Data Subject Rights
The Data Subject is guaranteed the exercise of the following rights:
a) Right of access: the right to obtain confirmation from Loja do Ouro as to whether or not personal data concerning you are being processed and, if so, the right to access your personal data and information such as (i) the purposes of the data processing; (ii) the categories of personal data in question; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, and whether these recipients are established in third countries or belong to international organizations; (iv) the expected period for which the personal data will be stored, or, if this is not possible, the criteria used to determine this period.
b) Right to rectification: the right to obtain from Loja do Ouro the rectification of inaccurate personal data concerning you. If the data is incomplete, the data subject has the right to have their personal data completed by means of an additional declaration.
c) Right to object: the right to object at any time, for reasons related to your particular situation, to the processing of your personal data, if the processing is necessary for the purposes of the legitimate interests pursued by Loja do Ouro or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject that require protection of personal data, or for the establishment, exercise, or defense of legal claims. If and when personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such purposes.
d) Right to erasure of data: right to obtain from Loja do Ouro the erasure of your personal data, if (i) the personal data are no longer necessary for the purpose for which they were collected or processed; or if (ii) you withdraw consent, if this is the sole basis for the processing of the data; or if (iii) there is no other legal basis for such processing; or if (iv) exercising the right to object to the processing, there are no legitimate interests that prevail and justify the processing; or if (v) the personal data have been processed unlawfully; or if (vi) the personal data have to be erased for compliance with a legal obligation arising from Union or Member State law to which the controller is subject.
e) Right to portability: the right to receive personal data concerning you that you have provided, in a structured, commonly used and machine-readable format, and the right to transmit such data to another controller if: (a) the processing is based on consent or on a contract concluded between the data subject and the controller, and if (b) the processing is carried out by automated means, whenever technically possible.
f) Right to restriction of processing: the right to obtain from Loja do Ouro restriction of processing if (i) the accuracy of the personal data is contested, for a period enabling the controller to verify its accuracy; or if (ii) the processing is unlawful and the data subject opposes the erasure of the personal data and requests, instead, the restriction of its use; or if (iii) the controller no longer needs the personal data for processing purposes, but such data are required by the data subject for the purposes of establishing, exercising or defending a right in legal proceedings; or if (iv) having exercised the right to object, until it is verified that the legitimate grounds of the controller prevail over those of the data subject.
How to exercise the Data Subject's rights
The Data Subject may exercise any of their rights, identified above, by contacting Loja do Ouro, preferably by email at geral@lojadoouro.pt, or by letter to the headquarters located at Bairro de Jericó, R/Ch, Loja 3, 2400-158 Leiria, stating “Personal data” in the subject line and identifying the right they wish to exercise. The Data Subject also has the right to complain to the National Data Protection Commission (www.cnpd.pt).
Retention period for collected data
Personal data collected on this website will be kept for the period of time strictly necessary for the purpose that determines its use, up to a limit of 2 years, and Loja do Ouro may keep it for different periods if other interactions are established that result in the conclusion of a contract between the data subject and Loja do Ouro, or the need for data processing arises from other legal purposes.