Privacy Policy

The Marketplace Platform – BairrocomercialChaves, managed by the Municipality of Chaves, is committed to protecting the privacy of its users. This privacy policy describes how personal data is collected, used, stored and protected, in accordance with the General Data Protection Regulation (GDPR) and Law No. 58/2019, of August 8.

Introduction

This policy applies to all personal data collected through our platform and mobile application. By using the platform, the user agrees to the collection and use of information as stipulated in this policy.

Collection of Personal Data

Types of Data Collected

The Marketplace BairrocomercialChaves may collect the following personal data:

Identification Data: Name, surname, email address, telephone number;
Account Data: Username, password;
Payment Data: Bank information (e.g., IBAN), Data related to payment methods;
Navigation Data: IP address, cookies, geolocation;
Communication Data: Messages sent through customer support, Notes, reviews and questions left about products;
Satisfaction Data: Responses to satisfaction surveys.

Collection Methods

Data collection occurs in the following situations:

Registration on the Platform: During the account creation process, Users provide necessary personal information;
Navigation and Use of Features: Through cookies and other technologies, the Marketplace collects data about Users’ browsing behavior, including pages visited and time spent in each section;
Interaction with Customer Service: Information is collected during interactions with customer support, including calls, emails and chats;
Responses to Surveys and Feedback: User satisfaction data is collected through questionnaires and feedback forms sent after purchases or interactions.

Purposes of Data Collection

BairrocomercialChaves uses personal data for:

Contract Execution and Management: Management of purchase and sale contracts or service provision;
Order Processing: Management and processing of purchase orders;
Communication with Customers: Clarification of questions and effective communication with users;
Processing Information Requests: Response to requests for additional information;
Complaint Processing: Management of complaints, including regulatory proceedings, pre-litigation proceedings or exercise of rights in legal proceedings;
Statistical Analysis Activities: Conduct statistical analyses to improve the services offered;
Systems Development: Verification, maintenance and development of systems and statistical analyses.
Direct Marketing Communications: Sending marketing communications, if you have consented to the processing of your personal data for this purpose;
Fraud Prevention and Combating: Implementation of measures to prevent and combat fraud;
Request for Feedback: Request for feedback on products or services purchased;
Conducting Satisfaction Surveys: Conducting surveys to assess customer satisfaction;
Event and Campaign Management: Management and participation in events, contests and promotional campaigns.

Who has access to data

The Management Team of the BairrocomercialChaves Platform takes all precautions to preserve the security of personal data against any loss, unauthorized access, modification, intrusion, alteration, disclosure or destruction of data it holds.

Information Access:

The Platform Management Team: The management team of the BairrocomercialChaves platform has access to information from both merchants and buyers, strictly for the purposes of managing and operating the platform;
Sellers: Sellers have access to buyer information, but only to the extent necessary to process orders and provide services. This access is strictly controlled, and sellers are not authorized to use personal data for any purpose other than fulfilling their contractual obligations.

The Platform Management Team BairrocomercialChaves cannot be held responsible for risks associated with Internet operation, which it does not control. We invite users to be particularly careful about risks in terms of data loss or breach of confidentiality of transmitted data. The same applies in case of force majeure or any event beyond the control and responsibility of the Platform Management Team.

Permission Management

Permissions can be managed directly in device settings or in the application.

User Rights

In accordance with the General Data Protection Regulation (GDPR), users have the following rights:

Right of Access: This right allows users to consult information about the processing operations that concern them, such as the type of data and the source of collection. It also allows you to request a copy of all information related to the user, regardless of the legal basis that supports the processing;
Right of Rectification: If there is any error in the provided data or if it is necessary to complement the information, users have the right to update their data, regardless of the legal basis for processing;
Right to Withdraw Consent: If they have given their consent to the processing of personal data, users have the right to withdraw this consent at any time;
Right to Restrict Processing: Users can request limitation of the processing of their personal data;
Right to Portability: This right allows users to request that their data be made available, when processed on the basis of consent or a contractual relationship. In this case, the responsible entity must provide the data in a technically usable format;
Right of Opposition: Users have the right to object to the processing of their data, especially when the processing is based on the “legitimate interest” of the responsible party, provided that this interest is not considered “overriding”;
Right to Erasure: If data is processed on the basis of consent or legitimate interest (not overriding), users can request early deletion of their data. To do so, simply express the intention to withdraw consent or object to processing;
Right of Disposition After Death: Users have the right to set directives regarding the retention, deletion or communication of their personal data that apply after their death.

Users can exercise the above-mentioned rights through the Electronic Form available for this purpose.

Data Retention

Users’ personal data is retained according to the following guidelines:

Payment Data: Stored for a period of up to 3 years after the transaction date;
Contractual Relationship: Data is retained for a period equivalent to the duration of the contractual relationship between the parties. If there is inactivity exceeding 3 years since the last contact with the Customer, the data will be deleted;
Exercise of Rights: Data related to requests to exercise rights are retained for 5 years after the response to the request, after which they will be deleted;
Fraud Fighting: Data is retained for 7 years from the date of response to the request, after which it will be archived for an additional period of 7 years;
Report of Illegal Products: Data related to reports are maintained for 3 years from the date of the report, after which they will be deleted;

Security of Personal Data

We implement appropriate technical and organizational measures to protect personal data. However, users should be aware that no data transmission over the Internet is completely secure.

Changes to the Privacy Policy

We reserve the right to update this policy, recommending that users regularly consult the document for possible updates.