Privacy Policy

Framework with Regulation (EU) 2016/679 and Law no. 58/2019

Taking into account Law no. 58/2019, which ensures the execution, in the national legal system, of Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), which replaced Directive 95/46/EC, incorporated into the Portuguese legal system by Law no. 67/98 of October 26.
All information collected through forms on [www.lamegoon.pt] is stored in a database where access is reserved for the Municipality of Lamego and the respective technical teams involved, duly authorized for maintenance and support purposes. The information collected is only used by internal services and at no time will the data be shared with third parties for commercial purposes. Furthermore, the presented platform encrypts user passwords so that they cannot be breached. The data may only be used publicly by the Municipality of Lamego to defend its good name.
Any password or private data provided by the user is their sole responsibility. The user must ensure that only authorized individuals access their accounts. The user will be responsible for any problem associated with the misuse of their user account in case of improper access.
For statistical purposes, for each visit to [www.lamegoon.pt], information is collected about the browser used, screen resolution, IP address, hostname, and pages visited on [www.lamegoon.pt]. This information is stored in files with restricted access to the Municipality of Lamego and the respective technical teams involved, duly authorized for maintenance and support purposes.

1. What is personal data and what categories of data do we process at Lamego ON - Digital Commercial District?

According to the General Data Protection Regulation (GDPR), personal data is any information that allows the direct or indirect identification of a person, regardless of its form or medium. At Lamego On - Digital Commercial District, we process several categories of personal data, including:

Identification and Contact Data: Name, identification document number, tax identification number (NIF), age, date of birth, telephone contact, email, address, payment details, access credentials, among others.
Relationship with [Lamego ON- Digital Commercial District]: Purchase history, reserved services, pages visited, searches performed on the platform.
User Profile: Preferences, interests, and interactions with the platform.
Location Data: Information regarding the user’s approximate or precise location, collected only with their explicit consent. This data is used exclusively for app features that depend on geolocation, such as displaying maps or content relevant to the user’s geographic area. Location data is not shared with third parties and is not used for marketing purposes or profile creation.

2. Who is responsible for processing your personal data?

The entity responsible for processing your personal data is the Municipality of Lamego as Data Controller, pursuant to Article 4 of the GDPR, which manages and ensures the protection of data collected on the platform, guaranteeing compliance with applicable legislation on privacy and data protection.

3. In what situations do we process your personal data?

At Lamego ON- Digital Commercial District, we process your personal data in the following situations:

When you create an account on the platform.
When you make a purchase or reserve a service.
When you interact with the platform or use its functionalities.
Whenever you provide us with your consent for the processing of your data.

Processing can occur digitally, in writing, or, in certain cases, through direct contact.

4. For what purposes do we process your personal data?

Lamego ON - Digital Commercial District ensures that your personal data is processed exclusively for the informed purposes within the scope of the services provided on the platform. By way of example, we process your data for the following purposes:

User Account Management: Processing of identification and contact data for account creation and management.
Purchase Processing: Order registration, invoicing, and purchase history.
Marketing and Communication: Sending information about campaigns, promotions, and news, subject to user consent.
Home Deliveries: Use of identification, contact, and address data for order shipment.
Fulfillment of Legal Obligations: Data retention for tax purposes and compliance with applicable legislation.

5. On what basis do we process your personal data?

Lamego ON- Digital Commercial District processes your personal data based on the following circumstances:

Your express consent: When you authorize the receipt of marketing communications, such as emails or SMS with promotions and news.
The execution of a contract: For purchase processing, order management, and provision of services contracted on the platform.
Compliance with a legal obligation: To ensure compliance with applicable tax and regulatory requirements.
The legitimate interest of Lamego ON - Digital Commercial District: To improve user experience, optimize the services offered, and ensure platform security.

We are committed to processing your personal data with complete confidentiality and security, preventing unauthorized access, loss, or damage.

6. How long do we retain your personal data?

Lamego ON - Digital Commercial District retains your personal data only for the time necessary to fulfill the purpose for which they were collected. Generally, Lamego ON - Digital Commercial District retains transaction data for a period of 10 years, which is the period defined by law, as well as the maximum reasonable lifespan of our equipment. If you exercise your right to object or right to erasure, the data will be deleted, unless a legal obligation imposes its retention for a longer period.

7. To whom do we transmit your personal data?

Lamego ON - Digital Commercial District may share your personal data with third parties, only when necessary for the provision of contracted services. This includes, for example, carriers for product delivery. Furthermore, your data may be transmitted to public entities, such as the Tax Authority, when required by law.

8. What are your personal data protection rights and how can you exercise them?

At Lamego ON - Digital Commercial District, we ensure that you can exercise your data protection rights in an accessible and secure manner. These are your rights and how you can exercise them:

Right of Access: You can request information about the personal data we process, including the purposes of processing and retention periods.
Right to Rectification: If your data is incorrect or outdated, you can request its correction.
Right to Erasure: You can request the deletion of your personal data, except in cases where its retention is required by law.
Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable digital format.
Right to Object: You can object to the processing of your data or withdraw previously given consent.
Right to Restriction of Processing: You can request the suspension of processing or the restriction of the use of your data for specific purposes.
Right not to be subject to automated decision-making: You can request not to be subject to exclusively automated decisions, such as consumer profiles based on your purchase history and preferences.

To exercise any of these rights, please contact us using the form provided in the contacts section.

9. How do we protect your personal data?

At www.lamegoon.pt, we adopt rigorous security measures to ensure the protection of your personal data, aligned with the best national and international practices. These measures include technological, administrative, physical, and procedural controls to prevent misuse, unauthorized access, improper disclosure, loss, alteration, or destruction of your data.

We highlight some of the main measures implemented:

Restricted access only to authorized employees.
Secure storage and transmission of personal data.
System protection against unauthorized access.
Integrity and quality mechanisms to ensure data accuracy.
Continuous monitoring to prevent and detect possible threats.
System redundancy to prevent information loss.

We are committed to continuously improving our security practices to ensure the maximum protection of your data.

10. Updates to this Privacy Policy

This Privacy Policy may be reviewed and updated periodically. Any changes will be duly communicated through our platform.