PRIVACY POLICY

The protection of privacy and personal data is a priority for the Association and a clear commitment assumed by it. This policy concerns the privacy practices of the FUNDAÇÃO LIVRARIA LELLO website managed by the Association.

Any personal data provided by REGISTERED USERS will be treated with the security and confidentiality guarantees required by data protection legislation.

The Association respects your right to privacy and does not collect any personal information about REGISTERED USERS without their request or explicit consent.

This Policy aims to inform and explain the following points:


INFORMATION THAT MAY BE COLLECTED AND USE OF PERSONAL DATA

Personal data is requested when you register as a REGISTERED USER on the FUNDAÇÃO LIVRARIA LELLO WEBSITE to access the FUNDAÇÃO LIVRARIA LELLO PRODUCTS AND SERVICES provided by the Association through the creation of a personal account with a username and password. Such data is also requested when ordering and purchasing FUNDAÇÃO LIVRARIA LELLO PRODUCTS AND SERVICES, and for the delivery of FUNDAÇÃO LIVRARIA LELLO PRODUCTS by the Association.

Overall, the categories of personal data that can be collected, with the prior authorization of the REGISTERED USER, and that are subject to processing by the Association for the referred purposes are the following: Name; date of birth; gender; corporate name; postal address; email address; phone number; NIF (tax identification number).

The Association may also use personal data to maintain the quality of the services provided and to obtain general statistics regarding the use of the FUNDAÇÃO LIVRARIA LELLO website. For this purpose, the Association combines the data collected automatically with personal data, such as the name and email address.

The Association will use the REGISTERED USER's personal data within the scope of the activity carried out through the FUNDAÇÃO LIVRARIA LELLO website, particularly to:

  • Configure the account of REGISTERED USERS
  • Provide, execute, and maintain services, such as subscribing to the Association's Newsletter by REGISTERED USERS, virtual visits to the FUNDAÇÃO LIVRARIA LELLO space, participation in quizzes, and other initiatives promoted by the Association
  • Process and complete transactions (the electronic ordering and acquisition of FUNDAÇÃO LIVRARIA LELLO PRODUCTS AND SERVICES disclosed and made available through the FUNDAÇÃO LIVRARIA LELLO website, and their sale and delivery by the Association to CUSTOMERS), as well as sending related information, including transaction confirmations, invoices for service acquisition
  • Manage the acquisition of FUNDAÇÃO LIVRARIA LELLO PRODUCTS AND SERVICES by CUSTOMERS and the information of their transaction history available in the respective reserved area
  • Respond to information requests or complaints from REGISTERED USERS.


DATA PROCESSING RESPONSIBILITY

The Association, as the data controller:
  • Ensures that the processing of personal data is carried out only within the scope of the purposes for which they were collected or for compatible purposes
  • Collects, uses, and retains only the minimum, necessary, and sufficient personal data for the purposes in question
  • Does not use personal data to send unsolicited mail whose content has not been received without explicit consent
  • Does not transmit personal data for commercial or advertising purposes
  • Processes personal data for the legally provided purposes or for the pursuit of services and online sales at the request of the user.


PERSONAL DATA SECURITY

The Association, in pursuing its activities, uses a set of appropriate security technologies and procedures to protect your personal data, safeguarding against unauthorized access and disclosure, including:
  • Physical security measures, namely access control of employees, collaborators, and visitors to the headquarters and data center installations, highly restricted intrusion control mechanisms, fire suppression, 24x7 equipment monitoring, and equipment hosting in dedicated locations;
  • Logical security measures, in the component of system and workstation access through identity management, authentication, and privilege mechanisms; in the network component, the use of firewalls and intrusion detection systems, segregating networks (internal, external, demilitarized zone) and application environments, as well as information encryption through secure communication channels.

Under the General Data Protection Regulation (hereinafter referred to as GDPR) currently in force, as the data subject and in relation to the data processed by the Association, the REGISTERED USER has the following rights that they can exercise under the GDPR and other applicable legislation:
  • The right to access their personal data
  • The right to rectify their personal data
  • The right to erase their personal data
  • The right to restrict the processing of their personal data
  • The right to data portability for the personal data provided by them
  • The right to object to certain personal data processing that concerns them
  • The right not to be subject to any decision made solely based on automated processing

The Association will make the appropriate efforts, under applicable legislation, to provide, correct, or delete the personal data that has been processed by it.

To exercise the above rights, the REGISTERED USER, as the data subject, may contact the Association through the following email address: geral@fundacaolivrarialello.pt.

If the requests are manifestly unfounded or excessive, particularly due to their repetitive nature, the Association may require the data subject to pay a reasonable fee considering the administrative costs of providing the information or communication or taking the requested measures, or may refuse to follow up on the request.

When processing is based on the REGISTERED USER's consent, they have the right to withdraw their consent at any time, without compromising the lawfulness of the processing already carried out by the Association based on the previously given consent.

The REGISTERED USER has, in any case, the right to file a complaint with a supervisory authority, which in Portugal is the National Data Protection Commission (https://www.cnpd.pt/).

For the purposes of using the FUNDAÇÃO LIVRARIA LELLO WEBSITE, the REGISTERED USER commits to providing and keeping all their personal data up to date and accurate. In turn, the Association guarantees them the possibility of correcting and updating their data, preferably through their “Personal Account” or using the means mentioned above.


PERSONAL DATA ARCHIVING

The personal data of REGISTERED USERS are kept by the Association on servers located in the European Union. These servers are protected and maintained respecting the highest security levels and applicable privacy legislation.

The data will only be retained for the period strictly necessary for processing and according to the intended purpose.

The Association will retain personal data as long as the REGISTERED USER's registration is active or as necessary for the relevant activity, i.e., to provide the contracted PRODUCTS and SERVICES, without prejudice, however, to any legal obligation that requires the retention of personal data beyond those retention periods.

If the REGISTERED USER closes their account, the personal data associated with it will be deleted without undue delay.


TRANSFER OF PERSONAL DATA TO THIRD PARTIES

The Association only uses subcontracted entities that provide sufficient guarantees to carry out the technical and organizational measures necessary to meet the requirements of the applicable legislation with the appropriate security level for the data in question, and the guarantees and obligations of the subcontractor will be formalized between the Association and each of these third parties. In any case, only the personal data strictly necessary for the intended purposes will be provided to the said entities.

In general, the Association will only disclose personal data when such disclosure is required or permitted by law or in compliance with an order from a judicial, administrative, or other competent authority under the applicable legislation.


COOKIES AND SIMILAR TECHNOLOGIES

A cookie is a small information file that is installed in the USER's browser and stored on their computer or mobile platform when they visit a website. The Association uses cookies on its website that improve the performance and browsing experience of its USERS, increasing, on the one hand, the speed and efficiency of response and, on the other, eliminating the need to repeatedly enter the same information.

The placement of cookies not only helps websites recognize the USER's device on the next visit but also facilitates its proper functioning. The cookies used on the FUNDAÇÃO LIVRARIA LELLO website are as follows:
  • Personalization cookies: Allow recognizing the USER's preferences so that on subsequent visits, they do not have to select the same options again, making navigation easier.
  • Analytical cookies: Allow collecting information for statistical analysis of browsing and website usage, enabling understanding of how USERS navigate and finding ways to improve their experience and website functionalities.
  • The metadata generated by the use of cookies can be sent to third parties for trend analysis, tracking of USER navigation, whether registered or not, and website performance, without, however, identifying any person.


How to control the use of Cookies?

USERS can prevent the use of cookies in their browser settings. However, if this option is limited, the use of some features or the performance of certain tools may be affected.


DISCLAIMER

The Association cannot be held responsible for any damages (including, notably, direct, indirect, or moral damages) resulting from the correct or incorrect use of the FUNDAÇÃO LIVRARIA LELLO website and its contents by the USER, access to mobile platforms and computers, and access to the USER's computer system by third parties.

The information disclosed on the FUNDAÇÃO LIVRARIA LELLO website is of an informative nature. Despite the Association's efforts to keep the content updated and reliable, it does not guarantee that they may not contain inaccuracies, typographical errors, or be outdated, and cannot be held responsible for this