Privacy Policy

Homepage
1. INTRODUCTION

In this policy, we provide you with information on how Urano Balsâmico - Unipessoal, Lda. ("Company," "We," or "MeaQuasar") collects and processes your personal data through the use of the online store meaquasar.com, in accordance with the rules of Regulation (EU) 2016/679 of April 27, 2016 (General Data Protection Regulation) and Law No. 58/2019 of August 8. This includes any data you may provide when purchasing products through this website.

It is important that you read this privacy policy to fully understand how we use your data and why. This Privacy Policy is regularly updated and subject to change without prior notice. We recommend that you check it regularly. This version is effective as of August 15, 2023.
2. RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA

The entity responsible for processing personal data provided on the online store meaquasar.com ("Online Store," "We," or "MeaQuasar") is Urano Balsâmico - Unipessoal, Lda., headquartered at Rua Barata Salgueiro, No. 37, 2nd Floor, 1250-042 Lisbon, registered with the Commercial Registry Office of Porto under the unique registration and tax number 517415925, operating under the brand MeaQuasar.
3. HOW TO CONTACT MEAQUASAR IF YOU HAVE QUESTIONS OR WISH TO EXERCISE YOUR RIGHTS

If you have any questions about the processing of personal data on our Online Store, or if you wish to exercise your rights in this regard, you can contact us via email at hello@meaquasar.com or by mail to MeaQuasar's offices at Rua Barata Salgueiro, No. 37, 2nd Floor, 1250-042 Lisbon.
4. PERSONAL DATA PROCESSED BY MEAQUASAR

The personal data referred to in this privacy policy are the information about you that directly or indirectly identify you. We may collect, use, store, and transfer different types of personal data about you, categorized as follows:

Purchases in the Online Store

When you purchase products from the Online Store, you will need to provide us with the necessary data for billing and delivery: name, address, postal code, locality, region, country, email, phone number, and optionally, tax identification number (NIF).

If you want the invoice to be issued in the name of another entity, or if the delivery is to be made to a different location or entity, you can add an additional address to your account or fill out separate billing and delivery forms, including fields such as name, email, phone number, tax identification number (NIF), address, locality, postal code, region, and country.

We use this data to process your order, issue the invoice, deliver products, and respond to your post-sale support requests. The legal basis for processing this data is the purchase and sale contract we enter into with you.

Newsletter

MeaQuasar regularly sends promotional newsletters to customers and visitors who have subscribed to the newsletter on the website. These newsletters inform subscribers about products, updates, campaigns, and marketing initiatives. The legal basis for processing this data is your consent.

The newsletters we send contain a tracking pixel—a small graphic embedded in the file—that provides us with information about the opening of newsletters and any included links. This helps us optimize newsletter distribution and identify content of greater interest to our customers and subscribers.

You can unsubscribe from the newsletter at any time and without cost by clicking on the link provided in the footer. By doing so, your email will be automatically removed from the recipient list, and you will no longer receive the newsletter.

Contact Form

When you send us a message through the contact form on the Online Store, we store your contact data (name and email) and the message to provide a personalized response to your query. This processing is based on the legitimate interest of MeaQuasar in responding to contact inquiries directed to us.

Email Contacts

When you send us an email, such as requesting information about our products, we process your contact data and the content of your message to address your inquiry. This processing is based on either the need to carry out pre-contractual measures upon your request or the legitimate interest of MeaQuasar in responding to contact inquiries.

Cookies

We use cookies, pixels, and similar technologies to analyze traffic data from visits to the website, including information about your usage of the Online Store. This supports our marketing activities and helps prevent payment-related fraud.

Some of these cookies may collect personal data, such as your Internet Protocol (IP) address, login data, browser type and version, time zone setting, browser plug-in types and versions, operating system, platform, and other technologies on the devices you use to access the website.

The legal basis for processing this data is your consent, and cookies will only be installed with your authorization. We recommend that you read our Cookie Policy for more detailed information on the cookies we use and their purposes.
5. RETENTION PERIOD OF YOUR PERSONAL DATA

The data we collect will be processed for the time strictly necessary to fulfill the purposes for which they were obtained. When the maximum retention period is reached, your personal data will be anonymized or securely deleted.

The most relevant retention periods are as follows:

Purchases: We will process your data for the time necessary to manage the purchase of the products or services you acquired, including any returns, complaints related to product purchases or service assistance under warranty, for a period of 3 years and 1 month. Data required for legal obligations, such as billing data, will be retained for the period required by law, which is 10 years.

Newsletter: Your data will be processed until you notify us that you no longer wish to receive the newsletter or as long as you remain an active subscriber. An active subscriber is one who opens the newsletter and/or clicks on at least one link within it at least once within a 2-year period. Inactive users who have not opened any newsletters within the last 2 years will be removed from the database, and their data will be deleted.

Contact Form and Email Contacts: We will process your data for the time necessary to respond to your inquiry. This data will then be archived together with documentation related to any purchase you make, or if there is no order, it will be deleted after 3 months.

Cookies: We will process your data for the duration of the active cookies. You can review these periods in our Cookie Policy.
6. RECIPIENTS OF PERSONAL DATA COLLECTED BY MEAQUASAR

The personal data we process may be shared with our employees and entities subcontracted by us to provide support services on our behalf, under our responsibility and supervision. These entities include:

  • Technology service providers and their subcontractors and partners
  • Banking and payment processing entities
  • Transportation service providers
  • Accounting service providers
  • Digital marketing service providers
7. TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION

In most cases, the personal data we collect will be processed in Portugal or within the European Union. Some information may be sent to other countries where the company providing the infrastructure for our store is established or where they have service providers, including Canada (where Shopify is headquartered) and the United States of America.

When we send personal information outside the European Economic Area (EEA), United Kingdom, or Switzerland, we do so in accordance with applicable law, including Canadian law, which the European Commission considers to provide an adequate level of protection.

When personal data is sent to other countries, for example, to Shopify's subcontracting entities, this company is required to provide adequate assurances of security and data protection comparable to those of the European Union. This may include demonstrating an adequate level of protection according to the European Commission's criteria or signing a data processing agreement that includes the Standard Contractual Clauses approved by the European Commission.
8. WHAT SECURITY MEASURES PROTECT YOUR DATA

MeaQuasar employs physical, technological, and organizational security measures to protect personal data against destruction, loss, alteration, unauthorized disclosure, or access.

Some of these measures include:

  • The entire website and online store platform use an encrypted HTTPS/SSL connection, adhering to best security practices recommended for online services with data transactions.
  • We do not store any external payment system data (credit cards, debit cards, or Multibanco references) on our server. This data is handled and stored solely by banking and payment processing entities that provide this service to us.
  • The data we obtain is stored in encrypted databases, and regular backups are performed to reduce the possibility of data loss in the event of a system failure. The hosting server also features a firewall and standard web hosting protection.
  • We monitor website access to prevent, detect, and prevent unauthorized access. The platform we use is protected by a security module that limits and blocks attempts at unauthorized access and analyzes and blocks malware attacks.
  • The number of individuals with access to your data is restricted and limited to the purposes indicated above.
  • Partners and subcontracted suppliers who process personal data are required to demonstrate equivalent security measures.
9. YOUR RIGHTS AS A DATA SUBJECT AND HOW TO EXERCISE THEM

Depending on the purpose and legal basis of your data processing, you have the following rights:

  • Access, update, or correct inaccurate data we have about you. It's important that the personal data we have about you is accurate and current.
  • Request the erasure of your personal data when it is no longer necessary for the purposes for which it was collected or when there is no longer a legal basis for processing it.
  • Request the deletion or limitation of the use of your data when it may be inaccurate or is no longer necessary for the original processing purpose but cannot or should not be deleted.
  • When data is processed based on your consent, you have the right to withdraw that consent at any time. The method to withdraw consent for receiving newsletters is explained in the "Newsletter" section.
  • In cases where the legal basis for data processing is consent or a contract entered into with the Store, you can also request the portability of personal data you have provided to us in a structured, commonly used, and machine-readable format to transmit it to another entity.
  • When data is processed based on our legitimate interest, you may object to the processing of your data.
  • You also have the right to lodge a complaint with the National Data Protection Commission (CNPD) regarding any issue related to the processing of your personal data if you believe your rights have not been properly upheld or if you are unsatisfied with our response to a request to exercise your rights. You can contact the CNPD via email at geral@cnpd.pt or through the forms available on the website https://www.cnpd.pt/.