Privacy Policy
PRIVACY POLICY
Pedro Sacadura, VAT No. 205 595 103, with registered address at Rua de Pedrouços 72 B, 1400-290 Lisboa, Portugal, is the controller of personal data collected through this website, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable national data protection legislation.
For privacy-related enquiries: info@pedrosacadura.com
1. Data Collected
We may collect the following categories of personal data:
Full name
Email address
Shipping and billing address
Payment details (processed securely by third-party providers — Pedro Sacadura does not store card data)
IP address and browsing data (via cookies — see Cookie Policy)
2. Purposes and Legal Bases for Processing
Purpose
Legal basis (Article 6 GDPR)
Order processing and fulfilment
Performance of a contract — Art. 6(1)(b)
Customer communication regarding orders
Performance of a contract — Art. 6(1)(b)
Invoicing and compliance with fiscal obligations
Legal obligation — Art. 6(1)(c)
Fraud prevention
Legitimate interests — Art. 6(1)(f)
Sending marketing communications (newsletter)
Consent — Art. 6(1)(a) — only where the data subject has expressly provided consent
Website traffic analysis (analytics)
Consent — Art. 6(1)(a) — only where the data subject has provided consent via the cookie manager
Where consent is the legal basis, the data subject may withdraw it at any time, without affecting the lawfulness of processing carried out on the basis of consent prior to its withdrawal.
3. Retention Periods
Personal data are retained only for as long as necessary for the purposes for which they were collected, in accordance with the principle of storage limitation under Article 5(1)(e) of the GDPR:
Category of data
Retention period
Order and billing data
10 years (fiscal and accounting obligation)
Customer communication data
3 years after closure of the dispute or commercial relationship
Marketing data (consent-based)
Until withdrawal of consent
Analytics cookie data
As indicated in the Cookie Policy
4. Sharing of Data with Third Parties
Personal data may be shared with:
Shipping carriers (for delivery purposes)
Payment service providers (for the secure processing of transactions)
Email marketing platforms (only where the data subject has consented to marketing communications)
Personal data will not be sold, transferred, or rented to third parties for commercial purposes.
International transfers: Some third-party service providers (including analytics or email marketing tools) may process data in countries outside the European Economic Area. In such cases, Pedro Sacadura ensures that such transfers are carried out with appropriate safeguards, in accordance with Articles 44 to 49 of the GDPR (including, where applicable, on the basis of standard contractual clauses approved by the European Commission).
5. Your Rights
Under Articles 15 to 22 of the GDPR, the data subject has the following rights:
Right of access (Art. 15): to obtain confirmation as to whether personal data concerning you are being processed and to access such data
Right to rectification (Art. 16): to request the correction of inaccurate or incomplete data
Right to erasure (Art. 17): to request the deletion of your data, in the cases provided for by law
Right to restriction of processing (Art. 18): to request the suspension of processing in certain circumstances
Right to data portability (Art. 20): to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller
Right to object (Art. 21): to object to processing based on legitimate interests or for direct marketing purposes
Right not to be subject to automated decision-making (Art. 22): not to be subject to decisions based solely on automated processing, including profiling
To exercise any of these rights, please contact: info@pedrosacadura.com
You also have the right to lodge a complaint with the competent supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt