Skip to main content
0

No products in the cart.

Privacy Policy

 

The Bio Bairro online platform (www.biobairro.idanha.pt) is managed by the Municipality of Idanha-a-Nova and is committed to protecting the privacy of its users. This privacy policy describes how we collect, use, store and protect personal data, in accordance with the General Data Protection Regulation (GDPR) and Law No. 58/2019.

 

1.Introduction

This policy applies to all personal data collected via our platform and mobile app. By using the platform, you consent to the collection and use of information as set out in this policy.

 

2.Collection of Personal Data

2.1. Types of Data Collected

The Bio Bairro Marketplace may collect the following personal data:

Identification Data: First name, surname, email address, telephone number;
Account Data: Username, password;
Payment Data: Bank details (e.g. IBAN), data relating to payment methods;
Browsing Data: IP address, cookies, geolocation;
Communication Data: Messages sent via customer support, notes, reviews and questions left about products;
Satisfaction Data: Responses to satisfaction surveys.

 

2.2. Methods of Data Collection

Data is collected in the following situations:

1.Registration on the Platform: During the account creation process, Users provide the necessary personal information;
2.Browsing and Use of Features: Through cookies and other technologies, the Marketplace collects data on Users’ browsing behaviour, including pages visited and time spent in each section;
3.Interaction with Customer Services: Information collected during interactions with customer support, including calls, emails and chats;
4.Responses to Surveys and Feedback: User satisfaction data is collected via questionnaires and feedback forms sent following purchases or interactions.

3.Purposes of Data Collection

The Bio Bairro Marketplace uses personal data for:

• Contract Performance and Management: Management of contracts for the sale and purchase of goods or the provision of services;
• Order Processing: Management and processing of purchase orders;
• Communication with Customers: Clarifying queries and communicating effectively with users;
• Processing of Information Requests: Responding to requests for further information;
• Complaints Handling: Managing complaints, including proceedings before regulatory bodies, pre-litigation procedures or the exercise of rights in legal proceedings;
• Statistical Analysis Activities: Conducting statistical analyses to improve the services offered;          • Systems Development: Testing, maintenance and development of systems, and statistical analysis.
• Direct Marketing Communications: Sending marketing communications, provided you have consented to the processing of your personal data for this purpose;
• Fraud Prevention and Combating: Implementing measures to prevent and combat fraud;
• Request for Feedback: Requesting feedback on products or services purchased;
• Conducting Satisfaction Surveys: Carrying out surveys to assess customer satisfaction;
• Event and Campaign Management: Managing and participating in events, competitions and promotional campaigns.

4. Who has access to the data

The Bio Bairro Platform Management Team takes every precaution to safeguard personal data against any loss, unauthorised access, modification, intrusion, alteration, disclosure or destruction of the data it holds.

Access to Information:
• The Platform Management Team: The Bio Bairro platform management team has access to information relating to both sellers and buyers, strictly for the purposes of managing and operating the platform and carrying out their duties in relation to it;
• Sellers: Sellers have access to buyers’ information, but only to the extent necessary to process orders and provide services. This access is strictly controlled, and sellers are not authorised to use personal data for any purpose other than the fulfilment of their contractual obligations.

The Bio Bairro platform management team cannot be held liable for risks associated with the functioning of the internet, over which it has no control. We urge users to be particularly mindful of the risks of data loss or breaches of confidentiality regarding transmitted data. The same applies in the event of force majeure or any event beyond the control and responsibility of the Platform Management Team.

5. Permission Management
Permissions can be managed directly in the device settings or within the app.

 

6. Users’ Rights
In accordance with the General Data Protection Regulation (GDPR), users have the following rights:
• Right of Access: This right allows users to access information about the processing operations concerning them, such as the type of data and the source from which it was collected. It also enables them to request a copy of all information relating to them, regardless of the legal basis for the processing;
• Right to Rectification: If there is an error in the data provided or if further information is required, users have the right to update their data, regardless of the legal basis for the processing;
• Right to Withdraw Consent: If they have given their consent to the processing of personal data, users have the right to withdraw that consent at any time;
• Right to Restrict Processing: Users may request that the processing of their personal data be restricted;
• Right to Data Portability: This right allows users to request that their data be made available when processed on the basis of consent or a contractual relationship. In this case, the data controller must provide the data in a format that is technically usable;   

• Right to Object: Users have the right to object to the processing of their data, particularly where the processing is based on the data controller’s ‘legitimate interest’, provided that such interest is not deemed ‘overriding’;
• Right to Erasure: If data is processed on the basis of consent or a legitimate (non-overriding) interest, users may request the early deletion of their data. To do so, they simply need to express their intention to withdraw their consent or to object to the processing;
• Right to Post-Death Disposal: Users have the right to set out instructions regarding the retention, erasure or disclosure of their personal data that will apply after their death.
Users may exercise the above rights via the online form provided for this purpose.

7.Data Retention
Users’ personal data is retained in accordance with the following guidelines:
• Payment Data: Stored for a period of up to 3 years following the date of the transaction;
• Contractual Relationship: Data is retained for a period equivalent to the duration of the contractual relationship between the parties. If there has been no activity for more than 3 years since the last contact with the Customer, the data will be deleted;
• Exercise of Rights: Data relating to requests to exercise rights is retained for 5 years after the request has been answered, after which it will be deleted;                 • Combating Fraud: Data is retained for 7 years from the date of the response to the request, after which it is archived for a further 7 years;
• Reporting Illegal Products: Data relating to reports is retained for 3 years from the date of the report, after which it will be deleted;

8. Security of Personal Data
We have implemented appropriate technical and organisational measures to protect personal data. However, users should be aware that no data transmission over the internet is completely secure.

9. Changes to the Privacy Policy
We reserve the right to update this policy and recommend that users check the document regularly for any updates.