Privacy Policy

TYPES OF DATA COLLECTED

Among the types of Personal Data that the www.Karmel.co.uk website collects, either by itself or through third parties, are: Email, First Name, Last Name, Usage Data, Cookie, Phone Number, Address, Company Name, country, city, billing address, and various types of Data.

Complete details on each type of Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanatory text displayed prior to the collection of Data.

Personal Data may be freely provided by the User, or, in the case of Usage Data, automatically collected using www.Karmel.com.

Unless otherwise specified, all Data requested by www.Karmel.pt is required and failure to provide this Data may make it impossible for www.Karmel.pt to provide its Services. Where www.Karmel.com specifically states that some Data is not required, users are free to stop communicating this Data without any consequences for the availability or operation of the Service.

Users who have questions about which Personal Data are required are welcome to contact the Owner.

Any use of cookies - or other tracking tools - by www.Karmel.com or the third party service owners used by www.Karmel.com will serve the purpose of providing the Services requested by you, in addition to the other purposes described herein. document and the Cookie Policy.

Users are responsible for any Third Party Personal Data that is obtained, published or shared through this Service (www.Karmel.com) and confirms that they have the permission of such third parties to provide the Data to the Owner.

METHOD AND PLACE OF DATA PROCESSING

PROCESSING METHOD

Owner will take appropriate security measures to prevent unauthorized access, disclosure, alteration or unauthorized destruction of the Data.

The Owner assumes the implementation of appropriate physical, electronic and management processes to safeguard and help prevent unauthorized access to personal information and to preserve the security of the Data. These processes take into account the sensitivity of the information we collect, process and store and the current state of technology. Owner follows generally accepted industry standards to protect personal information submitted, both during transmission and upon receipt, including the use of electronic safes and tokenization services from outside service providers. However, no method of transmission over the Internet or a mobile device or online storage method can be considered 100% secure. Therefore, while the Owner may use commercially accepted means to protect personal information, he / she cannot, however, guarantee its absolute security and consequent use in a manner inconsistent with this Privacy Policy.

The Owner assumes no responsibility for information that is disclosed as a result of transmission errors, unauthorized access by third parties or other causes beyond its direct control. The User is recommended to act responsibly as it should also play an important role in protecting their information. You should not share your username, password, or other sensitive information about your account with anyone. If the Owner receives instructions with username and password, they will always assume that these instructions have been changed beforehand.

Data processing is performed using qualified computers and / or IT tools, following organizational procedures and means strictly related to the stated purposes. In addition to the Owner, in some cases the Data may be accessed by certain types of persons in charge involved with the operation of www.Karmel.com (administration, sales, marketing, legal administration) or outside parties (such as third party service providers). , hosting company, IT companies, communications agencies) named, as necessary, as Data Processors by the Owner. The updated list of these parts may be requested from the Owner at any time.

LEGAL BASIS FOR PROCESSING

The Owner may process Personal Data relating to You if one of the following applies:

Users have given their consent for one or more specific purposes; Note: Under some laws the Owner may have permission to process Personal Data until the User objects to this opt-out without having to rely on consent or any other

legal bases to follow. This, however, does not apply whenever the processing of Personal Data is subject to European data protection law;

the provision of the Data is necessary to comply with a contract with the User and / or any pre-contractual obligations thereof

processing is necessary to fulfill a legal obligation to which the Owner is subject;

the processing relates to a task that is performed in the public interest or in the exercise of an official authorization in which the Owner is vested;

processing is necessary for the purpose of legitimate interests pursued by the Owner or a third party;

In any event, the Owner willingly collaborates to clarify what legal basis applies to processing, and in particular if the provision of Data is a mandatory requirement by law or contract, or a requirement to enter into a contract.

PLACE

Data is processed at the Owners' headquarters and wherever other parties involved in the processing are located.

Depending on your location data transfers may involve the transfer of User Data to a country other than your own. To find out more about the place of processing of such transferred Data users may check the section containing the details about the processing of Personal Data.

Users also have the right to be informed about the legal basis of Data transfers to countries outside the European Union or to any international organizations governed by public international law or formed by two or more countries, such as the UN, and about security measures taken by the Owner to protect your Data.

If any such transfers occur, users may find out more by checking the relevant sections of this document or by asking the Owner using the information provided in the contact section.

CONSERVATION PERIOD

Personal Data will be processed and stored for as long as necessary for the purposes for which it was collected.

Therefore:

Personal Data collected for the purposes related to the performance of a contract between Owner and User will be retained until such contract has been fully fulfilled;

Personal Data collected for purposes related to Owner's legitimate interests will be retained for as long as necessary to fulfill those purposes. Users may obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be allowed to retain Personal Data for a longer period whenever the User has given his consent for such processing as long as such authorization has not been withdrawn. In addition, the Owner may be required to retain Personal Data for a longer period of time when required to do so in order to comply with a legal obligation, or in accordance with a warrant from an authority.

Once the retention period expires, Personal Data will be deleted. Thus, the right to access, the right to delete, the right to correct and the right to portability of data cannot be enforced after the retention period has expired.

PURPOSE OF PROCESSING

User Data is collected to enable Owner to provide their Services, as well as for the following purposes: Access to third party service accounts, Contacting You, Viewing Content from External Platforms, Traffic Optimization and Distribution, tags, Anti-spam protection, Remarketing and behavioral purpose, Registration and authentication, Contact management and messaging, Interaction with live chat platforms, Interaction with social networks and external platforms, Interaction with data collection platforms and others Thermal Mapping and Session Recording, Payment Processing, Non-EU Data Transfer and Statistics.

Users may obtain detailed additional information about such processing purposes and the specific Personal Data used for each purpose in the respective sections of this document.

DETAILED INFORMATION ABOUT PERSONAL DATA PROCESSING

Personal Data is collected for the following purposes and using the following services:

MAILING LIST OR NEWSLETTERS (WWW.KARMEL.com)

By subscribing to the newsletter or marketing communications, the User's email address will be added to the contact list of those who may receive email messages that

contain commercial or promotional information about www.Karmel.co.uk. Your email address may also be added to this list as a result of your subscription to this service (www.Karmel.com) or after making a purchase upon your consent.

Personal Data collected: Email and full name.

CONTACT FORM (WWW.KARMEL.PT)

By completing the contact form with their details, users authorize www.Karmel.com to use these details to respond to requests for information, quotation or any other request as indicated by the title of the form.

Personal Data collected: Email, full name and phone number.

JOB APPLICANTS (WWW.KARMEL.com)

If your information is submitted through the www.Karmel.co.uk Service when applying for a position at the institution, the information will be used to consider that application. Owner may retain such information indefinitely. This information may be shared with other companies to assess your qualifications for the position concerned or other available positions, as well as third party operators hired to collect, maintain and analyze job application submissions.

STATISTICS

The services contained in this section enable the Owner to monitor and analyze web traffic and may be used to track User behavior.

GOOGLE ANALYTICS (GOOGLE INC.)

Google Analytics is an internet analytics service provided by Google Inc. ("Google"). Google uses the data collected to track and review your use of this service (www.Karmel.com) to prepare activity reports and share them with other Google services.

Google may use the data collected to contextualize and customize the ads in its own ad network.

Personal Data collected: Cookie and Usage Data.

Place of Processing: USA - Privacy Policy - Opt Out. Privacy Shield Participant.

CONTACT MANAGEMENT AND MESSAGE SENDING

These types of services allow the management of the contact database of email, telephone or other contact information for communication with the User.

These services may also be used to collect data regarding the date and time you viewed the email. They may also be used to collect information about when you interacted with the email you received, such as when you selected the links included in the email.

ALL IN MARKETING CLOUD (LOCAWEB INTERNET SERVICES S.A.)

ALL IN is an email address management and messaging service platform provided by Locaweb SA Internet Services.

Personal Data collected: name and email.

Place of processing: BRA– Privacy Policy. .

SENT (SENT MARKETING SERVICES LTDA ME)

Submitted is a service payment reminder automated submission platform provided by Enviou Marketing Services LTDA-ME.

Personal data collected: name and email.

 Place of Processing: BRA - Privacy Policy

TAGS MANAGEMENT

This type of service helps the Owner to manage the tags or scripts required by www.Karmel.co.uk centrally. As a result User Data flows through these services and there is a possibility of retention of this Data.

GOOGLE TAG MANAGER (GOOGLE LLC)

Google Tag Manager is a management service provided by Google LLC.

Personal Data collected: Cookie and Usage Data.

Place of processing: USA - Privacy Policy. Privacy Shield participant.

INTERACTION WITH SOCIAL NETWORKS AND EXTERNAL PLATFORMS

This type of services allows interaction with social networks or other external platforms, directly from the pages of this service (www.Karmel.pt). Interaction and information obtained by www.Karmel.com are always subject to your privacy settings on each social network. If a service that allows interaction with social networks is installed, you can collect traffic data for pages where the service is installed, even when users are not using it.

SHARETHIS (SHARETHIS INC.)

ShareThis is a service provided by ShareThis Inc. that displays a widget that allows interaction with social networks and external platforms, as well as shares content from www.Karmel.com.

Depending on the configuration, this service may display third party widgets, such as social network managers where interactions are shared. In this case, the third parties who provide the widget will also be informed about interactions and Usage Data Usage on the pages where this service is installed.

Personal Data collected: Cookie and Usage Data.

Place of processing: USA - Privacy Policy.

PAYMENT PROCESSING

Payment Processing Services allows www.Karmel.ie to process payments.

credit card, bank transfer or other means. For added security, www.Karmel.co.uk provides only the information necessary to execute the transaction with the financial intermediaries that operate the transaction.

Some of these services may also enable you to send timely messages to you from www.Karmel.com such as email based invoices and other notifications.

PAYPAL (PAYPAL INC.)

PayPal is a payment service provided by PayPal Inc., which allows users to make payments online.

Personal Data collected: Various types of Data as specified in the service's privacy policy.

Place of processing: See PayPal privacy policy - Privacy Policy.

PAYPAL (PAYPAL INC.)

ANTI-SPAM PROTECTION

This type of service analyzes the traffic of this service (www.Karmel.pt), potentially containing users' Personal Data, with the purpose of filtering out portions of traffic, messages and content that are recognized as SPAM.

GOOGLE RECAPTCHA (GOOGLE INC.)

Google reCAPTCHA is a SPAM protection service provided by Google Inc.

Use of reCAPTCHA is subject to Google's privacy policy and terms of use.

Personal Data collected: Cookie and Usage Data.

Place of processing: USA - Privacy Policy. Privacy Shield participant.

REGISTRATION AND AUTHENTICATION

By registering or logging in, the User allows this service (www.Karmel.com) to identify you and give you access to dedicated services. Depending on what is described below, registration and authentication services may be provided by third parties. In such cases, www.Karmel.co.uk may access some Data stored by these third party services for registration or identification purposes.

Owner uses the information we collect from you and about you for a variety of purposes, including:

Process and respond to your requests;

Understand the actions of users (Services visited, preferred features, usage patterns, etc.), improve the content and characteristics of the Services provided (such as customizing the content to the observed interests), process and complete transactions and make special offers;

Administer the Services available and diagnose technical problems;

Send communications at your request and which are of interest to you;

Generate and review reports and conduct research on the basis of use and usage patterns of the Services;

Provide customer service;

Give information and warnings about your account;

Performance of obligations and defense of rights in any agreements entered into between you and Karmel, including payments and collections.

DIRECT REGISTRATION (WWW.KARMEL.com)

The User registers by filling in the registration form and providing the Personal Data directly to www.Karmel.pt.

Personal Data collected: city, date of birth, email, address, billing address, full name, phone number, country.

DATA TRANSFER OUTSIDE THE EU

The Owner is authorized to transfer Personal Data collected within the EU to third countries (ie any non-EU country) only in accordance with a specific legal basis. Any such data transfers will be based on one of the legal bases described below. Users may ask the Owner to know which legal basis applies to which specific service.

DATA TRANSFER TO AUTHORIZATION-BASED FOREIGN (WWW.KARMEL.com)

If this is the legal basis, the User's Personal Data will be transferred from the EU to third countries only if the User has explicitly authorized the transfer, after being informed of the possible risks due to the absence of an appropriate adequacy decision and safeguards.

In such cases the Owner will inform users correctly and obtain their explicit consent through the www.Karmel.co.uk Service.

Personal Data Collected: Various Types of Data

VIEW EXTERNAL PLATFORM CONTENT

This type of services allows the User to view and interact with content hosted on external platforms, directly from and interacting with the pages of this service (www.Karmel.com). If this type of service is installed, it may collect web traffic data for the pages where the service is installed, even when users are not using it.

GOOGLE FONTS (GOOGLE INC.)

Google Fonts is a typeface display service provided by Google Inc. that allows www.Karmel.com to embed such content on its pages.

Personal Data collected: Usage data and various types of Data as specified in the service's privacy policy.

Place of processing: USA - Privacy Policy. Privacy Shield participant.

GOOGLE MAPS WIDGET (GOOGLE INC.)

Google Maps is a map view service provided by Google Inc. that allows www.Karmel.com to embed content of this type on its pages.

Personal Data collected: Cookie and Usage Data.

Place of processing: USA - Privacy Policy. Privacy Shield participant.

USERS RIGHTS

Users may exercise certain rights regarding their Data processed by the Owner.

In particular, users have the rights to do the following:

Withdraw your consent at any time. Users have the right to withdraw their consent where they have given their prior consent to the processing of their Personal Data.

Object the processing of your Data. Users have the right to object to the processing of their Data if the processing is performed on a legal basis other than their consent. Additional details are provided in the specific section below.

Access your data. Users have the right to know if their Data is being processed by the Owner, to obtain disclosures about certain aspects of their processing and to obtain a copy of the Data being processed.

Check and request rectification. Users have the right to verify the accuracy of their data and to request that it be updated or corrected.

Restrict the processing of your Data. Users have the right, under certain circumstances, to restrict the processing of their Data for any purpose other than their storage.

Have your Personal Data deleted or otherwise removed. Users have the right, under certain circumstances, to require the deletion of their Personal Owner Data.

Receive your Data and have it transferred to another controller. Users have the right to receive their Data in a structured format, commonly used and machine readable and, if technically feasible, to have it transmitted to another controller without any hindrance. This determination applies on condition that the Data is processed by automated means and that the processing is based on Your consent, a contract to which You are a party, or pre-contractual obligations under that Agreement.

File a complaint. Users have the right to complain to their competent Data Protection Authority.

DETAILS OF THE RIGHT OF OBJECTION OF PROCESSING

In cases where Personal Data is processed in the public interest, in the exercise of an official authorization in which the Owner is vested, or for purposes of legitimate interests pursued by the Owner, users may object to such processing by providing a reason. related to your situation, in particular to justify the objection.

Users should be aware, however, that if their Personal Data is processed for direct marketing purposes, they may object to such processing at any time without providing any justification. Users may refer to the respective sections of this document.

HOW TO EXERCISE THESE RIGHTS

Any requests to exercise user rights may be directed to the Owner through the contact details provided in this document. These orders may be exercised at no charge and will be met by the Owner as soon as possible and in all cases within one month.

             

Mind Karmel Unipessoal Lda,

December 1st Street # 16 Store 2

2560-300

Torres Vedras

Portugal

VAT: 509453988

Contact Email of the data manager and owner: karmel.tvedras@gmail.pt