Your privacy is relevant to us:
The personal data gathering and treatment was designed to be in compliance with the Regulation (EU) 2016/679 of the European and Council Parliament, of April 27th of 2016, regarding the protection of natural persons on what concerns the treatment of personal data and that data free circulation and that revokes the Directive 95/46/CE (General Data Protection Regulation).
Excitasy has the constant concern on the defence of personal data privacy and a preventive action on what matters the website safety and the data protection of its customers and visitors.
Excitasy values your privacy, even if, you are a recent user or a long term one, take some time to know our practice and, in case of any doubt, contact us.
1. Personal data treatment responsible
The Responsible for data treatment is Bystart, Lda., with the VAT number 510136109, based on Avenida da República n. 1, 4730-251 Lage – Vila Verde. You may contact the data treatment responsible at any time when in doubt about data protection or via email to: firstname.lastname@example.org
2. Legal base for the gathering and treatment of personal data
Our legitimacy to proceed to the present treatment is foreseen on paragraphs a) and b) from the nr. 1st on art. 6th from GDPR.
The gathering of personal data has the purpose to manage the contractual relationship with Excitasy costumers.
On the terms shown on the article 3rd, 4th and 5th of the Regulation (EU) 2016/679, Bystart, Lda. gathers data to perform effectively and be able, through our Services, to provide the best experience. At no given moment, we will treat your data for other purposes. Your personal data will be object of a licit, loyal and clear treatment.
3. Personal data treatment purpose
The data provided by you to Bystart, Lda. are destined for trading, import and export of natural and dietetic products, informatic material and equipment and their supplies, garments and undergarments, saddlery and jewellery, informatic programming services, graphic and web design and Internet sites hosting.
All of your personal data will be stored only during the mandatory legal period of time, its storage respecting the guarantees of confidentiality and secrecy foreseen by GDPR.
4. Treated personal data categories
On general terms, personal data is gathered on two occasions directly resulting from Excitasy activity:
4.1.1 User registration: customer account creation and data treatment purposes
For the effect of customer account creation, is provided a personal area where the customer should insert the necessary data to its identification as a customer. The fulfilling of the first purchase relies on the supply of added personal data, crucial for your order process and former delivery. The forms mandatory filling fields available for that registration stages are signed with an asterisk (*).
Bystart, Lda. protects its costumers’ data and those are not provided to third parties without the holders’ knowledge or consent, as legally demanded.
On the process of the customers’ order, it is possible that determined personal data are disclosed to third entities for the sole purpose of fraud prevention and detection and always on the sequence of interpellation for the effect by appropriate authorities.
For the fulfilment of assigned legal obligations, Bystart, Lda. uses the Keyinvoice invoicing system.
Besides that, when purchasing on the website, will also be required data regarding the delivery address and payment detail, in a way to assure the best possible efficiency and the compliance of delivery schedules.
To make order deliveries possible, some of your data is granted to carrier companies, namely: Nacex, DHL, Chronopost and when chosen by the customer, the orders may be delivered by CTT (mail).
DROPSHIPPING is an Excitasy where the order is delivered directly to the final consumer.
Gathered data: name, address and contact number.
Purpose: Identifying final consumer, possibility of contact.
4.2.1 Activate and deactivate cookies and similar technologies
Newsletters and other communication may, for statistic purposes, contain information that allows knowing if they are open by weblinks on them.
However, the customer is always graced the ability of cancelling the reception of newsletters or the communication via email through a specific mentioned option on it.
The access to Excitasy online store assumes cookie use, deactivating them may compromise the website browsing.
To obtain further information, it is suggested to consult the information available on each browser or consulting detailed information on the subject.
5. Personal data storage period
Bystart, Lda. stores the users’ personal data for the needed period of time for the purposes it was gathered, according to the law in force.
The supplied data will be stored for the strictly necessary period, which usually, meets up to the period of the customers’ account existence. For that reason, from the moment the customer triggers its customers’ account cancelation, the personal data will be erased permanently, except for the data required to the compliance of legal obligation that will be archived on a specific data base and for the absolute needed period. In case you intend to make a new order on the website, the customer shall proceed to a new initial registration, being obliged to the terms and conditions in force at the time being.
6. Safety on your personal data treatment
Bystart, Lda. guarantees your personal data protection against any loss, destruction, alteration, access, or improper or non-authorised use, adopting legal demanded measures for that effect.
For these effects, Bystart, Lda. owns technical and organisational measures that seek to assure the information safety and protect you against any deliberate or accidental acts that may provoke their tampering, destruction, loss or non-authorised use.
Despites all of our efforts, we alert that the Internet is not a safe communication place. In fact, Internet conveyed information may be intercepted by third parties. So, we cannot assure complete safety of gathered information. By using Excitasys’ website and placing information, you expressly accept that it is done according to your express will and assuming the correspondent risk.
7. Right to access, rectification and erasure of personal data. Right to treatment limitation, right to treatment opposition and right to personal data portability.
On the terms of General Personal Data Protection Regulation, the data holder has the right to request the data treatment responsible, access to the concerning personal data, as well as it’s rectification or it’s erasure. The data holder, still has the right to demand, on determined circumstances, the personal data treatment limitation, as well as the right to oppose to the treatment and the right of data portability.
Occurring automatized decisions, including profile definition, you may oppose to such, on the terms for effect of art. 22nd.
You may exercise those right of access, rectification, erasure, treatment limitation, treatment opposition and portability before Bystart, Lda., via e-mail to email@example.com and/or firstname.lastname@example.org or through letter for the following address:
Avenida da República n.º1,
4730-251, Lage –Vila Verde, Portugal.
(Exercising these rights may undermine the possibility of maintenance of legal basis for data treatment.)
8. Right to file an appeal to a control authority
On the terms of GDPR, it is informed that the data holder, has the right to file complaints to the competent control authority, in this case the National Committee of Data protection.
9. Data Protection Officer (DPO)
You may contact Bystart, Lda. DPO at any moment regarding any doubt about personal data protection via e-mail to email@example.com
Queries, comments and requests related to this Privacy and Transparency Policy and its inherent rights, shall be addressed to the addresses provided on point 7.