The following data protection declaration applies to the use of our online offer www.pearlsofportugal.com (hereinafter “website”).
We give great importance to data protection. We avoid collecting personal data. The data collected is processed in compliance with the applicable data protection regulations, in particular the General Data Protection Regulation (GDPR).
The person responsible for the collection, processing, and use of your personal data within the meaning of Art. 4 No. 7 GDPR is Pearls of Portugal LDA, Rua de Camões 218, 1. Andar, Sala 2
4000-138 Porto, Portugal (Portugal) Email:firstname.lastname@example.org.
If you want to object to the collection, processing, or use of your data by us in accordance with these data protection provisions as a whole or for individual measures, you can address your objection to the person responsible. You can save and print out this data protection declaration at any time.
2 General purposes of processing
We only collect and use our users’ personal data insofar as this is necessary to provide a functional website, Online Services, and contractual obligations. The personal data of our users is collected and used regularly only with the user’s consent.
3 What data do we use and why
This website is hosted by external service providers (hosts). The personal data collected on this website is stored on the hosts’ servers. This may include but is not limited to, IP addresses, contact requests, meta and communication data, contract data, contact details, names, website accesses, and other data generated by a website.
The hosts are used for the purpose of fulfilling the contract with our potential and existing customers (Art. 6 (1) (f) GDPR) and in the interest of a secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 (1) (f) GDPR).
Our hosts will only process your data to the extent necessary to fulfill their service obligations and will follow our instructions regarding this data.
We use the following hosts:
Siteground, SiteGround Hosting EOOD, 6 Olimpiyska Str., 1166 Sofia, Bulgarien.
Datadebug, Av. da República 885 2ºandar C11, 4450-243 Matosinhos, Portugal
3.2 Access data
We collect information about you when you use this website. We automatically collect information about your usage behavior and your interaction with us and register data about your computer or mobile device. We collect, save and use data about every access to our website (so-called server log files). The access data includes Name and URL of the accessed file Date and time of the access transferred amount of data Notification of successful access (HTTP response code) Browser type and browser version Operating system Referrer URL (ie the previously visited page) Websites, which are called up by the user’s system via our website Internet service provider of the user IP address and the requesting provider We use this log data without assignment to your person or other profiling for statistical evaluations for the purpose of operation, security, and optimization of our Website, but also for an anonymous recording of the number of visitors to our website (traffic) as well as the scope and type of use of our website and services, as well as for billing purposes to measure the number of clicks received from cooperation partners. Based on this information, we can provide personalized and location-related content and analyze traffic, find and fix errors, and improve our services. This is also our legitimate interest in accordance with Art 6 Para. 1 S. 1 f) GDPR. We reserve the right to check the log data retrospectively if there are reasonable grounds to suspect illegal use. We store IP addresses in the log files for a limited period of time if this is necessary for security purposes or for the provision of services or the billing of a service, e.g. B. if you use one of our offers. After canceling the order process or after receipt of payment, we will delete the IP address if it is no longer required for security purposes. We also store IP addresses if we have a specific suspicion of a crime in connection with the use of our website.
3.4 Data to fulfill our contractual obligations
We process personal data that we need to fulfill our contractual obligations, such as name, address, email address, ordered products and services, billing, and payment data. The collection of this data is necessary for the conclusion of the contract. The data will be deleted after the warranty and statutory retention periods have expired. Data that is linked to a user account (see below) is retained in any case for the time that this account is maintained. The legal basis for the processing of this data is Art. 6 Para. 1 S. 1 b) GDPR, because this data is required so that we can fulfill our contractual obligations towards you.
3.5 User account
You can create a user account on our website. If you wish this, we need the personal data requested when you log in. When logging in later, only your email or username and the password you have selected are required. For the new registration, we collect master data (e.g. name, address), communication data (e.g. email address), and payment data (bank details) as well as access data (user name and password). In order to ensure your proper registration and to prevent unauthorized registrations by third parties, you will receive an activation link by email after registration to activate your account. Only after registration has been made will we permanently save the data you have provided in our system. You can have us delete a user account once you have created it, without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this. We will then delete your stored personal data insofar as we do not have to save it for the processing of orders or due to statutory retention requirements. The legal basis for the processing of this data is your consent in accordance with Art. 6 Para. 1 Clause 1 a) GDPR. as far as we do not have to save them for the processing of orders or due to legal retention requirements. The legal basis for the processing of this data is your consent in accordance with Art. 6 Para. 1 Clause 1 a) GDPR. as far as we do not have to save them for the processing of orders or due to legal retention requirements. The legal basis for the processing of this data is your consent in accordance with Art. 6 Para. 1 Clause 1 a) GDPR.
The data requested during the registration process is required to register for the newsletter. The registration for the newsletter is logged. After registration, you will receive a message at the email address provided asking you to confirm your registration (“Double Opt-in”). This is necessary so that third parties cannot register with their email address. You can revoke your consent to receive the newsletter at any time and thus unsubscribe from the newsletter. We save the registration data as long as they are required for sending the newsletter. We save the logging of the registration and the shipping address as long as there was an interest in proving the originally given consent, as a rule, these are the limitation periods for civil law claims, i.e. a maximum of three years. The legal basis for sending the newsletter is your consent in accordance with Art. 6 para. 1 sentence 1 a) in conjunction with Art. 7 GDPR in conjunction with Section 7 para. The legal basis for logging the registration is our legitimate interest in proving that the shipment was made with your consent. You can cancel the registration at any time without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter. The legal basis for logging the registration is our legitimate interest in proving that the shipment was made with your consent. You can cancel the registration at any time without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter. The legal basis for logging the registration is our legitimate interest in proving that the shipment was made with your consent. You can cancel the registration at any time without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every newsletter.
Managing contacts and sending messages:
These types of services allow managing a database of email contacts, phone numbers or any other contact information in order to communicate with the user.
The services may also collect data on what date and time message was read by the user, as well as when the user interacts with incoming messages, for example, by clicking on links contained therein.
Brevo Email (Sendinblue GmbH).
Brevo is a service provided by Sendinblue GmbH for managing email addresses and sending messages.
Personal data collected: Cookie; email; usage data.
Processing location: Germany, France
User database management:
These types of services allow the provider to build user profiles by first using the email address, name or other information submitted by the user to this application, as well as tracking user activity through analytics functionalities. This personal data may also be matched with publicly available information about the user (such as social media profiles) and used to build a personal profile that the provider can display and use to improve this application.
Some of these services may also provide for the sending of timed messages to the user, such as emails that this application links to specific actions.
Brevo Marketing Automation (Sendinblue GmbH SendinBlue SAS).
Personal data collected: Cookie; email; usage data.
Processing location: Germany, France
Conclusion of a contract for commissioned processing:
We have concluded a contract with Brevo in which we oblige Brevo to protect our customers’ data and not to pass it on to third parties.
3.7 Product recommendations
We will send you regular product recommendations by email regardless of the newsletter. In this way, we send you information about products from our range that you may be interested in based on your recent purchases of goods or services from us. We strictly follow the legal requirements. You can object to this at any time without incurring any costs other than the transmission costs according to the basic tariffs. A message in text form to the contact details mentioned in section 1 (e.g. email, fax, letter) is sufficient for this. Of course, you will also find an unsubscribe link in every email. The legal basis for this is the legal permission according to Art. 6 Para. 1 Clause 1 f) GDPR in conjunction with § 7 Para. 3 UWG.
3.8 Email contact
If you contact us (e.g. using the contact form or email), we will process your details to process the request in the event that follow-up questions arise. If the data processing is carried out to carry out pre-contractual measures at your request or, if you are already our customer, to carry out the contract, the legal basis for this data processing is Art. 6 para. 1 sentence 1 b) GDPR. We only process other personal data if you give your consent (Art. 6 Para. 1 Clause 1 a) GDPR) or we have a legitimate interest in the processing of your data (Art. 6 Para. 1 Clause 1 f) GDPR) . A legitimate interest lies e.g. For example, responding to your email.
3.9 Contact form
If you send us inquiries via the contact form, your details from the inquiry form, including the contact data you provide there, will be stored by us to process the inquiry and in the event of follow-up questions. We will not pass this data on without your consent.
The processing of this data is based on Art. 6 (1) (b) GDPR if your inquiry is related to the fulfillment of a contract or is necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of the inquiries addressed to us (Art. 6 (1) (f) GDPR) or on your consent (Art. 6 (1) (a) GDPR), if this was queried.
The data entered by you in the contact form will remain with us until you request us to delete it, revoke your consent to its storage or the purpose for which it was stored ceases to apply (e.g. after your inquiry has been processed). Mandatory legal provisions – in particular, retention periods – remain unaffected.
4. Integration of third-party service providers
4.1 Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited. If the responsible body for the data processing that occurs via this website has its basis outside of the European Economic Area and Switzerland, then the associated Google Analytics data processing is carried out by Google LLC. Google Ireland Limited and Google LLC. hereinafter will be referred to as “Google”.
Google Analytics uses “cookies”, which are text files saved on the site visitor’s computer, to help the website analyze their use of the site. The information generated by the cookie (including the truncated IP address) about the use of the website will normally be transmitted to and stored by Google.
Google Analytics is used exclusively with the extension “_anonymizeIp ()” on this website. This extension ensures the anonymization of the IP address by truncation and excludes a direct personal reference. Via this extension, Google truncates the site visitor’s IP address within member states of the European Union or other parties to the Agreement on the European Economic Area. Only in exceptional situations will the site visitor’s full IP address be transmitted to Google servers in the United States and truncated there. The IP address, that is provided by the site visitor’s browser in using Google Analytics will not be merged by Google with other data from Google.
On behalf of the site operator, Google will use the information collected to evaluate the use of the website, to compile reports on website activity, and to provide other website and internet-related services to the site operator (Art. 6 (1) (f) GDPR). The legitimate interest in data processing lies in the optimization of this website, the analysis of the use of the website, and the adaptation of the content. The interests of the users are adequately protected by the pseudonymization of their data.
Google LLC. has certified its compliance with the EU-US Privacy Shield Framework and on that basis, it provides a guarantee to comply with European data protection law. The data sent and linked to the Google Analytics cookies, eg user IDs or advertising IDs will be automatically deleted after 50 months. The deletion of data whose retention period has been reached is done automatically once a month.
4.2 Facebook plugins (like button)
This website uses plugins from the provider Facebook.com, which are provided by Facebook Inc., 1601 S. California Avenue, Palo Alto, CA 94304 in the USA. Users of our website on which the Facebook plug-in is installed are hereby informed that the plug-in establishes a connection to Facebook, which means that it is transmitted to your browser so that the plug-in appears on the website.
In addition, data is forwarded to the Facebook server through the use, which contains information about your website visits on our homepage. For logged-in Facebook users, this means that the usage data is assigned to their personal Facebook account.
As soon as you, as a logged-in Facebook user, actively use the Facebook plug-in (e.g. by clicking the “Like” button or using the comment function), this data will be transmitted to your Facebook account and published. You can only avoid this by logging out of your Facebook account beforehand.
For more information regarding the use of data by Facebook, please refer to the data protection regulations on Facebook.
4.3 Use of Twitter
Functions of the Twitter service are integrated on our sites. These functions are offered by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. By using Twitter and the “Re-Tweet” function, the websites you visit are linked to your Twitter account and made known to other users. This data is also transmitted to Twitter.
You can change your data protection settings on Twitter in the account settings at http://twitter.com/account/settings.
4.4 Use of Google +1
Collection and disclosure of information:
You can use the Google +1 button to publish information worldwide. The Google +1 button gives you and other users personalized content from Google and our partners. Google stores both the information that you have given +1 for content and information about the page that you viewed when you clicked +1. Your +1 can be displayed together with your profile name and your photo in Google services, such as in search results or in your Google profile, or in other places on websites and advertisements on the Internet. Google records information about your +1 activities in order to improve Google services for you and others.
To be able to use the Google +1 button, you need a globally visible, public Google profile that must contain at least the name chosen for the profile. This name is used in all Google services. In some cases, this name can also replace another name that you used when sharing content via your Google account. The identity of your Google profile can be shown to users who know your email address or who have other identifying information about you.
Use of the information collected:
In addition to the uses described above, the information you provide will be used in accordance with the applicable Google data protection regulations. Google may publish summarized statistics about the +1 activities of the users or pass them on to users and partners, such as publishers, advertisers, or connected websites.
4.5 JotForm form plugin
Our website uses the services of JotForm as a contact form or digital signing tool. The provider is JodForm Inc., 111 Pine St. # 1815, San Francisco, CA 94111. The data entered is temporarily stored at JotForm Inc. in Germany in accordance with EU data protection regulation DSVGO. The cached data is then deleted. The data is only made available to Pearls of Portugal. It will not be passed on to third parties. Details on data protection in English can be found here: https://www.jotform.com/privacy
We use the reCAPTCHA service provided by Google LLC (Google) to protect your submissions via internet submission forms on this site. This plugin checks if you are a person in order to prevent certain website functions from being (ab) used by spambots (particularly comments). This plugin query includes the sending of the IP address and possibly other data required by Google for the Google reCAPTCHA service. For this purpose your input will be communicated to and used by Google. However, your IP address is previously truncated by Google within member states of the European Union or in other states which are party to the agreement on the European Economic Area and is, as such, anonymized. Only in exceptional cases is a full IP address transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of this service. The IP address provided by reCaptcha from your browser shall not be merged with any other data from Google.
By using the reCAPTCHA service, you consent to the processing of data about you by Google in the manner and for the purposes set out above.
This website integrates videos from YouTube. This site is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in enhanced privacy mode. According to YouTube, this mode means that YouTube does not store any information about visitors to this site before they watch the video. However, the enhanced privacy mode does not necessarily preclude the sharing of information with YouTube partners. For example, YouTube connects to the Google DoubleClick network regardless of whether you are watching a video.
As soon as you start a YouTube video on this website, a connection to the YouTube servers is established. This tells the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you allow YouTube to associate your browsing behavior directly with your profile. You can prevent this by logging out of your YouTube account.
Furthermore, YouTube can store various cookies on your end device after starting a video or use comparable recognition technologies (e.g. device fingerprinting). In this way, YouTube can obtain information about visitors to this website. This information is used, among other things, to gather video statistics, improve the user experience and prevent fraud.
Once a YouTube video is launched, it may trigger other data processing operations over which we have no control.
YouTube is used in the interest of an attractive presentation of our online offers. This represents a legitimate interest in the sense of Art. 6 (1) (f) GDPR. If a corresponding consent has been requested, the processing is carried out exclusively based on Art. 6 (1) (a) GDPR; the consent is revocable at any time.
5 Storage period
Unless specifically stated, we only store personal data for as long as is necessary to fulfill the purposes pursued. In some cases, legislators provide for the storage of personal data, for example in tax or commercial law. In these cases, the data will only be stored by us for these legal purposes, but will not be processed otherwise and deleted after the statutory retention period.
6 Your rights as a data subject
According to the applicable laws, you have various rights regarding your personal data. If you would like to assert these rights, please send your request by email or post, clearly identifying yourself, to the address given in Section 1. Below you will find an overview of your rights.
6.1 Right to confirmation and information
You have the right to clear information about the processing of your personal data. Specifically: You have the right to receive confirmation from us at any time as to whether your personal data are being processed. If this is the case, you have the right to request from us free information about the personal data stored about you, along with a copy of this data. Furthermore, there is a right to the following information: 1. the processing purposes; 2. the categories of personal data that are processed; 3. the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organizations; 4. if possible the planned duration for which the personal data will be stored or, if this is not possible, the criteria for determining this duration; 5. the existence of a right to correction or deletion of your personal data or restriction of processing by the person responsible or a right to object to this processing; 6. the existence of a right to lodge a complaint with a supervisory authority; 7. If the personal data is not collected from you, all available information about the origin of the data; 8. the existence of automated decision-making, including profiling, in accordance with Art. 22 para. 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the scope and intended effects of such processing for you. If personal data is transferred to a third country or an international organization, you have the right to be informed about the appropriate guarantees in accordance with Art. 46 GDPR in connection with the transfer.
6.2 Right to rectification
You have the right to request us to correct and, if necessary, complete your personal data. Specifically: You have the right to request that we immediately correct any incorrect personal data concerning you. Taking into account the purposes of the processing, you have the right to request the completion of incomplete personal data – also by means of a supplementary declaration.
6.3 Right to erasure (“right to be forgotten”)
In a number of cases, we are obliged to delete your personal data. Specifically: According to Art. 17 Para. 1 GDPR, you have the right to ask us to delete your personal data immediately, and we are obliged to delete personal data immediately if one of the following reasons applies: 1. The personal data are no longer necessary for the purposes for which they were collected or otherwise processed. 2. You revoke your consent on which the processing was based according to Art. 6 Para. 1 Clause 1 a) GDPR or Art. 9 Para. 2 a) GDPR, and there is no other legal basis for the processing. 3. In accordance with Art. 21 para. 1 GDPR and there is no overriding legitimate reason for the processing, or you object to the processing in accordance with Art. 21 (2) GDPR. 4. personal data was processed illegally. 5. The deletion of personal data is necessary to fulfill a legal obligation under Union law or the law of the member states to which we are subject. 6. The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR. If we have made the personal data public and we are obliged to delete them in accordance with Art. 17 Para. 1 GDPR, we take appropriate measures taking into account the available technology and the implementation costs.
6.4 Right to restriction of processing
In a number of cases, you are entitled to request that we restrict the processing of your personal data. Specifically: You have the right to request that we restrict the processing if one of the following conditions is met: 1. You dispute the accuracy of the personal data, for a period that enables us to do so check the personal data, 2. the processing is unlawful and you refused to delete the personal data and instead requested that the use of the personal data be restricted; 3. we no longer need the personal data for the purposes of the processing, but you need the data to assert, exercise or defend legal claims.
6.5 Right to data portability
You have the right to receive, transmit, or have us transfer personal data concerning you in a machine-readable manner. Specifically: You have the right to receive the personal data relating to you that you have provided to us in a structured, common, and machine-readable format, and you have the right to transmit this data to another person in charge without hindrance from us, provided that 1. the processing is based on consent in accordance with Art. 6 Para. 1 S. 1 a) GDPR or Art. 9 Para. 2 a) GDPR or on a contract in accordance with Art. 6 Para. 1 S. 1 b) GDPR and 2 the processing is carried out using automated processes. When exercising your right to data portability in accordance with paragraph 1, you have the right to obtain that the personal data are transmitted directly from us to another person responsible, insofar as this is technically feasible. 6.6 Right to object You also have the right to object to the lawful processing of your personal data by us if this is due to your particular situation and our interests in processing do not outweigh. Specifically: You have the right to object to the processing of your personal data at any time, for reasons that arise from your particular situation, based on Art. 6 Para. 1 S. 1 e) or f) GDPR; this also applies to profiling based on these provisions. We no longer process personal data, unless we can demonstrate compelling legitimate reasons for the processing, which outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise or defend legal claims. If we process personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for the purpose of such advertising; this also applies to profiling insofar as it is connected to such direct advertising. You have the right to object to the processing of your personal data relating to you, for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 (1) GDPR, for reasons that arise from your particular situation, unless.
6.7 Automated decisions including profiling
You have the right not to be subjected to a decision based solely on automated processing – including profiling – which has a legal effect on you or similarly significantly affects you. There is no automated decision-making based on the personal data collected.
6.8 Right to withdraw consent under the data protection law
You have the right to withdraw your consent to the processing of personal data at any time.
6.9 Right to lodge a complaint with a supervisory authority
You have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, your place of work, or the place of the alleged violation if you believe that the processing of your personal data is unlawful.
7 Data security
We make every effort to ensure the security of your data within the framework of the applicable data protection laws and technical options. Your personal data will be encrypted with us. This applies to your orders and also for the customer login. We use the SSL (Secure Socket Layer) coding system but point out that data transmission over the Internet (e.g. when communicating by email) can have security gaps. It is not possible to completely protect data from third-party access. To secure your data, we maintain technical and organizational security measures in accordance with Art. 32 GDPR, which we constantly adapt to the state of the art. We also do not guarantee that our offer will be available at certain times; Disorders, Interruptions, or failures cannot be excluded. The servers we use are regularly carefully backed up.
8 Disclosure of data to third parties, no data transfer to non-EU countries
Basically, we only use your personal data within our company. If and insofar as we involve third parties in the performance of contracts (such as brokers, lawyers, utility managers etc), they will only receive personal data to the extent that the transmission is necessary for the corresponding service. In the event that we outsource certain parts of data processing (“order processing”), we contractually oblige contract processors to use personal data only in accordance with the requirements of data protection laws and to ensure the protection of the rights of the data subject. A data transfer to places or persons outside the EU outside of the case mentioned in section 4 of this declaration does not take place and is not planned.
The author assumes no liability for the topicality, correctness, and completeness of the information provided on our website. Liability claims against the author, which refers to the material or immaterial damage caused by the use or non-use of the information provided or by the use of incorrect and incomplete information, are fundamentally excluded unless the author can prove that it was intentional or grossly negligent.
All offers are non-binding. The author expressly reserves the right to change, supplement or delete parts of the pages or the entire offer without a separate announcement or to temporarily or permanently discontinue publication.
In the case of direct or indirect references to external websites (“hyperlinks”) that are outside the author’s area of responsibility, a liability obligation would only come into force if the author was aware of the content and it was technically possible and reasonable for him to prevent use in the event of illegal content.
The author hereby expressly declares that at the time of linking, no illegal content was recognizable on the linked pages. The author has no influence whatsoever on the current and future design, content, or authorship of the linked pages. He therefore hereby expressly distances himself from all content on all linked/connected pages that were changed after the link was created. This statement applies to all links and references set within the company’s own website as well as to third-party entries in guest books, discussion forums, link directories, mailing lists, and all other forms of databases set up by the author, the content of which can be accessed externally. For illegal, incorrect, or incomplete content and especially for damage.
The author endeavors to observe the copyrights of the images, graphics, sound documents, video sequences, and texts used in all publications, to use images, graphics, sound documents, video sequences, and texts created by himself or to use license-free graphics, sound documents, video sequences, and texts.
All brands and trademarks mentioned on the website and possibly protected by third parties are subject without restriction to the provisions of the applicable trademark law and the ownership rights of the respectively registered owner. The mere mention does not mean that trademarks are not protected by the rights of third parties.
The copyright for published objects created by the author remains solely with the author of the pages. Duplication or use of such graphics, sound documents, video sequences, and texts in other electronic or printed publications is not permitted without the author’s express consent.
If there is an opportunity to enter personal or business data (email addresses, names, addresses) on the website, the disclosure of this data by the user is expressly voluntary. The use and payment of all services offered are – as far as technically possible and reasonable – also permitted without providing such data or by entering anonymized data or a pseudonym. The use of the contact data published in the imprint or comparable information such as postal addresses, telephone, and fax numbers, and email addresses by third parties to send information that has not been expressly requested is not permitted. Legal steps against the senders of a so-called spam mail in violation of this prohibition are expressly reserved.