1. PERSONAL DATA CONTROLLER
1.1 We, being the entity known as IBARABOL, UNIPESSOAL, LDA., with its head office at Avenida Dr. Manuel de Arriaga, no. 72, Loja 22, Carcavelos, Lissabon, Portugal (hereinafter referred to as the "Provider"), handle personal data in compliance with legal provisions for the protection of personal data, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council dated 27 April 2016 concerning the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and the repeal of Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR"), as well as in line with our internal regulations and principles.


1.2 Personal data protection is regulated by Law No. 58/2019 of August 8th, known as the Data Protection Law.


1.3 In the case of filling in the feedback form, the person (you, hereinafter referred to as the “Client”) agrees to the processing of the his following personal data: name and surname, email address, telephone number and other data provided in the order - e.g. in the Note section, etc. (hereinafter collectively referred to as the “Personal Data”).


1.4 The Provider also obtains Personal Data automatically from server log files and from data provided by the web browser of website visitors to the extent for dealing with cyber incidents (investigation of security breaches) and routine traffic monitoring.


1.5 The Client agrees with the processing of the Personal Data by the Provider for the purposes of exercising rights and obligations for the implementation of business connection, establishing business contacts and possible subsequent contractual relationships. For the purpose of carrying out business activities, the Provider processes data from communication with the data subject. The legal reason for this processing is the legitimate interest of the Provider.


1.6 The Client confirms that the personal data provided are accurate and that he has been instructed that the provision of personal data is voluntary.


1.7 In the event that the Client considers that the Provider is processing his personal data in violation of the protection of the Client's private and personal life or in violation of the law, especially if the personal data are inaccurate with regard to the purpose of their processing, the Client may ask the Provider to communicate:
a) purposes of the processing,
b) categories of Personal Data concerned,
c) recipients or categories of recipients to whom the Personal Data were or will be disclosed;
d) envisaged period for which the Personal Data will be stored, e) existence of the right to request rectification or erasure of the Personal Data from the controller, the right to object,
f) right to lodge a complaint with a supervisory authority,
g) all available information on the source of the Personal Data, unless obtained from the data subject,
h) fact that automated decision-making, including profiling, takes place.

1.8 If the Client requests information about the processing of his personal data, the Provider is obliged to provide this information to the Client. The Provider has the right to demand an appropriate remuneration for the provision of the information pursuant to the previous sentence not exceeding the costs necessary for the provision of the information.

1.9 The Client has the right to obtain from the Provider the erasure of the Personal Data relating to the given data subject without undue delay, and the controller is obliged to erase the Personal Data without undue delay if one of the following reasons applies:
− the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed,
− the data subject withdraws consent and there is no other legal ground for the processing,
− the data subject objects to the processing and there are no overriding legitimate grounds for the processing,
− the Personal Data have been unlawfully processed, − the Personal Data must be erased to comply with a legal obligation,
− the Personal Data have been collected in connection with the offer of information society services pursuant to Article 8 (1) of the GDPR.

1.10 The Client is entitled to rights under Law No. 58/2019 dated August 8th, and the right to revoke their consent for the processing of personal data by submitting a written request to the Provider's registered office. The withdrawal of consent becomes effective upon delivery to the Provider.

1.11 The Client is entitled to lodge a complaint to the Portuguese data protection authority (‘CNPD’).

2. COOKIES

2.1 “COOKIES” are special data files that are necessary for our website to function properly and which we sometimes store in your computer or mobile device or other electronic device (tablet, etc.), just like most other websites. In no case we use cookies to collect, process, disseminate or store personal data or for purposes other than those listed here.

2.2 Cookies are text files that websites store in your computer or mobile device when you start using the websites. This allows the websites to remember your preferences and actions you have taken on the websites for a certain period of time, so you do not have to re-enter this information.