Privacy Policy

1. Purpose

This Privacy Policy applies exclusively to this website and aims to inform its visitors and users who are data subjects (identified or identifiable natural persons) about the data processing carried out and the principles and obligations we observe regarding the protection of personal data. We aim to ensure the quality, integrity, confidentiality, and privacy of the information provided by our visitors and clients.

2. Privacy and Security

STAND AVENIDA DE CARLOS OLIVEIRA FERREIRA UNIPESSOAL LDA, hereinafter referred to as Stand Avenida Lda, is responsible for this website. Stand Avenida Lda is committed to ensuring the privacy and confidentiality of the personal data collected (any information relating to an identified or identifiable natural person), in accordance with the General Data Protection Regulation, and has security systems and organizational measures in place to prevent unauthorized access, modification, destruction, or addition of data and to detect any data breaches.

3. Collection of Personal Data

Within the scope of its business activities, Stand Avenida Lda processes the following categories of personal data:

  1. civil identification data (name, profession, date of birth, signature, driving license, citizen card, passport, residence permit for foreigners);
  2. tax identification data (tax identification number);
  3. address and contact data (fiscal and/or mailing address, phone/mobile, email);
  4. contractual and asset data (bank name, IBAN, credit card details, vehicle registration document, and car insurance information);
  5. image recording data (video, photographs);
  6. customer preference data (colors, leisure, vehicle features, etc.).

 

4. How Personal Data is Collected

 

  1. Directly from the data subject;
  2. Through the signing of service, purchase/sale, rental, and financing contracts;
  3. Email;
  4. Website;
  5. Phone calls and correspondence from the data subjects;
  6. Social media and other publicly accessible sources;
  7. Indirectly, through private entities that maintain relevant credit information on the data subjects, provided that such databases comply with applicable data protection rules.

 

5. Rights of the Data Subject

The Data Subject is guaranteed the right to exercise the following rights:

  • a) Right of access: the right to obtain confirmation as to whether or not personal data concerning them are being processed, and, if so, the right to access their personal data and information such as (i) the purposes of the processing; (ii) the categories of personal data concerned; (iii) the recipients or categories of recipients to whom the personal data have been or will be disclosed, and whether these recipients are located in third countries or are part of international organizations; (iv) the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period.
  • b) Right to rectification: the right to obtain the rectification of inaccurate personal data concerning them. If the data is incomplete, the data subject has the right to have incomplete personal data completed, including by means of a supplementary statement.
  • c) Right to data portability: the right to receive the personal data concerning them, which they have provided to the controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to whom the data were provided, provided that: (i) the processing is based on consent or a contract, and (ii) the processing is carried out by automated means.
  • d) Right to object: the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them, if the processing is necessary for the purposes of the legitimate interests pursued by the controller or by third parties, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, or for the establishment, exercise, or defense of legal claims. If and when personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing. e) Right to erasure: the right to obtain the erasure of their personal data if (i) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; or if (ii) they withdraw consent where consent is the legal basis for processing; or if (iii) there is no other legal ground for the processing; or if (iv) having exercised the right to object, there are no overriding legitimate grounds for the processing; or if (v) the personal data have been unlawfully processed; or if (vi) the personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject. f) Right to restriction of processing: the right to obtain restriction of processing if (i) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the data; or if (ii) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; or if (iii) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims; or if (iv) the data subject has objected to processing, pending the verification whether the legitimate grounds of the controller override those of the data subject.

6. How to Exercise the Rights of the Data Subject

The Data Subject may exercise any of their rights mentioned above by contacting Stand Avenida Lda, preferably via email at geral@standavenida.pt, indicating in the subject line the Right they wish to exercise. They may also do so by sending a letter to Stand Avenida Lda at EN 113 Nº30 2490-091 Ourém. The Data Subject also has the right to lodge a complaint with the Supervisory Authority (National Data Protection Commission – www.cnpd.pt).

7. Data Retention Period

The personal data collected on this website will be retained for the period strictly necessary for the purpose that determines its use.

8. Changes to the Privacy Policy

Stand Avenida Lda reserves the right to change its privacy policy to adapt it to legislative or case law changes, so careful reading of this document is recommended. Any changes to the Privacy Policy will always be available on this website and are valid from the date of their publication on this website. If you have any questions about our Privacy Policy, please contact us via email at geral@standavenida.pt.

WhatsApp