1. Background

    The Privacy Policy applies exclusively to the personal data processed by CASA DA GALERIA, within the defined purposes. For the purposes of this policy, personal data is defined as any information relative to an individual who is identified or identifiable (owner of the data). The owner of the data is deemed identifiable if he/she can be identified directly or indirectly, namely through an identification number or through specific characteristics of his/her physical, physiological, genetic, mental, economic, cultural or social identity.

    2. Contents of the Privacy Policy

    a. Our Privacy Commitment

    CASA DA GALERIA carries out its business based on trust and transparency. This commitment is reflected in the daily relationship with our clients, employees and suppliers and other stakeholders. The privacy and safety of the data entrusted to us is a priority for us.

    We undertake to collect, store, process, transmit or eliminate personal data with transparency and use only data which are essential to maintain the commercial relationship. We shall inform you how we use your personal data and for what purposes, ensuring that we collect, share and store your personal data in accordance with the best practices as regards the safety and protection of the personal data. 

    When your personal data are collected, stored, processed, transmitted or eliminated by other entities, we demand the same level of privacy and safety.

    We want you to feel confident that your personal data are safe with us, as we are constantly committed to protect your privacy and we take our responsibility to protect your personal data extremely seriously.

    Whenever you have any doubt about how we use your personal data, we are available to help through the following e-mail address:

    b. Who is Responsible for Your Personal Data

    The above-mentioned company, to which you provided your personal data, is responsible for processing your personal data under the terms of the General Data Protection Regulations and the complementary legislation concerning protection of personal data in countries where it operates.

    c. Personal Data that We May Collect

    In this Privacy Policy, the term “Personal Data” means all the information related to you and which allows us to identify you directly or indirectly. Your personal data may include, for example, your name, fiscal number and contact details (physical and/or electronic).

    We may also receive your personal data from other companies, namely when they collect, process or store these data in fulfilment of a service provision contract.

    d. How and Why Do We Use Your Personal Data?

    We use your personal data only when strictly necessary for our relationship. 

    e. How Long Do We Retain Your Personal Data? 

    We retain your personal data only for the time needed to fulfil the aims defined in our relationship and to comply with law.

    Once the maximum retain period is reached, your personal data will be anonymised or securely destroyed/deleted.

    f. Who May We Share Your Personal Data With?

    In some cases we may disclose your personal data to other entities, as part of the services such entities provide. In these cases, we demand that appropriate security measures are in place to protect your personal data.

    When required by law, we may have to disclose your personal data to the authorities or third parties.

    g. How Can You Exercise Your Personal Data Protection Rights?

    In certain circumstances, you are entitled to access or request:

    i. Additional information about how we use your personal data;
    ii. Your personal data;
    iii. That we transmit the personal data you supplied to us to another entity;
    iv. An update of your personal data;
    v. Deletion of your personal data;
    vi. The non-processing of your personal data;
    vii. Restricting how we use your personal data as we correct or clarify possible doubts about its content or about how we use the data;
    viii. The provision of a channel to dispute automated decisions made based on your personal data profiling.

    You are also entitled to withdraw or change, at any time, the permission you gave us to use your personal data.

    An exception to exercising these rights occurs when your personal data are used to safeguard the public interest, namely in cases of detection and prevention of crimes, or when they are subject to professional confidentiality.

    To exercise your personal data protection rights or whenever you have a question about how we use your personal data, please contact us using the e-mail
    If you are not satisfied with how we use your personal data or with our response to your request to exercise your rights, you can make a complaint to the competent regulatory authority.

    h. Cookies

    CASA DA GALERIA uses websites cookies to improve the navigation experience of our site users, leading to quicker and more efficient responses and ending the need to repeatedly input the same information.  

    i. How Do We Protect Your Personal Data? 

    We have a range of information security measures, in line with the best national and international practices, to protect your personal data, including technological checks, administrative, technical and physical measures and procedures that guarantee the protection of your personal data, preventing them from improper use, and non-authorised access and disclosure, loss and improper or inadvertent alteration, or their non-authorised destruction. With regard to information security, we make the same commitment to continuous improvement as we do in our day-to-day business.

    Among others measures, we highlight the following:

    i. Access to your personal data is restricted to those who need them for the specific purposes outlined above;
    ii. Storage and transfer of personal data using safe means only;
    iii. Protection of the information systems using devices that prevent non-authorised access to your personal data;
    iv. Implementation of mechanisms that ensure the complete safety and quality of your personal data;
    v. Permanent monitoring of the information systems, to prevent, detect and avoid the improper use of your personal data;
    vi. Redundancy in the storage equipment, processing and communication of personal data, to avoid unavailability.

    When required by law, we may have to disclose your personal data to the authorities or third parties, and in these cases our control over how your personal data is protected is limited.

    j. Updates to this Privacy Policy

    This Privacy Policy may be updated whenever necessary, being the information released through the appropriate channels, namely the CASA DA GALERIA's website.