Privacy Policy & Cookies

Privacy Policy

  1. Who is responsible for processing your data?

This privacy policy (hereinafter, the "Privacy Policy") applies to all personal data provided by the customer to DUFFY WEAR, a registered trademark of Pato Rico, Comércio e Exportação de Artigos de Penas Lda, NIPC 500 843 872, located at Av. Santos e Castro, 130-A 1750-268 Lisbon, (hereinafter referred to as “DUFFY WEAR”), directly through the completion of a consent form or online form.

For the purposes of this Privacy Policy, "Customer" refers to any individual interested in the products and services offered by DUFFY WEAR. DUFFY WEAR, as the data controller, will request the Customer's explicit consent for this Privacy Policy before presenting personal data, when necessary, and for any other aspect requiring prior authorization. The objective of DUFFY WEAR's Privacy Policy is to provide transparency regarding how it processes and protects your data, in compliance with best practices and applicable legislation.

Customers should contact the Data Protection Officer at the email address info@duffy-wear.com for any questions or concerns regarding data protection.

  1. What personal data is processed?

The personal data processed includes the name, marital status, gender, address, phone number, email address, tax identification number, and personal identification number.

  1. For what purposes do we process your personal data and how long do we keep it?

DUFFY WEAR will process the personal data provided by the Customer for the following purposes, based on a legal basis for each processing activity:

  1. Sending requested information regarding products.
  2. Own marketing initiatives and communication of data to third parties for the same purposes (with prior express consent).
  3. Addressing inquiries, managing complaints, and other customer support initiatives.
  4. Management of contests, sweepstakes, and promotions.

DUFFY WEAR will retain customer data for the duration of the contractual relationship. After the end of this relationship, data will be kept for promotional purposes for a period of two years. For other users, the data will also be kept for two years. Data will not be kept longer than necessary for the aforementioned purposes, except where retention is required for the formulation, exercise, or defence of potential claims and/or when allowed by applicable legislation.

  1. What is the legal basis for processing your personal data?
  1. Consent provided by the Customer - for this purpose, a consent form will be presented for the use of your data, which you may withdraw at any time.
  2. Execution and/or performance of a contract with the Customer.
  3. Compliance with legal obligations to which DUFFY WEAR is subject.
  4. Defence of a legitimate interest and/or cases where there are reasons for the use of such data to prevail over the Customer's data protection rights.
  5. Declaration, exercise, or defence of a right in a legal process against the Customer, DUFFY WEAR, or a third party.
  1. Who will your personal data be shared with?

Your personal data may be shared with:

  • Third-party service providers to DUFFY WEAR
  • DUFFY WEAR partners

Personal data may also be processed by subcontracted companies of third-party service providers to DUFFY WEAR, such as for website hosting, email, responding to user inquiries, sending information about new services and products, and special offers. Only the necessary personal data will be provided to these companies for the provision of the service. DUFFY WEAR may disclose or transfer personal data to comply with its obligations with public authorities, in cases required by current legislation, and if necessary, also to entities such as State Security Forces and Judicial Authorities.

Your data will only be processed within the European Union.

  1. What are the Customer's rights?

DUFFY WEAR informs the Customer about the possibility of exercising their rights to access, rectify, delete, object, transfer, and limit the processing of personal data.

  1. Right of Access
    The data subject has the right to obtain confirmation from DUFFY WEAR whether their data is being processed, and if so, to access their personal data and the information as per the law.

If processing is based on the Customer's consent and carried out by automated means, the Customer has the right to receive the data previously provided in a structured, commonly used, and machine-readable format.

If the Customer requests more than one copy of their personal data under processing, third-party service providers to DUFFY WEAR may charge an administrative fee for the associated costs.

  1. Right of Rectification
    The data subject has the right to request from DUFFY WEAR, without undue delay, the correction of inaccurate or incomplete data.

  2. Right to Erasure (“Right to be Forgotten”)
    The data subject has the right to request from DUFFY WEAR the deletion of their data without undue delay, and DUFFY WEAR is obliged to erase the data when, for example, one of the following reasons applies:

a) The data is no longer necessary for the purposes for which it was collected or processed.
b) The data subject withdraws consent for data processing (where processing is based on consent), and no other legal basis for processing exists.
c) The data subject objects to the processing and there are no overriding legitimate interests to justify the processing.

  1. Right to Object
    The data subject has the right to object at any time, and indefinitely, to the processing of their personal data for reasons related to their specific situation.

  2. Right to Data Portability
    If processing is based on the data subject's consent and carried out by automated means, the data subject has the right to receive their personal data in a structured, commonly used, and machine-readable format.

  3. Right to Restriction of Processing
    The data subject has the right to request restriction of processing, if applicable, particularly in the following cases:

a) Disputing the accuracy of personal data, for a period that allows DUFFY WEAR to verify its accuracy.
b) The data processing is unlawful, and the data subject opposes its erasure and requests, instead, the restriction of its use.
c) DUFFY WEAR no longer requires the data for processing purposes, but the data is required by the data subject for the declaration, exercise, or defence of a legal right.
d) If the Customer has objected to the processing, until it is determined whether the legitimate reasons of the data controller override those of the data subject.

Personal data will be handled with care to ensure the realization of the rights mentioned above. Proof of identity may be requested to ensure data is shared only with the rightful owner. Should the Customer wish to exercise any of these rights, DUFFY WEAR will assess the request and respond in a reasonable time, not exceeding 1 month. If unsatisfied, the Customer has the right to lodge a complaint with the National Data Protection Commission, the supervisory authority.

  1. Can consent previously given be revoked?

If consent is legally required for processing personal data, the data subject has the right to withdraw that consent at any time. However, this does not affect the lawfulness of processing based on consent before its withdrawal, nor the subsequent processing of such data based on other legal grounds, such as contract fulfilment or compliance with legal obligations to which DUFFY WEAR is subject.

To revoke consent, the Customer should contact DUFFY WEAR by mail, phone, or email at info@duffy-wear.com.

  1. What security measures do we have in place?

DUFFY WEAR is committed to maintaining the confidentiality of personal data and to safeguarding it, adopting necessary measures to prevent unauthorized alteration, loss, or access, in accordance with applicable legislation.

DUFFY WEAR has implemented the necessary technical and organizational security measures to ensure the security of personal data and prevent its alteration, loss, or unauthorized access or processing, considering the state of technology, the nature of the stored data, and the risks to which it is exposed, whether caused by human actions or physical or natural circumstances, in accordance with applicable legislation.

DUFFY WEAR, concerned with privacy, continuously supervises, controls, and evaluates its processes to ensure compliance with privacy and information security standards.

DUFFY WEAR has a video surveillance system, duly signposted, in compliance with the provisions of Article 8(2) of the Private Security Law (Law No. 34/2013, May 16).

Video recordings obtained from the surveillance system are stored in encrypted format for 30 days from the date of capture, after which they are destroyed (unless retention is required for a legal process).

However, the Customer should be aware that the use of websites and transmission of information via electronic means may occasionally be subject to unlawful access by unauthorized third parties.

  1. Modification of the Privacy Policy

DUFFY WEAR may modify its Privacy Policy in accordance with the applicable legislation. In any case, any modification to the Privacy Policy will be duly notified to the Customer to inform them of changes made to the processing of their personal data and, if applicable, the Customer may grant their consent.

Cookies

  1. What is a cookie?

Cookies are text files containing small amounts of information that a user's device (computer, tablet, or smartphone) downloads when visiting a website. They allow the website to “remember” the user’s device, but not specifically who is using it, and improve the user experience. By associating the identification numbers in cookies with other customer information, for example, when logging into the site, we know that the cookie information refers to you.

  1. What is the purpose of cookies?

Cookies are generally used for various purposes, such as enabling the user to navigate between pages efficiently, implementing user preferences, and improving the browsing experience by personalizing the website according to the user’s browsing behaviour and profile. They can also help ensure that the ads the user sees online are more relevant to their interests.

  1. What cookies do we use?

Our website uses several types of cookies for different purposes, as explained below in section 4 “Categories of cookies on duffy-wear.com”.

Specifically, we use:

A) Session cookies, which last only during a browsing session. They are usually used to facilitate access to our website services, authenticate registered users, and remember what a user has added to their shopping cart.

B) Persistent cookies, which last longer than one visit. They are used to remember user preferences and actions on the site. When the user returns to our site or visits other sites using the same cookies, the site reads the cookies and identifies the user’s browser.