We will provide you, or a third party of your choice, with your personal data in a structured, commonly used, and electronically readable format. Please note that this right only applies to automated information for which you initially gave us your consent for use or in situations where we have used the information for the purposes of fulfilling the contract we have entered into with you.
7.7. The data subject provided to Jocasori has the right to withdraw consent, at any time, for the processing of their personal data. This does not affect the lawfulness of any processing that we have already carried out on the basis of the consent previously given.7.8. The data subject will not have to pay any fees to access their personal data (or exercise any of the other rights). However, we may charge a reasonable fee if your request is manifestly unfounded, repetitive or excessive. On the other hand, we may refuse to fulfill your request in these circumstances.

7.9. We try to respond to all legitimate requests within one month. Occasionally, it may take longer than a month if your order is particularly complex or if you have placed multiple orders. In that case, we will notify you and keep you informed.
7.10. In addition, you have the right to file a complaint at any time with the responsible data protection authority identified in point 13.

8. Security
8.1. Jocasori avoids unauthorized access or disclosure, using, for this purpose, various security measures, including strengthening passwords, in order to help protect and maintain the security, integrity and availability of your personal data.
8.2. We have implemented measures to help protect the personal data in our custody and control. We maintain reasonable administrative, technical and physical safeguards in an effort to ensure protection against unauthorized access, use, alteration and disclosure of personal data under our custody and control. Unfortunately, it is not possible to guarantee with 100% certainty that information will not be collected or transmitted via the Internet or other publicly accessible communication networks, so we cannot guarantee the security of such information.
8.3. We have personal data retention processes designed to retain our customers’ personal data for as long as necessary for the above purposes or to otherwise comply with legal requirements.

9. Communication
We will communicate with you by email, SMS or phone call to confirm an order, for information requests, for complaints, suggestions or compliments, or for other transactional messages related to our services. As such transactional messages are mandatory for us, you cannot refuse them.

10. Data Storage
10.1. The data we collect about you will be stored and processed within the EEA on secure servers in order to provide the best possible user experience. For example: for quick links to the website or mobile app if applicable.
10.2. Your personal data may be stored and processed by our service providers in Portugal and other jurisdictions. For information about the policies and practices of our service providers, please contact us at the email address above.
10.3. We will only keep your personal data for as long as is necessary to serve the purposes for which we collected it, including for the purposes of complying with any type of legal, accounting or communication requirements.
10.4. To determine the appropriate retention period for personal data, we take into account the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized disclosure or use of your personal data, the reasons why we process your data and whether we are able to fulfill those reasons by other means, and applicable legal requirements.

11. Links to Third Party Websites

Our website may contain links to third party websites or applications. If you access one of these links, please note that each will have its own privacy policy. We do not control these websites/applications and are not responsible for these policies. When leaving our website, we recommend that you read the privacy statement of every website you visit.

12. Contacts

For any additional information, or to exercise your rights, please check our account/privacy settings or contact us at the following email address geral@jocasori.pt.

13. Controlling entities

13.1. For local data protection matters, your local authorities can also be contacted in your local language.

13.2. In Portugal, the Controlling Entity is as follows:

CNPD – National Data Protection Commission

Rua de São Bento, no. 148 – 3rd

1200-821 Lisbon

Phone +351 213928400; Fax: +351 213976832

14. Extra information
14.1. Jocasori informs all its customers that all this information as well as terms and conditions and privacy policies can be found on our website.
14.2. The use of our website and our services presupposes the acceptance of this privacy policy. The Jocasori team reserves the right to change this policy without prior notice. Therefore, we recommend that you consult our privacy policy regularly so that you are always up to date.
14.3. In order to comply with the provisions of the general regulation on data protection, I was informed by Jocasori of all the conditions of service and privacy policy.

15. Cookies, google analytics and web beacons
15.1. On our website we do not have any type of advertising installed. Therefore, we cannot be held responsible for any advertising installed in browsers (chrome, Firefox, Edge) by users.
15.2. It is possible that when using our website, information is collected by Google Analytics, such as the ISP (Internet Service Provider, such as MEO, NOS or other), the browser you used when visiting our website (such as Internet Explorer or Firefox), the time of your visit and which pages you visited within our website, as well as the city and country from which you access us. However, this information is anonymous and will only be used for statistical purposes.
15.3. The “_ga” is the main cookie used by Google Analytics. The “_ga” allows a service to distinguish one user from another and lasts for 2 years. It is used by any website that implements Google Analytics, including Google services.
15.4. Cookies can be recognized by services such as Google for possible advertising elsewhere on the internet. The addition of cookies on our website is important for us to define our type of customer and user. Still, all information provided by Google Analytics is private and we only have basic information about users. For example, where you visit us, which operator, how long you were on our website and which pages you read.
15.5. We may also use third parties to help us gather and analyze information regarding the sections you visit on the website, in order to evaluate and improve your customer experience, the convenience of using the website and to help us evaluate certain specific information related to the your visits to our website.
15.6. In short, at Jocasori we only have your data for statistics. Cookies taken by third parties (such as Google) are the sole responsibility of this entity.