Privacy Policy

General principles of our privacy policy

Our Privacy Policy is based on the following principles:

• Only authorized persons use authorized data for authorized purposes;
• Because your privacy is very important to us in everything we do;
• Because we understand that the security of your data is a priority that we review periodically according to technological innovation;
• Because we consider that the data does not belong to us, but belongs to its holders;
• Because accessing our website and providing personal data implies knowledge and acceptance of our Privacy Policy, we advise you to read it carefully, as well as our Terms of Use and our Cookies Policy, which we made available at the same address;

Whenever we provide links to websites external to our organization on our website, this does not imply, on our part, any assumption of responsibility in relation to such websites and their content or operation, so the scope of application of our Privacy Policy is limited to only to our website or other platform that we make available to you.

Concepts and information to the data subjectWho is Responsible for Treatment?
 Bolflex – A. Ferreira & Pereira, Lda, is the entity responsible for processing personal data.

What is Personal Data?
For the purposes of this Policy, we follow the definition adopted by the General Data Protection Regulation (GDPR), namely, any information relating to an identified or identifiable natural person, considering that a natural person who can be identified, directly or indirectly, is considered identifiable. indirectly, namely by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural or social identity.

How do we collect your personal data?
a) Within the scope of our activity, we collect and process your personal data through our website, newsletter or in writing/email, for example within the scope of a contractual or pre-contractual relationship;
b) The data we collect is only strictly necessary for the provision of our services;
c) We collect and process your personal data with your consent only when it reflects a free, specific, informed and explicit expression of will;
d) At any time, and by your sole decision, you may withdraw this consent, easily, under the terms set out in paragraph c) of point “For what purposes do we process personal data“.

What personal data do we collect?
a) The categories of data we collect, for the purpose of being able to provide our services, are the following: Identification data (name, e-mail address, telephone number, company name, identification number of legal person, data citizen card (tax identification number), country/region, address, postal code, locality, district/municipality); Contact details (name, telephone number, email); Professional data (company name, tax identification number, legal person identification number); Billing and expense data (tax identification number);
b) The personal data we collect are subject to computer processing and stored in databases, in strict compliance with the legislation in force regarding data protection and the rules regarding information security. We will only process your personal data in accordance with a specific and legitimate purpose or purposes, determined at the time of collection, and such data will not be subsequently processed in a way that is incompatible with those purposes, except for the purpose of archiving in the public interest, scientific research or historical or even for statistical purposes, cases in which, under the terms of the RGPD, this incompatibility does not occur;
c) We do not collect special categories of personal data (“sensitive data”).

For what purposes do we process personal data?
We will process your personal data for the following purposes:
In order to identify you as our customer; To provide the services or information you have requested; For the purpose of invoicing the services provided and accounting management; To communicate changes to the conditions for providing the contracted services; To comply with legal obligations to which we are subject; With the customer's consent, for us to send promotional materials or special offers on our behalf or on behalf of our group companies and marketing partners; To optimize the visit and navigability on our website; For the management of the contractual relationship and its execution; For the purpose of adapting the services we provide to the needs and interests of our customers.
a) Depending on the circumstances, the processing of your personal data may be carried out based on the legal basis: the need for processing for the purposes of pre-contractual measures or contractual execution; compliance with legal obligations; the legitimate interests of Bolflex – A. Ferreira & Pereira, Lda or the consent granted by the data subject.
b) If consent is the legal basis for the processing of personal data, the data subject has the right to withdraw it at any time and easily, without this right compromising the lawfulness of the treatment carried out based on the previously given consent. nor further processing of the same data based on another legal basis.
c) If you wish to withdraw your consent, you can contact us via email address: [email protected]. By requesting that we withdraw your consent, you will stop receiving communications from us and your data will no longer be used.

Children's data
a) We do not collect nor do we intend to collect data from children, bearing in mind the recipients of the services we provide;
b) Bearing in mind that the child must be accompanied in all aspects of his life, including the digital one, it will be up to the holders of parental responsibilities to request the deletion of any data, a request to which we will promptly accede after verifying that this collection actually occurred, albeit unintentionally.

How long do we keep your personal data?
a) The period during which the data are kept depends on the purpose for which the data is processed. There are legal requirements that oblige us to keep data for a minimum period of time;
b) If there is no legal retention period, the data will be kept only for the time necessary for the purposes that motivated their treatment, after which they will be treated appropriately, being deleted or anonymized;
c) If the treatment is based on the consent of the data subject, until the data subject expresses his/her opposition.

What are your rights as a data subject?

Under the provisions of the GDPR, we guarantee you the exercise of your rights as a data subject, namely:
a) Right of Access – you have the right to request from us, among others, information regarding whether or not your data is being processed, what data we process and for what purposes. If you wish, you can ask us for a copy of the personal data being processed, and the provision of other copies may be subject to the payment of a reasonable fee, taking into account the administrative costs. If the order is requested in electronic format, and unless you indicate otherwise, the information will be provided by us in an electronic format in common use.
b) Right to Rectification – you have the right that, without undue delay, we proceed with the rectification of inaccurate personal data concerning you and that incomplete data be completed.
c) Right to cancellation – the right to be forgotten – you can request, under certain circumstances, that your personal data be erased from our records, without undue delay, whenever any of the reasons provided for in the GDPR are verified.
d) Right of Opposition – you have the right to object, for reasons related to your particular situation, to certain types of data processing provided for in the RGPD, such as processing for the purposes of direct marketing, in which case we will cease processing for that end.
e) Right to Portability – you have the right to transfer your personal data that we keep to another organization or to receive them in a structured, commonly used and machine-readable format.
f) Right to Restriction of Processing – the right to obtain the limitation of the processing of your personal data, when you intend, for example, to contest the accuracy of your personal data for a period of time that allows us to verify its accuracy, when the processing is unlawful or if you have invoked your right to object. For the purpose of exercising these rights, please send your request to email: [email protected]. You will then be sent the Data Subject Exercise Form and, after duly completing and sending it, we will proceed with your exercise of rights.

What measures are implemented to ensure the security of personal data?
We adopt appropriate technical and organizational measures to ensure a level of security appropriate to the risk, which we periodically review and improve, aimed at guaranteeing the security and protection of your personal data in terms of its availability, authenticity, integrity and confidentiality, as well as those intended to prevent its loss, misuse, alteration, treatment or unauthorized access, as well as any other form of illicit treatment.

Is there data communication to third parties?
Within the scope of our activity, we may resort to subcontractors who process your data on our behalf, which implies access, by these entities, to such data. When this happens, we take the appropriate measures, contractually foreseen, in order to ensure that these third parties, subcontractors, partners or in a group relationship, present sufficient and adequate guarantees for the execution of technical and organizational measures and that they will act only in accordance with our instructions.

Are international transfers of your personal data made?
It may happen that we have to communicate personal data to third countries or international organizations outside the European Economic Area. In this case, we will strictly comply with the applicable legal provisions, not carrying out international transfers of personal data to entities that do not offer guarantees of maintaining the level of protection required by the RGPD.

How do we use “cookies”?
To find out more about cookies and how we use them on our website, please consult our Cookies Policy.

Contact
If you have any questions or concerns about how we handle personal data, you can contact our Data Protection Officer:
Contacts of the Data Protection Officer
Email: [email protected]
Address:  My Cute Pooch | Bolflex, Lda.
Rua Nicolau Coelho
4610-733 Felgueiras

The Data Protection Officer is responsible for ensuring that any review or update of this policy is carried out in accordance with the requirements of the GDPR, as well as responding to requests for the rights of holders, namely whenever they intend to exercise the rights provided for in point 7 of this Privacy Policy.

Revision of our Privacy Policy We reserve the right to change the content of this privacy policy without prior notice, without prejudice to the fact that we will inform you on our site/website, in particular, whenever this happens. The user is bound by the new terms when browsing our website.

Organization contacts 

Email: [email protected]

Address:
My Cute Pooch | Bolflex, Lda.
Rua Nicolau Coelho
4610-733 Felgueiras

Contact of the National Data Protection Commission

CNPD - National Data Protection Commission

Av. D. Carlos I, 134, 1º1200-651 Lisboa

T (+351) 213 928 400F (+351) 213 976 832
[email protected]