Privacy Policy (GDPR)

PRELIMINARY NOTE

Please read this Privacy Policy carefully, as providing your personal data implies knowledge and acceptance of the conditions set out herein.

Aleo Cosmética, Lda. (hereinafter Aleo Cosmética) is subject to personal data protection legislation and adopts all necessary measures to strictly comply with the legal standards in force and to safeguard the information collected and the privacy of the personal data of its customers and website users at www.aleo-cosmetica.com.

DATA CONTROLLER

Aleo Cosmética is the entity responsible for the collection and processing of personal data and may, within the scope of its activity, engage subcontracted entities to pursue the purposes indicated herein. Registered address: Rua 9 de Dezembro, nº 47, 4820-161 Fafe, Portugal VAT number: 516 577 670 Phone: (+351) 252 123 456 Email: geral@aleocosmetica.com

PERSONAL DATA

Personal data is any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to one or more factors specific to their physical, physiological, psychological, economic, cultural or social identity.

TYPES OF PERSONAL DATA COLLECTED, PROCESSING AND PURPOSES

The personal data collected and subsequently processed will vary depending on how customers and users interact with our website — namely, whether such collection and processing is intended for the creation and management of a user account, purchases and order management, newsletter subscriptions, or online surveys.

In light of the purposes described above, the following personal data may be collected and processed: first and last name, gender, email address, postal address, tax identification number, phone number, date of birth, age, username, password, order data, payment information, and IP address.

LEGAL BASIS FOR DATA PROCESSING

The processing of data collected by Aleo Cosmética will be based on the performance of a contract, the consent of the customer/user, or the legitimate interests pursued by Aleo Cosmética.

DATA RETENTION PERIOD

The period for which data is stored and retained varies according to the purpose for which the information is processed and in accordance with any applicable legal obligations and requirements that may require data to be kept for a minimum period of time.

Where no specific legal obligation exists, data will be stored and retained only for the minimum period necessary for the purposes that motivated its collection or subsequent processing, after which it will be deleted.

Aleo Cosmética expressly reminds you that, at any time, the data subject may request the deletion of all their personal data from our databases. This request should be sent to: rgpd@aleocosmetica.com

SHARING OF PERSONAL DATA

Personal data collected by Aleo Cosmética may be transmitted to third parties that provide specific services, such as freight transport companies, while ensuring that these parties maintain confidentiality and comply with the General Data Protection Regulation.

RIGHTS OF THE DATA SUBJECT

Customers or website users, as data subjects, may at any time exercise the following rights:

• Right to information: Data subjects have the right to request information from the Data Controller regarding the type of processing to which their data is being subjected.
• Right of access: Data subjects have the right to know whether or not their data is being processed by an organisation and, if so, to obtain a set of information about the processing carried out.
• Right to rectification: Data subjects have the right to request the correction of inaccurate data and the completion of incomplete data.
• Right to erasure: Data subjects have the right, under certain specifically defined circumstances, to request the deletion of their data.
• Right to restriction of processing: Data subjects have the right, in certain circumstances, to require the Data Controller to restrict the processing of their data without this entailing its deletion.
• Right to object: Data subjects have the right, in certain circumstances, to object to certain types of data processing. Upon exercising this right, the Data Controller must cease carrying out that processing.
• Right not to be subject to automated decisions: Data subjects have the right to request, in certain circumstances, human intervention in processes that are typically automated within decision-making procedures that affect them.
• Right to transparency: Data subjects have the right to know what processing is carried out on their data.
• Right to notification: Data subjects must be notified in cases where their data is rectified, erased, or where processing is restricted.

The rights described above may be exercised via email at: rgpd@aleocosmetica.com

Data subjects also have the right to lodge complaints with the Portuguese National Data Protection Commission (CNPD) and the right to bring legal action if the supervisory authority fails to handle the complaint or does not inform the data subject within 3 months of the progress or outcome of the complaint.

CHANGES TO THE PRIVACY POLICY

Aleo Cosmética may, at any time, make adjustments or changes to this Privacy Policy without prior notice. The Privacy Policy published on this website will always reflect the most up-to-date version.

This Privacy Policy was last updated in April 2026.