PRIVACY POLICY

MINIBARIST, Lda, a limited liability company, headquartered at Rua Fialho de Almeida, No. 14, 2nd Floor, Office Bu12, 1070-129, Lisbon district, tax identification number 510460542, and email info@minibarist.pt and phone number 919 484 838, hereinafter referred to as "MINIBARIST," is the owner of the minibarist.pt domain, where its website is hosted, and is responsible for your personal data.

MINIBARIST values and respects the privacy and personal data of its customers, suppliers, and users of its website, treating them with transparency and respect for the General Data Protection Regulation and other applicable legislation in the countries where it operates.

Therefore, MINIBARIST has developed and provided this privacy policy, where you will find all the information regarding the processing of personal data that you provide to us. We advise reading our privacy policy since browsing and using our website, as well as providing your data, implies that you agree to the policy.

What are personal data and why do we collect them?

Personal data is any type of information or set of information that allows you to be identified, directly or indirectly.

MINIBARIST only collects the data that is necessary to provide a better service, quote, conclude and execute the purchase and sale contract and/or provision of services (if applicable), make and manage reservations, inform you of our offers, and enable a more productive and pleasant browsing experience on our website. The collection of data by MINIBARIST is based on the following grounds: (1) conclusion and execution of a contract between MINIBARIST and the Customer; (2) legitimate interest of MINIBARIST; and (3) consent of the Customer.

Your data may be collected and processed for the following purposes:

Creation of a customer account on the website (1) (2)
Management of the customer account, shopping cart, and orders (1) (2)
Quotation, conclusion, and execution of purchase and sale contracts and provision of services (1)
Reservation management (1)
Management of delivery operations (1) (2)
Customer support management, after-sales service, and returns (1) (2)
Payment management, including refunds (1) (2)
Response to contact requests (2) (3)
Customer satisfaction and complaint management (2)
Maintenance of a record of your contact details (2)
Sending marketing and advertising communications, such as our newsletter (2) (3)
Preparation of MINIBARIST management documents (2)
Development, maintenance, improvement, and management of the website (cookie data) (2)
Statistical, analytical, selection, and segmentation operations for customers (2)
Provision of technical support (2)
Fraud prevention and detection (2)
Ensuring network security (2)

What data do we collect and how do we do it?

For these purposes, we may collect data that includes your full name, complete address, date of birth, tax identification number, email, phone contact, IP address, ISP, message content you send us, and cookie data.

By sending us messages through any means, you are consenting to the processing of the data included in them. Therefore, if you do not want the message data to be collected and processed, you should expressly mention this refusal in your message or later through our email contact.

MINIBARIST does not collect or request sensitive data, including racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, data concerning your health, or sexual orientation. If you transmit any such data to us, the information will be immediately deleted.

We also do not collect data from individuals under 16 years of age. By transmitting personal data to us, you confirm that you are over 16 years old.

MINIBARIST collects your data through the completion of forms available on our website and the interaction you have with our website, including through the browser, newsletter subscription, user data, messages you send us, cookies, IP address, pixel tags, and other technologies related to the operation of the site, including data for targeted advertising.

Whenever the collection and processing of your personal data are not based on the pursuit of a legitimate interest or the conclusion of a contract, MINIBARIST will request your consent.

COOKIES, PIXEL TAGS, AND SIMILAR TECHNOLOGIES

MINIBARIST stores information from your browser to improve and personalize your navigation on this site. This information consists of small text files that are stored in your browser to facilitate navigation and enable certain functionalities. There are also third-party cookies that aim to identify your interests so that we can send you personalized information, perform statistics, customize the browser, remember forms, maintain page security, among others.

Please note that you can control and delete cookies in your browser settings.

All stored information respects data protection, and MINIBARIST will always ask for your consent for the sending of third-party advertising. However, you can withdraw your consent for the storage of cookies and delete them in your browser settings.

To whom can your personal data be transmitted?

MINIBARIST relies on other entities to provide various services, such as transportation services, accounting, marketing, technical support and maintenance, consulting, legal services, among others, to whom it may be necessary to transmit your data in order to perform the services. In these situations, which will only occur due to the need to conclude and execute a contract or pursue a legitimate interest, MINIBARIST only transmits the data strictly necessary for each service and seeks to ensure that these third-party entities comply with protection guarantees. Regarding third-party advertising, it may happen that these advertising agents also receive your personal data for ad targeting (e.g., Google AdSense), which is beyond the control of MINIBARIST and for which it cannot be held responsible.

MINIBARIST may also need to transmit your data to other entities that will be part of the contract you intend to conclude, for the purpose of presenting estimates or organizing the work.

When required by law, we may also have to transmit your data to authorities or third parties, for which MINIBARIST has no control.

Outside of the situations presented, MINIBARIST does not transmit your data to third parties. While browsing our website, you may find links to third-party websites that we consider useful; however, when following links to third-party sites, the responsibility for the protection of your data will lie with the owners of those sites.

How long do we retain your data?

We only keep your personal data for as long as necessary to fulfill the purposes for which it was collected or for a longer period required by law. After this period, your data will be anonymized and/or deleted. Please note that you always have the option to request the deletion of your data.

How do we keep your data secure?

At MINIBARIST, we are committed to ensuring the best practices in the security and privacy of your personal data. We strive to adopt measures that guarantee that access to your data is only granted to our employees and that our services offer the necessary security guarantees to prevent unauthorized alteration, loss, or transmission. To this end, we implement measures such as password protection of our database, the use of a server that ensures high security, among others, which we always seek to update for greater protection.

However, despite all the precautions we take to keep your data secure, no security system is 100% secure.

What are my rights?

As the data subject, you have the following rights regarding your personal data:

Right to Access: The data subject has the right to know if their data is being processed, what data, and how, and can also request to be informed of its communication to any external entity. This right includes the right to access their own data.
Right to Rectification: The data subject has the right to update, complete, or correct their data as needed.
Right to Erasure: The data subject has the right to be forgotten, provided their data is no longer necessary for the purpose for which it was collected, and there is no legal obligation to retain the data.
Right to Restriction of Processing: The data subject has the right to obtain from the data controller the restriction of processing, which implies the deletion of some data when they are no longer necessary, with only the data necessary to fulfill a legal retention obligation or for the future exercise of defending a right in a judicial process remaining archived.
Right to Data Portability: The data subject has, under the terms and conditions defined by law, the right to receive the personal data that concerns them and that they have provided to a data controller in a structured, commonly used, machine-readable format, and the right to transmit this data to another data controller without being prevented by the controller to whom the personal data was provided if: a) The processing is based on consent or a contract; and b) The processing is carried out by automated means and not just in paper files.
Right to Object to Processing: It implies a balance of interests between the need to process the data by the Controller (public interest, legal obligation to retain, protecting the effectiveness of a judicial right) and the individual's interest in not processing their personal data.
Right to Lodge a Complaint: With the competent supervisory authority (Comissão Nacional de Proteção de Dados (CNPD) – Rua de São Bento, 14, 3rd floor, 1200-821 Lisbon – +351213928400 – www.cnpd.pt).