This Privacy Policy describes how José dos Reis Fialho & Sons, Ltd., 'Trademark holder' Montado, gathers and processes the personal data of users of the montado.pt website, its clients, and other data subjects who interact with the online store. The GDPR requires, among other points, information about the identity of the controller, purposes, legal bases, recipients, retention periods, and the rights of data subjects.

1. Controller

The controller of personal data is:

José dos Reis Fialho & Sons, Ltd.
National Insurance Number PT504360906
Address Urbanização Quintal Novo, Lot 24, 2475-144 Benedita, Portugal
Email: geral@montado.pt
Telephone: +351 262 929 751

2. Personal Data We May Collect

Montado may collect and process, depending on the applicable purpose, the following categories of personal data:

• identification data, such as first name and surname;
• contact details, such as email, telephone and address;
• billing and delivery details;
• tax identification number, when provided;
• customer account details;
• data relating to orders, payments, returns, and refunds;
• communications exchanged with the Montado;
• newsletter subscription data;
• navigation data, preferences and website usage, including data collected by cookies and similar technologies, where applicable;
• data related to product reviews and ratings.

3. Purposes and Legal Bases for Processing

Montado processes personal data for the following purposes:

a) Order management and contractual execution

To process orders, receive payments, prepare shipments, deliver products, manage returns, provide customer support, and execute the contract concluded with the customer.

b) Compliance with legal obligations

For the issuing of invoices, compliance with accounting, tax, and archiving obligations, response to competent authorities, and other applicable legal duties.

c) Customer account management

To allow registration, authentication, order history lookup, and preference management in the customer's private area.

d) Customer support and communications

To respond to enquiries, complaints, after-sales communications, issues relating to orders, defects, assistance and other interactions with the Montado.

e) Direct marketing and newsletter

For sending promotional communications, news, campaigns, discounts and commercial content, when there is consent from the data subject or another legal basis that permits it.

Safety, fraud prevention and rights protection

To ensure website security, prevent misuse, detect fraud, protect IT systems, exercise or defend legal rights in judicial, out-of-court, or administrative proceedings, and ensure the integrity of business operations.

g) Website measurement, analysis and improvement

To analyse usage statistics, measure performance, improve user experience, evaluate advertising campaigns and optimise website functionality, where applicable legal grounds exist, including consent in legally required cases.

4. Data Recipients

Personal data may be communicated, to the extent necessary, to the following categories of recipients:

• payment service providers, including Stripe e Ifthenpay, or others that may be used;
• transport companies and logistics operators, namely DPD, VASP, CTT, UPS, DHL or other expedition partners;
• billing and accounting service providers;
• website hosting, technical maintenance, development and security service providers;
• Email marketing service providers;
• Digital analytics and advertising service providers;
• public authorities, courts, regulators or other competent bodies, where there is a legal obligation or legitimate reason to do so.

5. International Data Transfers

Some service providers used by Montado may process data outside the European Economic Area. In such cases, Montado will seek to ensure that such transfers occur on the basis of legally appropriate mechanisms, including adequacy decisions, standard contractual clauses approved by the European Commission, or other legally permissible mechanisms.

6. Retention Period

Personal data will be kept only for the period necessary for the purposes that justified its collection and processing, without prejudice to longer periods when they result from a legal obligation, need for proof, prevention of disputes, or exercise or defence of rights.

In general terms:

• The data relating to orders and invoicing will be retained for the legally required period;
• Customer account data will be retained for as long as the account remains active or until a deletion request, unless there is a legitimate basis for retention.;
• data for direct marketing will be kept until the withdrawal of consent or objection by the data subject;
• The data collected by cookies will be retained in accordance with their nature, purpose, and the parameters configured in the consent management system.

7. Data Subject Rights

In accordance with applicable legislation, the data subject may exercise, where applicable, the following rights:

• Right of access;
• right of rectification;
• Right to erasure;
• Right to limit treatment;
• right of objection;
• portability rights;
• the right to withdraw consent at any time where the processing is based on consent, without prejudice to the lawfulness of the processing prior to withdrawal;
• the right to lodge a complaint with the competent supervisory authority, namely the National Data Protection Commission (CNPD).

The exercise of these rights may be requested via the general email address geral@montado.pt.

8. Safety

A Montado shall take appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure, unauthorised access or any other unlawful or improper processing. However, no data transmission over the internet or electronic storage system can be guaranteed to be totally secure, and therefore Montado cannot guarantee complete security in all circumstances.

9. Cookies

The website uses cookies and similar technologies. For detailed information on the cookies used, categories, purposes and preference management, users should consult the Cookie Policy.

10. Changes to the Privacy Policy

Montado reserves the right to change this Privacy Policy at any time. Any changes will be published on the website, taking effect from the date of their disclosure.