Privacy Policy and Personal Data Protection

The privacy policy and personal data protection of CAMIN aims to make holders aware of the general rules for the treatment of personal data, which are collected and processed in strict compliance with the provisions of the personal data protection legislation in force at all times, namely the Regulation (EU) 2016/679 of the European Parliament and of the Council from the 27th of April 2016 (denominated RGPD).

CAMIN respects the best practices in the field of security and protection of personal data, having taken the necessary technical and organizational measures to comply with the General Data Protection Regulation (GDPR) and ensure that the processing of personal data is lawful, fair, transparent, and limited to authorized purposes.

In this privacy and data protection policy, CAMIN aims to guarantee and protect the rights of our customers and anyone visiting our domain or any subdomains owned by CAMIN, particularly concerning the privacy of personal data, treating them for the following purposes:

- We collect personal data from visitors to this website through the use of online forms, email hyperlinks, and the contact us page. We collect your details when you email us with an inquiry. We may also have collected your details when we met you at an event or you came to one of our presentations or training sessions.

- While using our service, we may ask you to provide us with certain personally identifiable information that can be used to contact or identify you. Personally identifiable information may include, but is not limited to:

• Email address

• First name and last name

• Phone number

- When you submit your data to us, either through the website, by email, or in person, it is collected by Mailchimp and used by us in a variety of ways, specifically:

• Providing information about products and services

• Providing and personalizing our services

• Dealing with your inquiries and requests

• Administering membership of our newsletter distribution list

• Conducting market research

- We do not pass on our data to any third party.

In accordance with the law, we disclose the procedures of operation and the responsibility involved.

The collected data will not be processed for any other purposes than those specified here. CAMIN reserves the right to update or modify its privacy and data protection policy at any time, particularly to adapt it to legislative changes. Additionally, this privacy and data protection policy extends to its subcontractors who, within the contractual relationship, may need to access the data, in compliance with the provisions of the GDPR. By visiting our website at www.camininteriors.com or any of its subdomains, you consent to the terms of our privacy policy.

Scope

CAMIN's privacy policy applies to personal data collected in person or during navigation of the website www.camininteriors.com. CAMIN's privacy policy does not extend to any other entities unrelated to its legal personality.

Personal data

For the purposes of the GDPR, personal data is considered to be any information, of any nature and regardless of its format, including sound and image, relating to an identified or identifiable natural person. An identifiable person is considered to be an individual who can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers, or one or more specific elements of their physical, physiological, genetic, mental, economic, cultural, or social identity.

Types of Data

The information recorded by www.camininteriors.com can be divided into two generic types: those collected automatically by computer systems, and those provided by the user on the website and/or in person at our services.

Data collected automatically - Cookies - are text files with digital information that are stored on the user's hard drive after accessing a web page. The next time the user accesses the previously visited page, this file signals its presence.

CAMIN uses cookies on its website to store information, such as your personal preferences when you visit our website. This may include a simple popup or a link to various services we provide, such as forums. Additionally, we also use third-party advertising on our website to support maintenance costs. Some of these advertisers may use technologies such as cookies and/or web beacons when they advertise on our website, which will also receive your personal information, such as IP address, ISP, browser, etc. This function is generally used for geotargeting (showing Lisbon advertisements only to readers from Lisbon, for example) or displaying targeted ads to a specific type of user (such as showing restaurant ads to a user who regularly visits cooking sites, for example). The user has the power to disable their cookies in their browser options or make changes in antivirus program tools, such as Norton Internet Security. However, this may change how you interact with our website or other websites. This may affect or not allow you to log in to programs, websites, or forums on our network or other networks.

The data requested from users and/or clients; name, telephone number, and email address are recorded and processed through our own computer systems, using properly licensed proprietary software.

Manual collection occurs with the authorization and consent presented personally on physical media by the data subject.

Additionally, for tax purposes, CAMIN records and processes data for accounting registration activities, as well as those related to current and commercial activities. The registration and processing of this data are carried out to the extent of the means and resources available, in compliance with the provisions of the GDPR.

Entity Responsible for Data Processing

CAMIN is responsible for the registration and processing of personal data of its data subjects.

Data Processing The processing of personal data consists of an operation or set of operations performed on personal data or sets of personal data, whether by automated means or not. These operations include collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure, or destruction.

The processing of personal data by CAMIN is governed by the principles of lawfulness, fairness, and transparency, with strict respect for the privacy, rights, freedoms, and fundamental guarantees of its data subjects.

In this context, CAMIN undertakes to keep the collected data confidential to the extent of the available technology, disclosing the information processed only as necessary, and taking additional measures within its reach to prevent its loss, misuse, or unauthorized manipulation.

Personal data is collected as part of customer information management for the aforementioned purposes and in accordance with the law.

Data Sharing

CAMIN does not share, in any way, form, or purpose, any data of its data subjects and clients. Exceptions are made for cases of sharing personal data with subcontractors and partners of CAMIN within the scope of contractual management, and if required to do so by legal obligations, particularly to law enforcement, judicial, tax, and regulatory entities. CAMIN has implemented appropriate technical and organizational measures to ensure that the processing of personal and clinical data meets the requirements imposed in Article 28(1) of the GDPR. CAMIN exclusively engages subcontractors who comply with the provisions of the mentioned article and meet all the requirements for data processing as stipulated by the law.

Retention of Personal Data

The period during which personal data is stored and retained may vary depending on the purpose for which the information is processed, always taking into consideration compliance with applicable legal provisions. Legal requirements that mandate the minimum retention of data prevail. Therefore, unless there is a specific legal requirement, CAMIN will store and retain the data during the contractual relationship and for a minimum period of 5 (five) years counting from the last time it was used or from contact with its owner or for the pursuit of the purposes for which the data was collected or subsequently processed, as defined by law.

Right of the Data Subject

As users of CAMIN, data subjects are guaranteed the right to access, rectify, update, limit, and erase their personal data at any time (except for data that is legally unavailable for erasure), the right to object, withdraw consent without compromising the lawfulness of processing based on consent, and the right to data portability. To exercise these rights, the data subject or client should request the update, correction, or permanent deletion (right to be forgotten) of their data by simply sending an email expressing their request to any of CAMIN's email addresses or in writing to CAMIN's headquarters. In the case of requests for erasure, the removal will be carried out as soon as possible, with an estimated period of no more than 30 (thirty) days for the removal to take effect. CAMIN reserves the right to retain the minimum necessary information when there is a prevailing legal reason for doing so.

Security

CAMIN implements and puts into practice all security measures within its reach and resources to ensure the protection of electronic communications. However, it cannot guarantee the absolute inviolability of its systems. While internet communications can be encrypted, we cannot guarantee the absence of malicious attacks and/or unauthorized viewing of information within that scope. Sending information electronically is never completely secure.

Update of the Privacy Policy

CAMIN reserves the right to modify this privacy policy and personal data protection without prior notice. However, it is committed to communicating any changes as soon as possible, especially if they significantly impact the use of our services.

Right to lodge a complaint without prejudice to the option of submitting complaints directly to CAMIN through the provided contact channels - email, letter, or in person - the client has the right to lodge a complaint directly with the supervisory authority, namely the National Data Protection Commission (CNPD), using the contact information provided by that entity on their website www.cnpd.pt.

General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27.

Last update: June 1, 2023.