Scope

This privacy notice applies to the processing of personal data of the users (“Users”) of NOVA SBE’s Online Merchandising Store (“website”).

Who are we?

Personal data will be processed by Universidade NOVA de Lisboa, legal entity number 501559094, headquartered in Rua da Holanda n.º 1, 2775-405 Carcavelos, represented here by Faculdade de Economia da Universidade Nova de Lisboa – Nova School of Business and Economics (“NOVA SBE”); and by Fundação Alfredo de Sousa (“Fundação”), legal entity number 513754881, headquartered in Campus de Carcavelos, Rua da Holanda, n.º 1, 2775-405 Carcavelos.
NOVA SBE and Fundação assume the role of independent data controllers in the processing of personal data, as defined and employed in accordance with personal data protection legislation.

What personal data do we process?

The categories of personal data that NOVA SBE and Fundação collect and process are:

Device information, which is collected automatically when you access the website using cookies, log files, web beacons, tags, or pixels. Examples include:

• Version of web browser, IP address, time zone, cookie information, what sites or products you view, search terms, and how you interact with the Website;

Order information. Examples include:

• Name, billing address, shipping address, payment information (including credit card numbers, email address, and phone number.

Customer support information. Examples include:

• Name, E-mail, Address, Mobile Phone, NIF
  
  

The Website is not intended for the use of individuals under the age of 16. NOVA SBE and Fundação do not intentionally collect personal data from children. If you are the parent or guardian and believe your child has provided us with personal data, you can exercise your rights as explained below.

What are the purposes of personal data processing?

NOVA SBE and Fundação process personal data for the following purposes:

a) Device information is processed to load the website accurately for you, and to perform analytics on Website usage to optimize it;

b) Order information is processed to provide products or services to you to fulfil your order contract, to process your payment information, arrange for shipping, and provide you with invoices and/or order confirmations, communicate with you about your order.

c) Customer support information is processed to keep track of customer interactions, issues, and feedback. This helps in providing a better overall experience for our customers, to understand common issues or complaints allowing us to address recurring problems and make improvements to our products or services, thereby reducing the likelihood of similar issues in the future and to help tailor interactions to you as an individual customers

d) Your data is also used for screen the orders for potential risk or fraud;

e) Marketing or advertising relating to the products or services.
The use of personal data for a different purpose is evaluated based on the criteria outlined in Article 6(4) of the GDPR.

Lawfulness of processing for processing personal data

NOVA SBE and Fundação processes personal data:

a) For the purpose of Website functionality the applicable legal basis is the performance of a contract.

b) For the purpose of Website optimization the applicable legal basis is consent.

c) For the purpose of fulfil your order the applicable legal basis is the performance of a contract.

d) For the purpose of customer support the applicable legal basis is Pre-contractual diligences, contract execution, and the legitimate interest of NOVA SBE and the Foundation.

e) For the purpose of assessing orders for fraud the applicable legal basis is legal obligation and legitimate interests.

f) For the purpose of marketing the applicable legal basis is consent.
You have the right to request information about the criteria used to determine the legitimate interest. Please contact store@novasbe.pt for more information.

What are the data subject rights?

The law grants the data subject a set of rights that can be exercised at any time. These rights include the right to object, often used in relation to certain types of communications, as well as the right of access, erasure, restriction of processing, and rectification. In addition, the data subject has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

The data subject can exercise these rights by emailing store@novasbe.pt or sending a letter to the postal address [Nova School of Business and Economics Campus de Carcavelos at Rua da Holanda, 12775-405 Carcavelos - Portugal]. You can also contact NOVA SBE's Data Protection Officer at dpo@unl.pt and financeira@fads.pt.

The data subject also has the right to lodge a complaint with the Portuguese supervisory authority – Comissão Nacional de Proteção de Dados at https://www.cnpd.pt/.

 

To whom we transmit personal data?

In the course of this business, NOVA SBE and Fundação transmit your personal data to processors, other data controllers and joint controllers. These entities include the following:

-  A Creatura, Lda, located in Portugal, who manages the Website and the orders;

- Shopify International Ltd, who gives its platform to power the Website. You can read more about how Shopify processes your personal data here: https://www.shopify.com/legal/privacy/app-users. Shopify may also process your personal data for their own purposes as the data controller, over which NOVA SBE or Fundação do not have control.

How long do we keep personal data?

The retention periods established by NOVA SBE and Fundação are as follows:

a) Data used for Website functionality will be kept until the maximum period of two years;

b) Data used for Website optimization will be kept until maximum period of two years];

c) Data used to fulfil your order will be kept until 10 years accordingly to article 19 of DL n.º 28/2019 february 15, article 40 of Portuguese Comercial Code

d) Data used for customer support will be kept until the consumer requests deletion or as long as necessary to provide services and fulfil contractual obligations;

e) Data used to assess orders for fraud will be kept until until the consumer requests deletion or as long as necessary to provide services and fulfil contractual obligations;

f) Data used for marketing will be kept until Data will be processed as long as the relationship with the data subject is relevant or until the consent given is revoked

Privacy Policy changes

Please note that this privacy notice may be updated. If there are substantive or material changes that alter how the personal data is processed, the data subject will be promptly notified within a reasonable timeframe. This includes changes to the processing purposes, data controller identity, or recipient categories.