In accordance with the General Data Protection Regulation (GDPR), which enters into force on 25 of May 2018, we inform our users and customers about the type, scoop and purpose of the processing of your personal data when using our Web site / online Shop at "https://www.curanatura.com/". Personal data is any information that relates to an identified or identifiable natural person.

1. Responsible Entity

The responsible entity or person within the meaning of the EU General Data Protection Regulation (GDPR) is a natural or legal person who, alone or together with others, decides on the purposes and mechanisms of processing personal data. The responsible entity for the personal data processed in this Web Site / online shop within the meaning of the GDPR is:

Company (henceforth "we", "us", "our"):

Kontaktotal - Consultores Associados, Ltd.
Av. Bombeiros Voluntarios, 49
3130-202 Soure - Portugal

Tel: (+351) 239 069 354 - 96 69 505 61
Gerente Natércia Moura
Email: info@curanatura.com

2. Visiting our Web site

While you are visiting our Web site, the server collects the following information from your device: browser type and version, operating system, the previously visited website ("Referrer"), IP address and time of the page view.

We collect and process this data to ensure the trouble-free operation of our Web site / Online Shop and to detect, fend off and prosecute a misuse of our services. Furthermore, we use the collected data for statistical purposes to evaluate, for example, with which devices and browsers our platform is accessed to adapt our offer based on the needs of users and to assure continuous improvement.

The data processing is based on Article 6 (1) (f)of the GDPR. All above mentioned personal data will be deleted no later than twelve months after your last visit on our Web site / online Shop.

Statistics are collected via Statcounter, https://statcounter.com/, Guinness Enterprise Centre, Taylor's Lane, Dublin 8, Ireland.

3. Placing Orders in our online Shop

If you place an order in our online shop, we process your name, your billing address, your telephone number and your e-mail address, as you specify during the ordering process. Insofar as you provide additional data when placing your order (for example, a different delivery address or a telephone number), we also process this data.

We process the data specified in paragraph above electronically for the proper performance of the contract, specifically for delivering, invoicing, registration of payments and the processing of returns and complaints. This data processing is based on Article 6 (1) (b) of the GDPR.

We retain this information until all mutual claims arising from the respective contractual relationship with you have been completely settled and the commercial and fiscal retention periods to which we are subject have expired.

For a contract between you and us it is necessary that we receive your name, the delivery address and your e-mail address. The necessity of providing this data results from legal regulations . Without providing this data, you cannot conclude a contract or order with us.

At the end of the contract we do not apply automated decision making for data processing and profiling.

4. About Customer Accounts

You can optionally create a customer account in our online shop. The data required for this and processed by us can be found on the create new account page. The customer account will be set up exclusively at your request. The legal basis is therefore your consent under Article 6 (1) (a) of the GDPR. We retain personal data associated with your customer account until you request to delete it. Personal data from already ended contracts or orders remains with the retention periods, the same that applies to orders without creating a customer account, regardless of orders with or without a customer account.

Request Customer Account Deletion

In your Client Area (Manage personal data)

Use the form

5. Delivery and Payment

Sending physical goods purchased by contracts order orders, we will send the name and address of the recipient to the shipping service provider , identified on the check-out process , for the purpose to deliver the goods to you and, if applicable, returns of your order to us based on Article 6 (1) (b) of the GDPR.

For the payment of your purchase, the payment service provider of your choice will collect and process on your behalf the necessary data for the payment, as your name, card or bank account number and / or other information required for the payment method you have chosen. Additional data protection regulation of the payment service provider chosen by you applies in addition to you.

Receiving a payment, we process the data transmitted to us by the payment service provider.

Payment data processing is proceeded in accordance with the Article 6 (1) (b) of the GDPR. We retain this information until all mutual claims arising from the respective contractual relationship with you have been completely settled and the commercial and fiscal retention periods to which we are subject have expired.

6. Suporte Providers

To support our order and selling process (order management, invoicing, accounting, delivery and, if applicable, returns processing), we contract services from Invoicexpress - Rupeal, 1050-030 Lisbon-Portugal , to which we provide the order processing data mentioned in the section about ordering products from us in accordance with the Article 28 of the GDPR.

As our technical service provider for operating the eCommerce Software of our Web site / online Shop on the Internet, we contract an Epages license (epages GmbH, 20355 Hamburg, Deutschland) from epages certified partner Viamodul, Lda., 2610-141 Amadora - Portugal, who contract third party entities for hosting and associated services in accordance with the Article 28 of the GDPR.

7. Contact form and sending e-Mail Messages

If you use the contact form on our website, we will process your name, e-mail address, telephone number (if provided by you), and message as you have introduced the information into the form. No information of you is stored in databases and the information is only send by an e-mail messaging.

Only as a registered user and logged in, you can optionally receive a copy of the message.

If you send us a message by e-mail, we save your message with the sender information (name, e-mail address, and any other information added by your e-mail program and the e-mail servers). For the reception, storage and sending of e-mails, we contract an Internet Service Provider (ISP) who complies in accordance with the Article 28 of the GDPR.

The legal basis for this data processing is our legitimate interest in answering your message and being able to respond to possible follow-up questions in accordance with the Article 6 (1) (f) of the GDPR. We will delete the information collected from your message no later than twelve months after the last communication with you about your request, subject to the following paragraph.

If you provide us with a legally relevant declaration on the contractual relationship (for example, a revocation or a complaint), the legal basis for the processing, regardless of the means of transmission, is also the Article 6 (1) (b) of the GDPR. In such a case, we will delete the data related to your declaration as soon as all reciprocal claims from the contractual relationship have been finally settled and the commercial and tax retention periods have expired.

8. Newsletter

If you have subscribed to our newsletter, we will inform you by e-mail about new products, offers, services and functions of our shop. Your e-mail address will not be transmitted to third parties. The content always refers to our products and services and may refer to third-party content, but only content directly related to our offer and relevant to the subscriber. We do not send messages on behalf of third parties or agreements with third parties. You will not receive more than one newsletter a week. You may at any time informally object to the use of your e-mail address for promotional purposes without incurring any costs other than those incurred for the transmission, e.g. the use of the internet, sending a letter, etc..

If you revoke your consent to use your e-mail address for promotional purposes, you can cancel your subscription at any time by clicking the unsubscribe link in the footer of all received newsletters or the "newsletter" link on our website / online store. You will receive a confirmation e-mail with a link that you must click on (Double-Opt-Out). After that, your subscription status changes to " subscription canceled ". Your email address remains in the subscriber list, but the canceled subscription status ensures that no messages are sent to this email address or used for any other purpose or campaign. If you have subscribed to more than one newsletter from us, the cancellation must be made individually for each one.

This data processing is based on your consent in accordance with the Article 6 (1) (a) of the GDPR.

To the Newsletters Subscription and Cancellation page

9. Comments and ratings

If you write in our shop a comment or an evaluation to one of our products, we publish your contribution at appropriate place on our shop web together with your username, for which you can also specify a pseudonym. To counteract any misuse of our offer, we store the IP address of the device you are using for a period of twelve months (Article 6 (1) (f) of the GDPR). We reserve the right to delete any unsuitable or thematically inappropriate posts at any time. In addition, we delete published contributions only at the request of the respective author.

10. Use of cookies

When you visit our shop, we deposit a "cookie" on your device. It is a small text file that we can use to recognize your device when you return to our shop for a later visit. With the help of the cookie we can also analyze certain user behavior, for example, which products you are looking at, how long you stay on our site and when and how often you return to our shop. Stored cookies are deleted no later than twelve months after your last visit on our Web site / online Shop.

This data processing is based on Article 6 (1) (f) of the GDPR with the aim of better aligning our product offering with the needs of our Web site / online Shop visitors and of optimizing the functions of our Web site / online Shop and the efficiency of advertising measures.

You can prevent the creation of cookies by changing the cookie settings of your Internet browser and objecting to the creation of cookies for our Web site or for all websites. There you can also delete already stored cookies.

11. Google Analytics

We use Google Analytics, a web analytics service of Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereafter "Google"). Google places a cookie on your device. With this cookie, Google can collect information about how you use our website. This information is transmitted to a server in the US, where it is evaluated by Google and made available to us. The legal basis is Article 6 (1) (f) GDPR, namely our legitimate interest in the evaluation and optimization of our internet site.

As part of the EU-US Privacy Shield Agreement, Google has committed to comply with the data protection laws of the European Union.

We use Google Analytics with activated IP anonymization. This means that your IP address will usually be shortened within the scope of the GDPR so that the IP can no longer be relied upon you. Only in exceptional cases the full IP address will be sent to a Google server in the US and shortened there. The IP address provided by your browser will not be merged with other data provided by Google. You can prevent the storage of cookies by setting your browser software accordingly and delete cookies on your device.

12. Social Media

Social media buttons can be displayed on our Web site / online Shop. They can be recognized by the logos of the social media platforms (hereinafter "platforms"), which by default appear as follows or with color or color scheme variations:

Facebook: "F" blue button, Twitter: blue, silhouette of a bird, Instagram: colorful scheme of camera, Linkedin: "in" blue button, Pinterest: "P" red button, YouTube: "YouTube" in white button / red, Vimeo: "v" blue button, Google +: "g +" red button, Blogger: "B" orange button, WhatsApps: phone with green button.

The links on the buttons allows to evoke functions like “share” or “recommend” and link to the respective platforms mostly located in the USA. A click on such a link calls the website of the respective platform, whereby the IP address of the calling device as well as the address of the page from which the link is referred ("Referrer") are transmitted to the called platform in the USA. However, we do not collect or process data in connection with the social media buttons.

By using one of the functions of these social networks you are aware and accept the respective privacy policy of each of the entities responsible for the platform.

13. Your Rights

Regarding the personal data we process about you, you have the following rights:

You have the right to ask us to confirm that we are processing personal information concerning to you. If this is the case, we will inform you about the personal data stored about you and the further information in accordance with Article 15 paragraph 1 and 2 GDPR.

You have the right to have your incorrect personal data corrected without delay. Considering the purposes of processing, you also have the right to request the completion of incomplete personal data, including by means of a supplementary statement.

You may request from us the immediate deletion of your personal data under the conditions of Article 17 (1) of the GDPR, unless such processing is required under Article 17 (3) of the GDPR.

You may require us to restrict the processing of your data if one of the requirements of Article 18 (1) GDPR applies. You can request the restriction instead of deletion of your data.

We will disclose any rectification or deletion of your personal data and a restriction of processing to all recipients to whom we have disclosed your personal information, unless this proves impossible or involves a disproportionate effort. We will also inform you about these recipients if you request it.

You have the right to receive the personal information you provide to us in a structured, common and IT readable format, and you may require that we transfer that information to another person without hindrance, as far as technically possible.

As far as a data processing based on your consent, you have the right to withdraw your consent at any time. The revocation of consent does not affect the lawfulness of the data processing that took place until your revocation.

RIGHT TO OBJECT : FOR REASONS ARISING OUT OF ITS SPECIAL SITUATION, YOU MAY, AT ANY TIME, DISCONTINUE THE PROCESSING OF THE PERSONAL RELATED DATA; this right of objection exists regarding to the processing of data which, based on Article 6 (1) (f) of the GDPR, serves our or a third party legitimate interests, unless your interests or fundamental rights and fundamental freedoms, which require the protection of personal data, prevail. If you exert your right to object, we will no longer process the data in question unless we can demonstrate compelling legitimate grounds for processing that outweigh the interests, rights and freedoms of you, or that the processing of the assertion, exert or Defense of legal claims serves.

IN THE CASE THAT WE PROCESS PERSONAL DATA FOR DIRECT ADVERTISING (SUCH AS NEWSLETTERS), YOU MAY OBJECT AT ANY THE PROCESSING OF THE PERSONAL DATA CONCERNED FOR THE PURPOSES OF SUCH ADVERTISING, WITH THE RESULT THAT WE WILL NO LONGER PROCESS YOUR DATA FOR SUCH PURPOSES.

If you believe that the processing of your personal data violates the GDPR, you can submit a complaint to a supervisory authority, in the Member State of your place of residence, your place of work or the place of the alleged infringement. This does not exclude other administrative or judicial remedies.

Request Data ou Consent Changes or Customer Account Deletion

In your Client Area (Manage personal data)

Use the form

14. About this Privacy Policy

We reserve the right to revise and update this Privacy Policy, which is disclosed through our Web Site / Online Store.
Last updated: November 02, 2018