- Scope of the Privacy Policy
NAHIM is an e-commerce portal that provides information on a range of luxury items and allows the purchase and rental of these items electronically.
Within the scope of its activity, NAHIM may process your Personal Data. In this sense, this Privacy Policy serves to provide you with information about the processing of your Personal Data.
The collection and processing of your data is carried out with full respect for the Data Protection legislation in force at any time, namely by Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016 (General Regulation on Data Protection, “RGPD”) and by Law n.º 58/2019, of 8 August, which ensures the implementation of the RGPD in the Portuguese legal order.
If you would like to know more about the processing we do of your Personal Data, please contact us through the contacts indicated below in point 12 – How to exercise your rights.
- Who is responsible for collecting and processing the data?
NAHIM is the entity responsible for processing your Personal Data, provided by the respective holder, as well as other Personal Data collected in any other medium, including those relating to the use of the Services provided by NAHIM (hereinafter “ Personal Data”), which will be processed for the purposes listed in point 3., below.
NAHIM is a limited liability company, registered at the Commercial Registry Office of Lisbon under corporate number n.º 516507150 with share capital of € 10,000.00, headquartered at Rua José Serpa, Nelas.
- What are the contacts of the controller?
The Person Responsible for the Processing of Personal Data can be contacted (namely for any additional information or to exercise your rights), in writing, to the following addresses:
- Rua José Serpa, 3520-225 Nelas
- Email: info@nahimluxury.com
- What are Personal Data?
Personal Data is any information, of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. A person who can be identified directly or indirectly, namely by reference to an identification number or to one or more specific elements of their physical, physiological, psychological, economic, cultural or social identity, is considered identifiable.
- What are Cookies?
Cookies are small software tags that are stored on your computer or other devices you use to access the internet through your browser.
NAHIM may store cookies on your device to personalize and facilitate navigation as much as possible, not providing these same cookies with references or personal data of the user.
For more information you should read our Cookies Policy here.
- What Personal Data do we process?
When you use our Services, we collect the following information about you:
- Name, date of birth, e-mail, address, profession, telephone contact, clothing size , shoe number, country of residence, bank details: IBAN, SWIFT/BIC.
And yet, we collect automatically,
- Information about your device;
- Location information;
- User and registration data;
- Cookies and Similar Technologies;
The data collected is processed and stored by computer and in strict compliance with the Personal Data protection legislation.
- What are the purposes, grounds for processing Personal Data and respective retention periods?
Most of the time, we will use your Personal Data, which will be kept for the time strictly necessary to pursue the purposes for which they are intended and taking into account legal criteria, need and minimization of storage time, for the following purposes: relationship management pre-contractual and contractual provision of services; development, fulfillment and execution of the purchase and sale or rental agreement entered into through the Platform whenever necessary for our legitimate interests: (i) improve and control the quality of our Services; (ii) provide you with a secure Platform; and (iii) customize (customize) products/articles; compliance with legal or regulatory obligations, including before authorities (namely, regulatory or tax), management control. In certain circumstances, we may process your Personal Data based on your consent. If we do, we will inform you of the reason and category of Personal Data to be processed when we ask for your consent.
Regarding the legal basis, we process the information described above for the proper performance of the contract concluded with you and on the basis of our legitimate interest in carrying out marketing activities to offer you Services that may be of interest to you, i.e. (i) for the purposes of provide access and provide services through our Platform; (ii) to improve your experience on the Platform; (iii) to provide you with a secure Platform, namely in the context of fraud prevention.
We will keep your Personal Data for the time strictly necessary to serve the purposes for which we collect it, including for the purposes of complying with any type of legal, accounting or communication requirements. After this period has elapsed, the data will be deleted or anonymized whenever they should not be kept for any other purpose that may exist.
- Who do we share your data with?
The data collected and held by NAHIM may be transmitted, with respect for the duty of confidentiality and the principle of the purpose that presided over its collection, to the following entities:
Subcontractors who will process the data on behalf of NAHIM and in accordance with the purposes determined by it, namely third-party service providers (cloud storage services such as Amazon Web Services and Microsoft Azure).
Judicial or administrative authorities, in cases where such assignment is mandatory.
- international transfers
If data transfers to third countries that do not belong to the European Union or the European Economic Area may occur, NAHIM will comply with the law, namely with regard to the suitability of the destination country with regard to the protection of Personal Data and the requirements that are applicable to these transfers, and Personal Data is not transferred to jurisdictions that do not offer guarantees of security and protection.
- Links to Third Party Websites
Our website may contain links to third party websites or applications. If you access one of these links, please note that we do not control these websites/applications and are not responsible for their policies, which are different from ours. When leaving our Platform, we recommend that you read the privacy statement of every website you visit.
- What measures do we take to ensure the security of your Personal Data?
During the collection and processing of your Personal Data, we are committed to ensuring its protection and security. To this end, we have implemented strict rules whose compliance is an obligation for all those who legally access your data.
In this context, various technical and organizational security measures were adopted in order to protect the Personal Data made available to us against its dissemination, loss, misuse, alteration, treatment or unauthorized access, as well as against any other illicit form of treatment. Notwithstanding the security measures practiced by NAHIM, the user must adopt additional security measures, namely, ensure that he uses equipment and a Browser that is properly configured in terms of security, with an active firewall, antivirus and anti-spyware and, make sure that authenticity of the sites you visit on the internet, and you should avoid websites whose reputation you do not trust.
- What are your rights as a holder of Personal Data?
As the holder of Personal Data, the law grants you a set of rights that you can exercise at any time, provided that the conditions on which the law depends, in each case, their enjoyment and exercise are met .
Such rights are:
- a) Right of access: whenever you request it, you may receive a copy of the Personal Data we hold about you, in order to verify that we are processing them in accordance with the law.
- b) Right of rectification: whenever you consider that your Personal Data is incomplete or incorrect, you may request its rectification. In that case, we will be obliged to confirm the accuracy of the new data provided.
- c) Right to withdraw your consent: in cases where data processing is based on your consent, you may withdraw your consent to the collection and processing of Personal Data at any time. However, this does not affect the legality of any processing that we have already carried out based on the previously given consent.
- d) Right to erasure: you may request that your Personal Data be erased when one of the following situations occurs: (i) the Personal Data is no longer necessary for the purpose for which it was collected or processed; (ii) withdraw the consent on which the data processing is based, and there is no other legal basis for the same; (iii) opposes the processing of data and there are no prevailing legitimate interests of NAHIM to be evaluated on a case-by-case basis, which justify the processing; (iv) Personal Data has been processed unlawfully; (v) the Personal Data has to be erased under a legal obligation.
- e) Right to limitation of processing: you may request limitation of processing of your Personal Data in the following cases: (i) if you dispute the accuracy of your Personal Data, for a period of time that allows NAHIM to verify its accuracy; (ii) if NAHIM no longer needs the Personal Data for processing purposes, but if such data is necessary for the purposes of asserting, exercising or defending a right in legal proceedings; (iii) or if you have objected to the treatment, until it is verified that NAHIM's legitimate interests prevail over yours.
- f) Right of portability: you may request the delivery, in a structured, commonly used and machine-readable format , of the Personal Data provided by you in cases where the processing of such data is carried out by automated means, and only when the processing is based on express consent or the performance of a contract. In such cases, portability also gives you the possibility to request that your data be transmitted to another controller, provided that this is technically possible.
- g) Right of opposition: you have the right to object to the processing of your Personal Data at any time, for reasons related to your particular situation, in the event of one of the following situations: (i) when the processing is based on the legitimate interest of NAHIM or third parties; or (ii) when the treatment is carried out for purposes other than those for which the data were collected, but which are compatible with them, unless there are imperative and legitimate conditions of NAHIM for this treatment that prevail over its interests, rights and freedoms or if the treatment is necessary for the purposes of declaration, exercise or defense of a right of NAHIM in legal proceedings. In the case of data processing for direct marketing purposes, Personal Data will be processed by NAHIM, unless you expressly express your opposition to such treatment, which you can do at any time, and for this purpose you must request it in writing to NAHIM.
- h) Right to lodge complaints with the supervisory authority: if you wish to lodge a complaint regarding matters related to the processing of your Personal Data, you may do so with the National Data Protection Commission, the competent supervisory authority in Portugal. For more information, access www.cnpd.pt.
- i) Right to give instructions on how to process your Personal Data after your death. Furthermore, holders of Personal Data are recognized as having the right to file a complaint with the supervisory authority in matters of Personal Data, currently the National Commission for Personal Data (CNPD). However, before submitting a complaint to the Data Protection Authority, we would appreciate the opportunity to address your concerns, so please contact us through the indicated means.
- How to exercise your rights?
You can exercise each of your rights with NAHIM through the channels indicated below, identifying yourself or proving your identification. Except in situations where the requests are manifestly unfounded or excessive, the exercise of the rights in question is free of charge. Email to the following address: info@nahimluxury.com
Other means that, at any time, may be made available online by NAHIM.
We try to respond to all legitimate requests within one month. Occasionally, it may take longer than a month if your order is particularly complex or if you have placed multiple orders. In that case, we will notify you and keep you informed.
- controlling entities
CNPD – National Commission for Data Protection Rua de São Bento, n.º 148 – 3.º 1200-821 Lisbon Phone +351 213928400;
- How can you find out about any changes to our Privacy Policy?
This Privacy Policy may be changed at any time. If this happens, we will post the changes on this page. If you do not agree with these changes, you can close your account by accessing the account settings and accessing the delete account option.