Privacy and Personal Data Protection Policy
1. Scope
1.1 The privacy and personal data protection policy is intended to regulate the processing of personal data to be carried out by BONS BAGOS when using the website www.bonsbagos.com and the services made available therein (hereinafter, the “Services”).
1.2 The collection and processing of personal data carried out by BONS BAGOS complies with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation - GDPR) and other applicable legislation.
1.3 Personal data is considered to be any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identification number or to one or more specific elements of their physical, physiological, mental, economic, cultural, or social identity.
1.4 As a general rule, we do not collect sensitive data. Whenever sensitive data is made available in compliance with a legal obligation or voluntarily and at the user's initiative, we assume your explicit, free, and unequivocal consent to process this information for the purposes for which it was provided.
1.5 By providing your personal data, the user expressly consents to the collection and processing thereof under the terms defined in this privacy policy.
1.6 This privacy policy applies to any user, regardless of whether they have registered on the website or not.
1.7 Any hyperlinks to websites external to BONS BAGOS are not covered by this privacy statement.
2. Data controller
2.1 BONS BAGOS, LDA, with registered office at Rua Fernando Pessoa, number 14, R/C, 1700-190 Lisbon, registered at the Notary's Office of Leiria under the unique registration number and NIPC 516830694, with a share capital of €2,000.00 (one thousand euros).
2.2 Relationship with Shopify and Shopify Network Intelligence
Our store is hosted on Shopify Inc. Shopify provides us with the online e-commerce platform that allows us to sell our products and services. Your data is stored through Shopify's data storage, databases, and the general Shopify application. They store your data on a secure server behind a firewall.
To improve your experience and the security of our store, we use enhanced Shopify Services, including Shopify Network Intelligence . This means your personal data (including transaction and browsing information) may be shared with Shopify and combined with data from other merchants in the Shopify network.
Shopify uses this aggregated data to generate insights that enhance advanced features such as:
- Protect our store and network from fraudulent transactions.
- Improve your shopping experience and offer personalized features.
- Allow us to deliver more relevant advertising to you based on your activity on our store and other stores in the Shopify network.
By using our website, you consent to your information being shared with Shopify and other third parties for these purposes. For more details on how Shopify processes your data, please see the Shopify Consumer Privacy Policy .
3. Data collected
- Data provided directly by the holder.
- Data collected within the scope of the relationship established with the holder of such data.
- Personal data requested from the holder processed with their consent.
4. Object
4.1 The processing of personal data includes, in particular, the registration, collection, consultation, use, adaptation, alteration, storage, destruction, among other operations referred to in article 4, paragraph 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
5. Type of data collected
5.1 BONS BAGOS, within the scope of its activity, collects and processes personal data necessary for processing orders and communicating with customers, processing requests for information and any complaints, statistical analysis, as well as its use for direct marketing purposes, online advertising (segmentations based on 1st party data), processing in this context data such as: name, addresses, country, telephone number, tax number, email address and date of birth.
5.2 The personal data collected is processed electronically and in strict compliance with personal data protection legislation, being stored in specific databases, created for this purpose and which guarantee its security and confidentiality in accordance with accepted information technology, technical and organizational measures, in order to protect against loss, alteration, destruction, misuse in general or that the data collected is used for a purpose other than that for which consent was given by the data subject.
5.3 If you wish to subscribe to the newsletter on the website or if you are asked for more information, you will be presented with a confirmation request that you have accepted the privacy and personal data protection policy.
5.4 If you complete any of the forms available for the purposes described above, we consider your conscious, express and unequivocal consent provided for the activation and subsequent use of the same.
6. Purpose
The use of the collected data has the following purposes, namely:
- Processing online orders, requests, requests or clarification of queries to the holder, through the website or applications.
- Processing requests for information about products, services, direct marketing communications, campaigns, promotions, statistical purposes and personalized content, with prior consent to do so.
- Create a personal account to be used to purchase products through the website.
- Processing customer complaints, suggestions and grievances.
- Perform profiles and analyses on customer behavior.
- Keep customers informed about the latest products, offers, opportunities, via email, postal mail, SMS.
- Use of data (email and telephone) for online advertising campaigns, uploading the data to platforms that allow impacting these same users on these platforms such as Meta (Facebook, Instagram), Google, TikTok, etc.
7. Legislation
7.1 BONS BAGOS guarantees the processing of personal data in accordance with current legislation regarding its collection, processing, use, disclosure, storage and privacy.
8. Raw data
8.1 BONS BAGOS will not process personal data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, nor will it process genetic data, biometric data, data relating to health or data relating to the sexual life or sexual orientation of the holder.
9. Registration
9.1 By accessing or using our services and participating in marketing activities promoted by BONS BAGOS, the user agrees to BONS BAGOS's privacy and personal data protection policy, giving consent to its collection and processing for the purposes mentioned in item 6, providing such data directly and explicitly. Failure to provide personal data or providing partial provision of personal data by the data subject may limit or prevent the provision of services, campaigns, or any other promotional and/or commercial activities.
10. Collection
10.1 Personal data may only be collected in the event of:
- The data subject purchases products online.
- Contact BONS BAGOS via email or phone.
- Fill out a form.
- Agree to participate in marketing activities and/or campaigns and receive commercial information.
- Register on the BONS BAGOS website.
- Online advertising campaigns with the aim of collecting emails so that we can later send newsletters (example: Facebook Lead Generation, etc.)
11. Consent to receive information
11.1 The data subject will give prior consent to receive commercial communications for marketing purposes, and may object at any time by written communication addressed to BONS BAGOS. Such commercial information may be sent by BONS BAGOS via email, telephone, SMS, or any other electronic means of communication, social networking sites, Web 2.0, or any mobile content or method.
12. Transmission
12.1 In addition to legal obligations, your personal data may be shared with:
a) Shopify Inc., for the purposes of hosting the platform, processing orders, and providing the Enhanced Services (Shopify Network Intelligence), as described in section 2.2.
b) Online advertising platforms (e.g. Meta, Google) to allow targeting of campaigns based on primary data (email, telephone), with your consent.
c) Other third-party entities, such as carriers, for the exclusive purpose of performing the services you have contracted (e.g., delivery of your order).
13. Access, alteration or forgetting
13.1 The data subject is granted the right to access and rectify the data processed, and may, at any time, withdraw consent for the processing and request the deletion of the data, by means of written communication addressed to BONS BAGOS.
13.2 Exercising your rights with Shopify
In addition to the rights you can exercise directly with us, you can also manage how Shopify uses your data for the Enhanced Services. To exercise your rights to withdraw consent or object to Shopify processing your data for these purposes, please use the Shopify Privacy Portal .
14. Duration of data retention
14.1 BONS BAGOS will make reasonable efforts to ensure that it retains data about the data subject only for as long as necessary in relation to the purpose for which it was collected, or as required under any contract or applicable legislation, for a maximum period of 5 (five) years.
15. Applicability
15.1 BONS BAGOS's privacy and personal data protection policies apply to the processing of personal data carried out within the scope of its commercial activities and the provision of services, in accordance with the principles of lawfulness, loyalty and transparency.
16. Cookies
16.1 For some services, cookies (text files saved on the user's computer to personalize visits) may be used to count the number of visits to the website without personally identifying the user. This type of cookie does not store or collect any personal information about the user, and its installation can always be controlled through the user's browser.
17. Control authority
17.1 The supervisory authority is the National Data Protection Commission (CNPD), with headquarters at Rua de São Bento no. 148-3º 1200-821 Lisbon.
18. Communications
Any communication regarding the processing of personal data must be sent to BONS BAGOS via email: geral@bonsbagos.com
Any changes will be immediately posted on this same web page, so we recommend that you visit this page periodically to stay up to date with the latest version.
12. Transmission
12.1 In addition to the obligations referred to in the Law applicable to data protection or the safeguarding and protection of its own interests, BONS BAGOS will not share any personal data with third parties, with the exception of online advertising platforms with the possibility of segmentation based on personal data (email, telephone) 1st party data.
13. Access, alteration or forgetting
13.1 The data subject is granted the right to access and rectify the data processed, and may, at any time, withdraw consent for the processing and request the deletion of the data, by means of written communication addressed to BONS BAGOS.
14. Duration of data retention
14.1 BONS BAGOS will make reasonable efforts to ensure that it retains data about the data subject only for as long as necessary in relation to the purpose for which it was collected, or as required under any contract or applicable legislation, for a maximum period of 5 (five) years.
15. Applicability
15.1 BONS BAGOS's privacy and personal data protection policies apply to the processing of personal data carried out within the scope of its commercial activities and the provision of services, in accordance with the principles of lawfulness, loyalty and transparency.
16. Cookies
16.1 For some services, cookies (text files saved on the user's computer to personalize visits) may be used to count the number of visits to the website without personally identifying the user. This type of cookie does not store or collect any personal information about the user, and its installation can always be controlled through the user's browser.
17. Control authority
17.1 The supervisory authority is the National Data Protection Commission (CNPD), with headquarters at Rua de São Bento no. 148-3º 1200-821 Lisbon.
18. Communications
Any communication regarding the processing of personal data must be sent to BONS BAGOS via email: geral@bonsbagos.com
Any changes will be immediately posted on this same web page, so we recommend that you visit this page periodically to stay up to date with the latest version.