top of page

Privacy and Data Protection Policy (GDPR)

Porta-19 respects the privacy of its users and is committed to protecting the personal data entrusted to it.
This Privacy Policy explains how we collect, use, store, and protect your personal data when you visit the website www.porta-19.com, make a purchase, or contact us.
The processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (General Data Protection Regulation—GDPR) and applicable national legislation.
By using the Porta-19 website, the user acknowledges that they have read and understood this Privacy Policy.

Data Controller

The data controller is:

Porta-19
Email: geral.porta19@gmail.com
Website: www.porta-19.com

For any questions regarding the protection of your personal data, please contact us at the email address listed above.

Personal Data Collected

We may collect the following personal data:

  • Name;

  • Email address;

  • Billing and shipping addresses;

  • Cell phone number;

  • Tax ID number (when necessary for billing);

  • Information regarding orders and purchases made;

  • Information provided through contact forms, chat, or newsletter subscriptions.

Browsing data may also be collected through cookies and similar technologies, as described in our Cookie Policy.

Personal Data Protection

Porta-19 is responsible for processing the personal data collected on the website www.porta-19.com, and both Porta-19 and Etsy are responsible for processing the personal data collected on the store www.porta19.etsy.com (please review the Terms and Conditions of both Porta-19 and Etsy before providing your personal data).

Porta-19 guarantees that the personal data of users of the Website and the Store will not be used for purposes other than those for which it was provided. 

To that end, we are committed to ensuring the confidentiality and security of data by following appropriate practices to prevent its loss, alteration, and unauthorized access.

We guarantee that Porta-19 will not sell or share its user and customer database with third parties.

Purpose of Data Collection

The personal data collected is used to:

  • Process and deliver orders;

  • Issue invoices and comply with legal obligations;

  • Respond to contact requests or customer support inquiries;

  • Manage the business relationship with customers;

  • Send marketing communications, promotions, or news, when the user has given their consent;

  • Improve the browsing experience and website functionality;

  • Comply with legal and regulatory obligations.

Legal Basis for Data Processing

The processing of personal data is based on:

  • The performance of a purchase and sale agreement;

  • Compliance with legal obligations;

  • The data subject’s consent;

  • Porta-19’s legitimate interest in managing and improving its services.

Sharing Data with Third Parties

Porta-19 does not sell or disclose your personal data to third parties for commercial purposes.

Data may be shared only when necessary with:

  • Payment service providers;

  • Shipping and delivery companies;

  • The Wix platform;

  • The Etsy platform, when a purchase is made on that platform;

  • Competent authorities, when required by law.

All suppliers involved are committed to complying with applicable data protection regulations.

Data Retention

Personal data will be retained only for as long as necessary to fulfill the purposes for which it was collected or to comply with legal obligations.

Data related to billing may be retained for the period required by applicable tax laws.

​

Rights of Data Subjects

Under the GDPR, you have the following rights:

  • The right to access your personal data;

  • The right to have incorrect or incomplete data corrected;

  • The right to have your data erased (“right to be forgotten”);

  • Right to restrict processing;

  • Right to object to processing;

  • Right to data portability;

  • Right to withdraw consent at any time, when processing is based on that basis.

To exercise any of these rights, you may contact us via email: geral.porta19@gmail.com

Data Security

Porta-19 implements appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, alteration, or disclosure.

Despite all security efforts, no data transmission over the Internet can be guaranteed to be completely secure.

Complaints

You have the right to file a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is:

National Data Protection Commission (CNPD)
Website: https://www.cnpd.pt

Marketing Communications

Porta-19 will send promotional communications, news, campaigns, and offers only when the user has given their explicit consent to do so.

Consent may be withdrawn at any time by clicking the unsubscribe link included in each communication or by contacting geral.porta19@gmail.com.

Changes to This Policy

Porta-19 reserves the right to modify this Privacy Policy at any time. Any changes will be posted on this page, and we recommend that you check it periodically.

bottom of page