PRIVACY POLICY

Aquijóias Joalharia e Ourivesaria, Lda. (hereinafter referred to as “Aquijóias” and better identified below), owner and operator of the website www.aquijoias.com (hereinafter the “website”), is concerned with guaranteeing website users, its Customers and potential customers not only full compliance with all legal obligations but also the total privacy of their personal data and the security of transactions carried out through the Online Store, in accordance with the best practices available on the market.

For all due and legal purposes, you can find the full identification and contact details of the entity responsible for processing personal data below:

Name: Aquijóias Jewelry and Goldsmithing, Ltd.
Corporate Taxpayer Identification Number / Commercial Registration: 503107093
Headquarters and postal address: D. Carlos I Shopping Center, Store 13 R/CH, 2500-148 Caldas da Rainha PORTUGAL
Commercial Registry Office: Caldas da Rainha
Email address: aquijoias@hotmail.com
Telephone contact: +351 262 841 820
Data Protection Officer Contact: aquijoias@hotmail.com

The processing of personal data through the website will be carried out under the following terms:

Data Controller

Aquijóias is the entity responsible for the processing of personal data provided by users of the website.

Purposes and legal grounds for processing personal data

Depending on the functionalities of the website you use, your personal data may be processed for different purposes. Below are those purposes and the applicable legal grounds:

1. If you are not yet our Client, in order for us to send you commercial communications by email, SMS, phone, or traditional mail related to our activity, you must provide us with your consent. In this case, the applicable legal ground for processing your personal data will be your consent. This consent may be revoked at any time, without affecting the lawfulness of data processing carried out before such revocation. Refusing consent will prevent us from sending you such communications.

2. If you are already our Client and have expressed interest in this regard, we want to keep you updated at all times about news related to our products and services. Unless you object, we will send you commercial communications via email, SMS, phone, or traditional mail. The applicable legal ground is your express consent.

3. In the context of operating the Online Store, in order to provide you with our products and services, we will process your data for the following purposes:

Execution of the purchase and sale contract entered into with the data subject;
Invoicing;
Payment processing;
Order shipping.

For these purposes, the legal grounds for processing are the execution of a contract (to which the data subject is a party) and compliance with legal obligations.

We may also process your data to perform statistical analyses based on sales made. In this case, the legal ground is our legitimate interest in analyzing website user behavior, purchase history, user segmentation, and customer profiles.

For technical support and after-sales services, it will also be necessary to process your personal data. Here, the legal ground will be the execution of a contract and compliance with legal obligations (such as product warranty).

Retention period of personal data

The retention period of your personal data may vary depending on the purpose for which they are processed:

Commercial communications (with consent): until you exercise your right to object or withdraw your consent.

For Online Store purposes:

For the time necessary to fully comply with the contract, including warranty and after-sales services;
For the legally required periods, including tax obligations.

Statistical analyses: for the same period as invoicing data.

For technical support and after-sales services:

For the time necessary to fully comply with the contract, including warranty and after-sales services;
For the legally required periods.

Disclosure of personal data

Your personal data may be communicated to third parties for compliance with legal obligations or when necessary to provide the contracted services. Whenever processing is carried out by external service providers (subcontractors), we apply strict criteria and sign data processing agreements to ensure compliance with data protection obligations.

Rights of the data subject

As a data subject, you have the following rights regarding the processing of your personal data:

1. Access – You may obtain information on how your personal data are processed and access the data stored.
2. Rectification – You may correct or complete inaccurate or incomplete data.
3. Erasure – You may request the deletion of your personal data when they are no longer necessary for the purposes collected.
4. Objection – In certain circumstances, you may request that your personal data no longer be processed. Processing will stop unless there are overriding legitimate grounds or for the establishment, exercise, or defense of legal claims.
5. Restriction – You may request the limitation of processing in the following cases:

While contesting the accuracy of your personal data;
When processing is unlawful and you oppose erasure;
When the data are no longer needed but are required for legal claims;
While verifying whether legitimate grounds override your objection.

6. Portability – You may request your personal data in a structured, commonly used, machine-readable format, and transmit them to another controller.

To exercise your rights, please contact us at: aquijoias@hotmail.com. Proof of identity may be requested if necessary.

The exercise of these rights is free of charge.

Technical and organizational measures for personal data processing

Aquijóias will implement and maintain appropriate technical and organizational measures to protect data against accidental or unlawful destruction, unauthorized access or disclosure, alteration, or loss, ensuring integrity and confidentiality. Measures include backup mechanisms, restricted access permissions, and secure handling of data.

Aquijóias, its employees, collaborators, and contracted processors are bound by strict confidentiality obligations, using the data only for the purposes stated or under lawful orders from judicial or administrative authorities.

However, users accept that the collection and transmission of data over open networks carry inherent risks, which may allow unauthorized third-party access, beyond Aquijóias’ control. Aquijóias cannot be held responsible for such unauthorized access.

Similarly, by using the website, users may encounter content that violates these terms or applicable law, without Aquijóias’ knowledge or control. Aquijóias cannot be held responsible for such situations.