privacy.page_title
1 | Data Controller Identification
This Privacy Policy governs the processing of personal data carried out through the website https://madeitrofa.pt.
The Data Controller is:
MADEITROFA, LDA
VAT No.: 502 365 846
Registered Office: Rua dos Jarretes, n.º 151, Santiago de Bougado, 4785-566 Trofa – Portugal
Email: madeitrofa@madeitrofa.pt
MADEITROFA undertakes to process personal data in compliance with the General Data Protection Regulation (EU Regulation 2016/679 – GDPR) and applicable national legislation.
2 | Supervisory Authority
Under applicable law, data subjects have the right to lodge a complaint with the competent supervisory authority:
Portuguese Data Protection Authority (CNPD – Comissão Nacional de Proteção de Dados)
Av. D. Carlos I, 134 – 1.º
1200-651 Lisbon
Website: https://www.cnpd.pt
Email: geral@cnpd.pt
3 | Personal Data Collected
MADEITROFA may collect and process the following categories of personal data:
3.1 Browsing Data
Collected automatically:
IP address
Date and time of access
Browser type and operating system
Pages visited
Referring website
Technical connection data
These data are collected exclusively for technical, statistical, and security purposes.
3.2 Data Provided by the User
a) Contact Form
Name
Email address
Subject
Message content
b) Account Registration / Orders
First and last name
Email address
Phone number
Password
Billing and shipping address
Tax identification number (where applicable)
c) Newsletter (where applicable)
Name
Email address
4 | Purposes and Legal Basis for Processing
Personal data are processed for the following purposes:
a) Performance of a Contract
Order processing
Payment management
Product delivery
Customer support
Legal basis: Performance of a contract.
b) Compliance with Legal Obligations
Tax and accounting obligations
Retention of mandatory records
Legal basis: Compliance with a legal obligation.
c) Marketing and Commercial Communications
Sending newsletters
Promotional campaigns
Legal basis: Consent of the data subject.
The data subject may withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
d) Security and Fraud Prevention
Website protection
Technical monitoring
Legal basis: Legitimate interest of MADEITROFA.
5 | Data Retention Period
Personal data will be retained only for the period necessary to fulfil the purposes for which they were collected:
Tax and invoicing data: 10 years (legal obligation)
Customer account data: while the account remains active
Marketing data: until consent is withdrawn
Contact form data: up to 2 years after the last interaction
After the applicable retention period, the data will be securely deleted or anonymised.
6 | Data Sharing with Third Parties
Personal data may be shared with:
Shipping and transport companies
Payment service providers (e.g., PayPal, MB Way)
Web hosting providers
IT service providers
Accounting service providers
Tax or judicial authorities when legally required
These entities process data solely within the scope of the purposes described above and under appropriate contractual safeguards.
7 | International Data Transfers
Where certain service providers are located outside the European Union, MADEITROFA ensures that such transfers comply with applicable legal requirements, including:
European Commission adequacy decisions;
Standard Contractual Clauses approved by the European Commission.
8 | Data Security
MADEITROFA implements appropriate technical and organisational measures to protect personal data against:
Unauthorised access;
Unlawful disclosure;
Accidental loss or destruction.
Security measures include:
Authentication systems (login and password);
Firewall protection;
Intrusion detection systems;
Access control mechanisms.
9 | Data Subject Rights
In accordance with applicable legislation, data subjects have the right to:
Access their personal data;
Rectify inaccurate data;
Request erasure (“right to be forgotten”);
Restrict processing;
Data portability;
Object to processing;
Withdraw consent at any time;
Not be subject to automated decision-making.
These rights may be exercised by contacting: madeitrofa@madeitrofa.pt
10 | Cookies
The website uses essential and non-essential cookies.
Non-essential cookies are only used upon the user’s consent.
Further information is available in the Cookies Policy published on the website.
11 | Social Media Links
The website may contain links to external social media platforms.
MADEITROFA is not responsible for the privacy policies of such platforms. Users are encouraged to review their respective privacy policies.
12 | Minors
The website is not intended for individuals under the age of 18.
MADEITROFA does not knowingly collect personal data from minors.
13 | Applicable Law
This Privacy Policy is governed by Portuguese law.
Without prejudice to the right to lodge a complaint with the CNPD, any dispute shall be submitted to the competent Portuguese courts.
14 | Updates
MADEITROFA reserves the right to amend this Privacy Policy at any time.
The date of the latest update will be indicated at the top of this document.