Privacy Policy
Website Owner
Corporate Name: Surpresas sem Limite, Lda.
Tax Number: PT 513 705 813
Headquarters: Rua António Conceição Bento 25, 2520-285 Peniche
General Phone: +351 262 782 361 (call to the national fixed network)
General E-mail: perfumariarosa@gmail.com
Registered at the Commercial Registry Office of Peniche
Data Protection Officer (DPO) E-mail: perfumariarosa@gmail.com
Commitment to Data Protection and Privacy
We appreciate your interest in our website and, because we take the protection of your personal data very seriously, we only process data in accordance with the special legal framework of the GDPR – General Data Protection Regulation, applicable since May 25, 2018.
This regulation aims to make the processing of personal data more transparent and to give individuals greater control over their data, even if only applicable to EU citizens. The Data Protection Policy of this website describes how we collect, use, share, and process the personal data of our visitors and customers.
In any situation or use, the user can always remove their personal data from any database of the owner of this website by contacting the DPO, who is the person responsible for data processing, via the data protection officer’s e-mail.
The DPO can be contacted at any time for any questions or suggestions related to the protection of personal data or to exercise rights in this scope. If at any time any user or customer of the owner of this website considers that someone has stolen or had unauthorized access to their personal contact information, they must inform the CNPD within the following 3 days through the link https://www.cnpd.pt/ and file a complaint. The CNPD – Comissão Nacional de Protecção de Dados (National Data Protection Commission) is an independent administrative entity with authority powers, operating alongside the Assembly of the Republic. Its general mission is to control and supervise the processing of personal data, in strict respect for human rights and the freedoms and guarantees enshrined in the Constitution and the law. The Commission is the National Data Control Authority. The CNPD cooperates with data protection control authorities of other States, namely in the defense and exercise of the rights of people residing abroad.
Also, at any moment, the user or customer of the owner of this website can withdraw the consent given for the processing of their personal data; they can access their personal data and request its rectification or erasure from the owner of this website or any third parties who have had access to it. Our customers also benefit from the right to be informed of the existence of any automated processing of personal data (including profiling).
If the owner of this website decides to change any of the resolutions of its privacy policy, we will inform you through a notice placed on our website.
Data Processing
When you visit this website, personal identification data may be requested. This information is necessary for you to enjoy our services, to be informed about service and product offers that are of interest to our customers, to fill out information requests or make bookings and payments, and to improve our customers’ experience on our website. This information is requested and collected when you enter our website, when you register in the personal area, when you make payments, and in many other situations throughout your interaction with the information contained on the website.
The owner of this website only processes personal data voluntarily entered by the user, for example – first and last name, address, date of birth, postal code, country, landline phone, mobile phone, email, tax number or identification document, IBAN or credit card, if collected with the consent of the User / Customer and only for what is strictly necessary to provide the requested information, fulfill requested bookings, and/or purchase services – the User always being informed of the need to access such personal data. The owner of this website does not store personal data for longer than necessary to fulfill the respective purposes of the data processing.
Right to Data Access
In any situation or use, the user can always remove their personal data from any database or email and newsletter list of the owner of this website, by using the link indicated in the emails in question or via email to the DPO’s email address. Users who consult and/or contract our services must state that they are of legal age (18 years old). In the case of contracting by minors, the authorization of parents or guardians is required to enjoy the contracted service.
Third-Party Links
Any transfer of personal data to a third country or another international organization will only be carried out within the framework of compliance with legal obligations or once conformity with the applicable community and national legal rules on this matter is guaranteed. This website may contain links to other websites operated and maintained by third parties. Therefore, any information that our Users may provide to other websites will always be in accordance with the privacy policy of those web pages.
Customer Area
If the customers of the owner of this website choose to create a personal customer account – they will have access to a user area where they can conveniently manage their bookings directly using a password and within a protected area.
The personal data and financial information that may be requested can be entered and processed with total confidence and its sole purpose is to facilitate the future use of the website. This stored information and data can also be deleted at any time by the user within their personal customer account area.
External Services
We further inform you that the data collected for booking and acquiring services from the owner of this website may have to be processed by our partners (transport service providers) and subcontractors (suppliers of our services) as well as by third parties (for example: IT service providers, transport, customer support services, and email sending and other channels, from the booking stage to the processing of data for payment).
Promotional Communication
This website may use automation tools to send newsletters to customers and users. Personal data is used to send promotional communications and relevant service information, for example: to send messages and notifications necessary for customer registration, information regarding the customer’s account, tickets and routes, information about trips that may be of interest to the customer according to their preferences or previous choices.
This consent can be canceled or changed at any time using the links provided in the emails or through the email address of the DPO of the owner of this website.
Website Hosting
Regarding website hosting, the nature of the services provided requires the automatic collection of access data carried out for various purposes. The data processing contract with them, which regulates their responsibility as the website host, allows us to comply with the GDPR.
Automated information: when you visit our website, we receive and collect information that may – under certain circumstances, constitute personal information – and which includes your IP address, referral URL, exit URL, browser software, operating system, date/time, and/or clickstream data.
Cookies
Session Cookies
Cookies are small information files that are stored on the User’s / Customer’s computer through the Internet browser. If the user does not wish to use cookies or wishes to remove cookies, they can prevent their storage through the respective settings and tools of their browser. However, blocking them may limit or even prevent the correct functioning of this website.
Facebook Ads & Instagram Ads
This is an essential tool for the success of advertising campaigns on Facebook.
These cookies allow for the analysis of the performance of advertising campaigns on Facebook and other social networks of the group. These cookies allow for the measurement of conversions across multiple devices and optimize the presentation of these ads to people most likely to take action. They also allow for the creation of custom and targeted audiences based on website visitors.
Google Ads
This is an advertising service from Google. It is an essential tool for the success of advertising campaigns on Google.
These cookies allow for the analysis of the performance of advertising campaigns across Google’s various ad platforms. These cookies allow for the measurement of conversions across multiple devices and optimize the presentation of these ads to people most likely to take action. They also allow for the creation of custom and targeted audiences based on website visitors.
Google Analytics
This is a Google service through which, upon registering on a website, a code is received to be inserted into the registered page and, with each display, visit statistics are sent to the system and presented to the website owner. It was mainly created to help webmasters optimize their websites for marketing campaigns.