Last Update: 03 June 2023
PIRANHA Global, Lda. respects your privacy and the concerns you may have about the confidentiality of your information and your personal data, processed in the context of your navigation on our website.
- Ensure that the website user knows and understands what personal data we collect about him, the reasons why we collect and use them and with whom we share them.
- Explain how the personal data that the user shares with us is used and treated.
- Know the period of time for which the data will be kept.
- Explain and make known to the user what their rights and options are and how to exercise them.
- Make known the means we use to protect your privacy.
By using or browsing our website, you immediately accept all the terms and conditions of this document.
For additional information, you can contact the company through the means mentioned below.
Identity if the Controller
The website is operated by PIRANHA GLOBAL, Lda., taxpayer and registered at the Commercial Registry Office of Viseu under the single number 507.776.003, as data controller within the meaning of the RGPD (General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016).
Head office/Address: Zona Industrial de Coimbrões, Lote 71, 3500-618 Viseu, Portugal.
Telephone: 232 468 548
How we collect Personal Data
Through our website, we can collect personal data transmitted to us by the user, namely in the context of creating an account, placing/ordering orders, selling products, filling out contact forms, signing up for loyalty programs, enrolling and participating in publicity and publicity programs for the company or the services it provides (demonstration of tattoos, piercings), services that require registration or subscription, opinion elaborations or publications on our website.
The collection of data is always done through the website and the provision of data by the user for one of the purposes described above.
What Personal Data we collect
The personal data that we collect and are processed results from your choices, the type of service or intended purchase and the configuration of your device. In particular, the following personal data are collected:
- Full name;
- Date of birth;
– E-mail address;
- Postal code;
– Telephone number;
– Bank details (type of debit or credit card, expiration date and certain digits of the card number);
– Taxpayer number;
- Purchases historic;
– Preferences and interests.
The collection and processing of data has the following legal basis:
Execution of a contract – All this data is necessary for the execution of your orders and the supply of the products you have purchased.
Consent of the data subject – If orders are not placed, data will be collected based on your consent.
FOR WHAT PURPOSES ARE YOUR PERSONAL DATA COLLECTED
– Allow to create an account and thus buy our products online;
– Provide, customize and improve the user experience with the products supplied/sold and the services provided by PIRANHA Global, Lda;
– Manage your orders online and their delivery, as well as the applicable guarantees;
– To process payment in order to prevent or detect fraud, including fraudulent payments;
– To provide, personalize and improve the user experience with the services and products provided;
– To communicate with the user for purposes related to the provision of services or the sale of products;
– To understand how the user accesses and uses the website and the products and services, in order to improve its technical functionalities, develop new products and services;
– Communication (emails, messages or other types of notifications or newsletters) with users for the purposes of marketing, promotion, advertising, research, participation in contests and surveys;
– Answer questions through our “contact us” form;
– Publication of opinions, images, photographs on our website;
– Sending information about our offers, news and events (newsletters, invitations and other publications);
– Optimize our relationship with customers/users;
- Client management;
– Definition of profiles;
– Analysis of statistics;
– If you have activated the geographic location service on your mobile phone, forward services or offers tailored to your location;
The information essential to fulfill the purposes for which the collection and processing of data is intended is identified by an asterisk on the pages of our website. If you do not fill in the mandatory fields marked, we will not be able to respond to your requests or provide you with the requested products and services.
When you place an order, under the terms defined in the General Conditions of Sale, we collect your personal data through the form called Customer Account Creation, available on the website.
The full name, date of birth, email address, postal address (billing and delivery, if they do not match), telephone number and information on the payment method will be collected.
When you register on our website, we collect personal data through a form called “Registration” available on the website. Here we will only ask for your full name, date of birth, email address and phone number.
If you want to join our promotions or loyalty program, we will use the data that we already have in our possession, just by clicking on the button identified for that purpose.
When you request to view pages on our website, our servers automatically recognize your computer's IP address or your mobile phone ID.
In general, all the information necessary for data collection and the purposes for which they are intended are clearly indicated on our website.
DATA RETENTION AND DELETION
The data relating to your orders will be kept for a period that does not exceed the applicable legal prescriptions and deadlines. This data will always be available in your Customer Account. After closing this account, the data will be archived for probative and statistical purposes during the applicable legal and prescription periods. Once these deadlines are exceeded, the data will be destroyed.
Your bank information will only be held and stored securely for as long as necessary to validate and pay for your order. Soon after, they will be destroyed, unless you have given express consent for the maintenance of this data for future orders.
In the case of payment incidents, the data will be kept for a period of between 3 and 7 years, depending on the severity of the incident.
The data collected in the “contact us” form is kept during the processing of your order, and then destroyed.
The data collected through the creation of an account on our website are kept until the account is closed. We remind you that you can close your account at any time.
If your account remains inactive for a period of 3 years, we will contact you to find out whether or not you want to maintain it. If nothing is said to us, the account will be closed and the data destroyed.
If we are required to keep your personal data to comply with legal, tax, accounting or other obligations, it will be kept for the period required by law.
The data collected for the purposes of promotion, advertising and other communications will be kept for a period of 5 years from the date of collection or your last contact.
TRANSMISSION OF DATA TO THIRD PARTIES
Personal data is intended for PIRANHA Global, Lda.
However, your personal data collected through our website may be transmitted to partner entities for the execution of the aforementioned purposes, for customer management, marketing operations and detection of fraudulent actions.
Disclosure of data is possible whenever required by law, regulatory provision or court order, or if disclosure is necessary to protect and defend your rights.
DATA TRANSFER ABROAD
Piranha Global, Lda. may subcontract the treatment or share personal data with third parties located in countries other than the holder's residence. However, this transfer is carried out under appropriate guarantees, including contractual ones, in accordance with applicable data protection legislation.
PERSONAL DATA HOLDER RIGHTS
The GDPR grants the holder of personal data a set of rights that must be compulsorily safeguarded and which are the following:
Right to Information
The GDPR determines that a set of information must be provided to the holders of personal data. The following information must be provided:
Identity and contact details of the company/data controller or its representative.
In case the collection is direct, it has to be said whether there will be communication of data to third parties and whether or not it constitutes a legal or contractual obligation and the consequences of not providing the data.
Categories of personal data.
What are the purposes for which the data is intended.
Data retention period.
The existence of the right of access, rectification, erasure and limitation of treatment.
The existence of the right to object to treatment.
If the processing of data is based on the consent of the holder, it must be informed that he may withdraw consent at any time.
The existence of the right not to be subject to automated decisions, including profiling.
The right to data portability.
The right to be aware of the existence of a data breach.
The right to complain to the CNPD.
In the case of indirect collection, it is also necessary to inform the categories of data that will be collected and the data sources.
RIGHT TO ACCESS
Data holders have the right to know whether or not their personal data is being processed, whether they were transmitted to other entities, the destination given to them, as well as access to their data and all information regarding activities of treatment.
RIGHT OF RECTIFICATION
Data holders have the right to obtain their rectification whenever they are out of date, incorrect or incomplete.
RIGHT TO DELETION
This right is one of the great new features of the GDPR, and is also referred to as the “right to be forgotten”.
The same gives the holder of the personal data the right to ask the companies/responsible for the treatment to erase their data.
Thus, holders of personal data have the right to obtain their deletion, provided that:
The data is unnecessary for the purposes for which it was collected and processed;
The holder withdraws his consent, when the treatment is based on this and there is no other legal basis for the processing of data;
The holder opposes the processing of personal data used for automated purposes;
When personal data have been processed unlawfully.
Right to Limitation of Treatment
The holder of personal data has the right to demand the limitation of the processing of his data.
DATA PORTABILITY RIGHT
The data subject may request his personal data, in a commonly used format, or request its transfer to another company/responsible for data processing.
However, the data subject may only demand that their data be handed over to another controller when this is technically possible.
RIGHT OF OPPOSITION AND AUTOMATED INDIVIDUAL DECISIONS
The data subject has the right not to be subject to this type of automated decisions, being able to oppose, at any time, the processing of personal data concerning him, including the definition of profiles.
RIGHT TO WITHDRAW YOUR CONSENT
The data subject can withdraw his consent at any time.
You can stop receiving our communications, offers, news and events at any time, using the link in the message we send you.
Also on the website is provided how to withdraw your consent.
RIGHT TO FILE A COMPLAINT
For any question about the collection and processing of data, you can contact us through the means mentioned above.
You can also file a complaint with the CNPD – National Data Protection Commission, on its website, or at the following address: Rua de São Bento, nº148, 1200-031 Lisboa.
EXERCISE OF RIGHTS
These rights can be exercised by contacting us by the following means:
Mail: Zona Industrial de Coimbrões, Lote 71, 3500-618 Viseu, Portugal.
We do not knowingly collect personal data from children under the age of 16 or under the applicable age limit in each country. If the user is below the age limit, he must not register on the site, acquire the producer or provide personal data.
If the parents of a child under the age limit become aware that the child has provided personal data, they must contact us as soon as possible using the “Contact Us” form, in order to exercise their rights.
If we become aware that we have collected personal data from a child under the legal age limit, we will take reasonable steps to delete the data. However, it will always be possible to delete the child's account.