Enigma Eximio Lda., hereinafter referred to as Docnutry, undertakes to process your personal data in accordance with Regulation (EU) No. 2016/679 of April 27, 2016 (hereinafter referred to as the General Data Protection Regulation or GDPR) and other legislation in force in this field.

Docnutry reserves the right to change its privacy policy, so it is advisable to read this document regularly.

Please read the following text to understand and become aware of the general privacy rules and the way in which the personal data you provide to Docnutry is processed.

This policy identifies who we are, for what purpose we intend to use your data, how we process it, with whom we share it, how long we keep it, as well as the contact details available to you so that you can exercise your rights,

Data controller

Enigma Eximio Lda. is responsible for the processing of personal data collected during use and/or registration on this website, within the meaning of the GDPR.

Docnutry’s contact details are as follows:

(Docnutry) Enigma Eximio Lda
Rua Direita Nº 17 – Reguengo 2070-505 Valada
NIF 518738620
Email: info@docnutry.com
Phone: 936958668

Information collected

In order to become a customer of Docnutry’s online store, you need to register by filling in the form available on the website at www.Docnutry.com.

Personal data is collected when the customer registers or makes a purchase. The following data is collected: name, gender, billing address, delivery address, date of birth, tax number, telephone number, e-mail address, product ordered and prescription when applicable. If the means of payment is bank transfer, the following data will be collected: IBAN and name of the bank account holder. Electronic identification data may also be collected, which may include IP address; cookies or similar technologies; activity logs.

Providing the data requested when registering on the Docnutry website is mandatory for the customer to be able to use/buy the services and products available.

The customer will be able to update the information they have provided, whenever they want and with complete autonomy, in the “My Account” area after logging in, by entering their username and password.

In order for you to subscribe to the Docnutry Blog, the following data is collected: name and e-mail address.

Use and purposes of processing the data subject’s data

In general terms, Docnutry uses the data of the data subject for various purposes, compliance with obligations arising from the law, management of the commercial relationship, supply of the products purchased, provision of the services contracted, adaptation of the services and products to the needs and interests of the client, communication and information actions, to publicize campaigns, promotions, advertising and news about the products and/or services, marketing.

How long the data subject’s data is kept

The length of time for which data is stored and retained varies according to the purpose for which the information is processed. However, there are legal requirements that oblige data to be kept for a minimum period of time. Therefore, whenever there is no specific legal requirement, the data will only be stored and kept for the minimum period necessary for the purposes for which it was collected or subsequently processed, after which it will be deleted.

Like this,

– Personal data such as name, address, contact details, e-mail address, … will be kept for a period of 2 years from the last contact. Data subjects may demand that their data be destroyed or deleted before this period has elapsed, and this will be complied with as long as there are no legal requirements preventing such action. Exceptionally, this period may be extended due to legal requirements.

– Data relating to purchase history is kept for 2 years from the date of purchase. Data subjects may demand that their data be destroyed or deleted before this period has elapsed, and this will be complied with, provided there are no legal requirements preventing such action. Exceptionally, this period may be extended due to legal requirements.

– Data for sending communications (e.g. marketing, blog, newsletter, etc.), it is not possible to know the retention time in advance. This data will be kept for as long as users allow it and the relationship between them and Docnutry is maintained.

Subcontractors

Within the scope of the processing of the data subject’s data, Docnutry uses or may use third parties, subcontracted by Docnutry, to process the data subject’s data on Docnutry’s behalf and in accordance with the instructions given by Docnutry, in strict compliance with the provisions of the law and this Privacy Policy.

Docnutry undertakes to subcontract only those entities that provide sufficient guarantees that appropriate technical and organizational measures will be taken to ensure that the rights of the data subject are upheld. All entities subcontracted by Docnutry are bound to the latter by a written contract which regulates, in particular, the object and duration of the processing, the nature and purpose of the processing, the type of personal data, the categories of data subjects and the rights and obligations of the parties.

As part of the normal operation of Docnutry, the data collected by Docnutry may be shared with the following entities:

– Carriers responsible for delivering parcels

– Entities responsible for the payment processing service selected by the customer

– Entity responsible for Docnutry’s Communications and Marketing

– Website service providers or IT support service providers

– As part of providing advertising services, we may share some limited personal data (e.g. device identifiers, cookie identifiers) with ad exchanges or agencies that manage advertising on third-party websites and apps on which you may see advertising.

– In the event that the data subject contracts services from Docnutry that are provided by other entities responsible for processing personal data, the data subject’s data may be consulted or accessed by these entities, insofar as this is necessary for the provision of said services.

– Under the applicable legal terms, Docnutry may transmit or communicate the data of the holder to other entities in the event that such transmission or communication is necessary for the execution of the contract established between the holder and Docnutry, or for pre-contractual procedures at the request of the holder, in the event that it is necessary for the fulfillment of a legal obligation to which Docnutry is subject or in the event that it is necessary for the purpose of pursuing the legitimate interests of Docnutry or a third party.

If the data subject’s data is transferred to a third party, reasonable efforts will be made to ensure that the transferee uses the data transmitted in a manner consistent with this Privacy Policy.

Transfer of data outside the European Union

The personal data collected and used by Docnutry may be made available to third parties established outside the European Union. If such a transfer takes place, Docnutry undertakes to ensure that the transfer complies with the applicable legal provisions, in particular as regards determining the suitability of such country with regard to data protection and the requirements applicable to such transfers.

Rights of personal data subjects

The rights of personal data subjects are as follows:

– Right to information

– Right of access to personal data

– Right to erasure or right “to be forgotten”

– Right to rectification of your personal data

– Right to restriction of processing of your personal data

– Right to portability

– Right to object to processing

Procedures for the exercise of rights by the holder

The right of access, the right to rectification, the right to erasure, the right to restriction, the right to portability and the right to object can be exercised by the data subject by contacting the Data Controller, filling in the relevant form that will be provided.

Docnutry will respond in writing (including by electronic means) to the holder’s request within a maximum period of one month from receipt of the request, except in cases of particular complexity, where this period may be extended by up to two months.

If the requests submitted by the owner are manifestly unfounded or excessive, particularly due to their repetitive nature, Docnutry reserves the right to charge administrative costs or refuse to comply with the request.

Cookies

In order to provide a better service to the user, we use cookies, i.e. small text files that are placed on the hard disk by a web page server. This technology is used to

– To improve the performance and browsing experience of its users, on the one hand by increasing the speed and efficiency of response and, on the other, by eliminating the need to repeatedly enter the same information;

– The placement of cookies not only helps websites to recognize the user’s device the next time they visit, but is also essential for their operation. The cookies used on the website do not collect personal information that allows the user to be identified. They only store generic information, such as the way or place in which the user accesses the website and how they use it, among other things. The user can always configure their browser to refuse cookies, however, in this case, the website or parts of it may not work as expected;

– Allows you to save your purchase history, list of interests and products in the shopping cart.

Breach of personal data

In the event of a data breach and insofar as such breach is likely to entail a high risk to the rights and freedoms of the data subject, Docnutry undertakes to report the breach of personal data to the CNPD within 72 hours of becoming aware of the incident.

Under legal terms, communication to the owner is not required in the following cases:

– If Docnutry has applied appropriate protection measures, both technical and organizational, and such measures have been applied to the personal data affected by the personal data breach, in particular measures that render the personal data unintelligible to any person not authorized to access such data, such as encryption;

– If Docnutry has taken subsequent measures to ensure that the high risk to the rights and freedoms of the holder is no longer likely to materialize; or

– In the event that communication to the owner involves a disproportionate effort for Docnutry. In this case, Docnutry will make a public announcement or take a similar measure through which the owner will be informed.

Links

Our site may contain links to third-party websites. Docnutry is not responsible for the privacy practices of such websites. We therefore recommend that you read their privacy statements. Docnutry cannot be held responsible or liable for the content and activities of such websites.

Applicable law and jurisdiction

The Privacy Policy, as well as the collection, processing or transmission of Data of the holder, are governed by the provisions of Regulation (EU) 2016/679, of the European Parliament and of the Council, of April 27, 2016 and by the legislation and regulations applicable in Portugal.