Ximito, Lda on the website www.ximito.com NIPC 515462284 based at Tv. Cruzes do Monte, 46, 4470-169 Maia, Portugal processes the personal data provided by users to respect and enforce the Terms and Conditions, process orders and electronic deliveries and for the necessary communication within the period required by law.
General conditions
1. The person responsible for personal data, in accordance with the GDPR (called "Regulation") is Ximito, Lda, a company with NIPC 515462284, headquartered at Tv. Cruzes do Monte, 46, 4470-169 Maia, Portugal (known as "Responsible" );
2. The contact details of the Responsible are: e-mail: geral@ximito.com;
3. Personal data is any information related to an identified or identifiable natural person.
Origin of personal data
1. The responsible person processes personal data obtained with the client's consent and collected as part of the purchase and execution contract of the electronic order made on the website www.ximito.com;
2. The responsible person processes only the identification data and contact details of the user necessary to enforce the necessary contacts;
3. The responsible person processes personal data for delivery and accounting purposes and for the necessary communication between the parties involved in the contract for the period of time required by law. Personal data will not be disclosed and will not be transferred to other countries.
Purpose of data processing
The person responsible processes the customer's personal data for the following purposes:
1. Registration on the website www.ximito.com in accordance with Chapter 4, Section 2 of the GDPR;
2. For the execution of electronic requests created by the user (name, address, e-mail, telephone);
3. Comply with laws and regulations resulting from the contractual relationship between the customer and the data controller;
4. To execute the purchase contract based on the necessary personal data. The contract cannot be performed without personal data.
Data storage period
1. The person responsible stores the personal data for the period necessary to enforce the laws and regulations resulting from the contractual relationship between the Client and the Person Responsible and for the period of 3 years after the conclusion of the contractual relationship;
2. The responsible person must delete all personal data as soon as the period of personal data storage ends.
Recipients and persons responsible for personal data
The third parties that process the customer's personal data are subcontracted by the responsible entity. The services of subcontractors are essential for the successful fulfillment of the contract for the acquisition and processing of electronic orders between the responsible and the customer.
Responsible subcontractors are:
- Webnode AG;
- Google Analytics (website analysis
);
User Rights
In accordance with the Regulation, the Customer is entitled to:
1. Access to personal data;
2. The rectification of personal data;
3. Right to delete personal data;
4. The right to object to the processing of personal data;
5. The right to carry personal data;
6. The right to withdraw consent for the processing of personal data in writing or by email: geral@ximito.com;
7. the right to lodge a complaint with the supervisory authority in the event of an alleged violation of the regulation.
Security of personal data
1. The data controller takes all technical and organizational precautions necessary for the protection of personal data;
2. The person in charge took technical precautions to protect the spaces where the data is stored, in particular, protecting the access to the computer with a password, using antivirus software and regularly maintaining the computer.
Final dispositions
1. When creating an electronic request on the website www.ximito.com the user confirms that he is informed about all the conditions for the protection of personal data and accepts them as far as possible;
2. The user accepts these conditions by checking the checkbox on the order form;
3. The person in charge can update these conditions at any time. A new updated version must be published on the website.
These Rules come into effect on 02/09/2019
