Privacy Policy
Decorkris – Casa e Decoração, Lda. (“Home By Kristy”) - Privacy Policy
1. What data we collect
When registering to the website www.homebykirsty.com (“Website”) the Customer will be requested to create a password. The Customer must keep this data strictly confidential, neither revealing nor sharing it with third parties. The Customer is fully and exclusively responsible for the use of this password, as well as any order made, even without knowledge thereof.
When entering our website the User have the possibility of subscribing to our newsletter, and so we collect some Personal Data, such as name and e-mail, which will be treated to receive information on the Home by Kristy brand, namely: institutional and marketing communications, news, exclusive campaigns, invitations to events, and others of a similar nature (“Direct Marketing Communications”).
In the case of Users who purchase online, it will be collect necessary elements to complete the entire commercial transaction and to future necessary contacts, in order to ensure the best customer service, such as complete name, e-mail, NIF [Fiscal Number] and telephone number.
We collect information coming from your use of our website, or from the communications that we send you, allowing you to highlight items or services that may be of interest to users and monitor site performance, become aware of which pages are the most popular, observe the method of connecting between pages more effectively, or determine the reason for some pages displaying error messages. These processes are only used for the purposes of creation and statistical analysis, never collecting personal information. For more information, please refer to the Cookies Policy.
2. The purposes of processing personal data and legal basis
2.1 – Home by Kristy collects and processes Personal Data of Website Users for the following purposes and on the following legal grounds:
– Management of contacts with the User, including response to complaints and requests for exercise of the right of guarantee (execution of contract and / or legitimate interest and / or compliance with legal obligation);
– Invoicing and collection of the order to the User (execution of contract and / or fulfillment of legal obligation);
– Delivery of the order placed by the User (execution of contract and / or fulfillment of legal obligation);
– Registration of the User on the Website (execution of contract);
– Allow access to restricted areas of the Website according to pre-established terms (contract execution);
– Ensure that the website meets the User’s needs, through development and publication of suitable contents matching the interests and requests expressed by the User, improving search capabilities and platform functionalities as well as obtaining the associated or statistic information regarding the type of User profile (analysis of consumption profiles) (consent).
2.2 – Home by Kristy may also send process Personal Data for sending newsletters / Direct Marketing Communications, if the User has given his/her consent for this purpose. At any time, the User may revoke their consent and stop receiving newsletters / Direct Marketing Communications. For these purposes, it will be enough for the User to click on the link available at the end of the newsletter or communication or to send their request for withdrawal of consent to the address: info@homebykristy.com.
3. With whom we share your data
The User’s Personal Data collected by Home by Kristy will only be shared with service providers contracted by Home by Kristy when such sharing is necessary for the performance of a contract established between the User and Home By Kristy, or for the purpose of carrying out pre-contractual procedures at the request of the User, including carriers and service providers in the area of information technology and accounting.
4. Responsibility for data processing
The party responsible for processing the Personal Data is Decorkris – Casa e Decoração, Lda. (hereafter “Home by Kristy”)., based at Urbanização Monte Galé, Lote 6, Vale Rabelho, 8200 Guia, Portugal, registered under the unique number of Registration and Identification of Legal Person 516 537 610, with a share capital of 5,000.00 € (five thousand euros), which makes the Website and all associated products/services available to it and which, in the context, decides which Personal Data will be collected, the means of processing and for what purposes they will be used. For requests and questions related to the processing of Personal Data, Home by Kristy may be contacted at the following address: info@homebykristy.com
The Data Protection Officer («DPO») is responsible for the implementation and validation of this Privacy Policy, as well as for the establishment of clear rules for the processing of Personal Data and ensures that all those who entrust us with the processing of their Personal Data are aware of how Home by Kristy processes it and what their rights as data subjects are. The Home By Kristy EPD can be contacted at the following address: info@homebykristy.com.
5. Your rights
As a data subject, the User has the right to access personal data, as well as the right to rectification, erasure, and portability. You also have the right to request that the processing of your Personal Data be restricted and to object to its processing. If the processing of Personal Data is based on his/her consent, the User has the right to withdraw his/her consent at any time, without affecting the lawfulness of the processing carried out based on the consent previously given.
You may also submit a complaint to the competent control authority, which in Portugal is the National Data Protection Commission (CNPD), whose contact details are available in www.cnpd.pt.
6. How to exercise your rights
To exercise any of your rights listed in the previous section, you must send a written request to the Home by Kristy DPO at the address indicated in section 4 above.
7. Retention of personal data
Home by Kristy ensures that the processing of Personal Data will be carried out only for the period necessary to pursue the purposes for which it is processed. Personal Data with tax relevance will be kept for a period of 10 (ten) years.
If consent is collected for the purpose of sending newsletters / Direct Marketing Communications, the Personal Data will be kept for a period of 2 (two) years from the sending of the last newsletter / communication, or if the consent is not withdrawn.
8. Information security
We work with a focus on the security of your Personal Data, adopting appropriate technical and organizational security measures to protect it from security breaches that cause, accidentally or unlawfully, its destruction, loss, alteration, disclosure, or access, unauthorized.
