Introduction
The General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — establishes rules regarding the protection of personal data of natural persons and applies to all public and private entities that process personal data.
In Portugal, the GDPR is supplemented by Law No. 58/2019 of 8 August.
Scope
This Privacy Policy applies to the website www.pigmentocoolectivo.com.
Personal data is not processed for any purposes other than those expressly identified in this policy. Pigmento Coolectivo reserves the right to update or amend this Privacy Policy whenever necessary to ensure compliance with legislative or regulatory changes, and users are advised to consult this page periodically.
Users are deemed to have taken notice of this policy when browsing the website.
This Privacy Policy explains how we collect, use, and protect personal information provided through our website.
This policy does not apply to third-party websites that may be accessed through links available on this site.
Pigmento Coolectivo does not collect or process sensitive data, namely data relating to health, political opinions, or religious beliefs.
Privacy Policy
1. Data Controller
The controller of the personal data collected is:
- Name: Rui Jorge dos Santos Costa
- Entity: Pigmento Coolectivo
- Email: manage@pigmentocoletivo.com
- Address: Estrada de São Bernardo, n.º 375, 3810-177 Aveiro, Portugal
2. Personal data collected
Pigmento Coolectivo may collect the following personal data:
- Name
- E-mail address
- Telephone number (for contact and carrier purposes)
- Address (in the case of sample requests or shipments)
- Tax Identification Number (NIF)
This data is provided voluntarily by the user through contact forms, sample request forms, and newsletter subscriptions.
Technical data may also be collected automatically, such as IP address, browser type, or operating system, exclusively for statistical and security purposes.
The data collected is always adequate, relevant, and limited to what is necessary, in accordance with the data minimisation principle (Article 5(1)(c) of the GDPR).
3. Purpose of data processing
| Purpose | Legal basis (GDPR) | Notes |
|---|---|---|
| Responding to contact requests and sending the requested information | Consent — Article 6(1)(a) | Data voluntarily provided by the user |
| Processing requests, orders and invoicing | Performance of a contract — Article 6(1)(b) | Includes payments, invoice issuance and related communications |
| Managing shipments and delivery tracking (CTT and AfterShip) | Performance of a contract — Article 6(1)(b) | Necessary for delivery and order follow-up |
| Sending newsletters and promotional communications | Consent — Article 6(1)(a) | Voluntary subscription, with the option to unsubscribe |
| Compliance with legal and tax obligations | Legal obligation — Article 6(1)(c) | Data retention for the legally required period (up to 10 years) |
No sensitive data is collected or processed.
4. Sharing of data with third parties
Personal data may be shared exclusively with the following subcontractors, solely for the purposes described:
- MailerLite (Lithuania / USA) — newsletter management, with standard contractual clauses approved by the European Commission
- CTT – Correios de Portugal — order shipment
- DPD — order shipment and delivery
- DHL — domestic and international order shipment and delivery
- AfterShip (Hong Kong / USA) — shipment tracking
Pigmento Coolectivo ensures that all the above-mentioned third parties comply with the General Data Protection Regulation (GDPR) and adopt appropriate technical and organisational measures to protect personal data.
5. Data retention
Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, unless otherwise required by law, namely:
- Up to 2 years for data associated with inactive newsletters;
- Up to 10 years for tax and accounting data.
6. Data subject rights
Under the GDPR, data subjects have the following rights:
| Right | Description |
|---|---|
| Right of access | Obtain confirmation of processing and a copy of the data |
| Right to rectification | Request the correction of inaccurate or outdated data |
| Right to erasure | Request the deletion of data where applicable |
| Right to restriction of processing | Temporarily restrict the processing |
| Right to object | Object to processing based on legitimate interest or direct marketing |
| Right to data portability | Receive the data in a structured format and transmit it to another controller |
| Right to withdraw consent | Withdraw consent at any time |
The exercise of these rights is free of charge, except in cases of requests that are manifestly unfounded or excessive.
Pigmento Coolectivo undertakes to respond within a maximum period of 30 days, which may be extended in duly justified exceptional cases.
Requests should be sent to: 📩 manage@pigmentocoletivo.com
Additional proof of identity may be requested where necessary.
7. Supervisory authority
The competent national supervisory authority is the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD).
CNPD contact details:
- National Data Protection Commission (CNPD / NDPC)
- Av. D. Carlos I, n.º 134 – 1.º
- 1200-651 Lisboa
- 📞 +351 213 928 400
- 🌐 www.cnpd.pt
- 📧 geral@cnpd.pt
Data subjects may lodge a complaint with the CNPD or seek recourse through the competent courts.
Security measures
Pigmento Coolectivo adopts appropriate technical and organisational measures to protect personal data, including:
- Use of secure connections (HTTPS);
- Restriction of access to personal data;
- Secure and encrypted storage;
- Internal confidentiality policies and data protection training.
This Privacy Policy is reviewed periodically to ensure compliance with applicable legislation.