Privacy Policy
This Privacy Policy describes how Mazzaroti collects, uses, stores, and protects the personal data of users of the website www.mazzaroti.com, in accordance with the General Data Protection Regulation (GDPR – Regulation EU 2016/679) and applicable Portuguese legislation.
1. Data Controller
The data controller responsible for the processing of personal data is:
Legal name: Mónica Isabel Barros Oliveira Maia Santos
Trade name: Mazzaroti
Tax Identification Number (NIF): 238926699
Address:
Rua Conselheiro Luís Magalhães, 2654 H603
4470-616 Maia
Portugal
Contact email: monicasantos@mazzaroti.com
Telephone contact: +351 966 990 523
2. Personal Data Collected
Mazzaroti may collect and process the following personal data:
- First and last name
- Email address
- Telephone number
- Billing and/or shipping address
- Tax Identification Number
- Data required for invoicing
- Purchase history
- Communications made through the website, email, or WhatsApp
- Browsing data, including IP address, approximate location, device type, and cookies
Data is collected when the user places an order, contacts us, creates an account, or browses the website.
3. Purposes of Data Processing
Personal data is processed for the following purposes:
- Order processing and management
- Invoicing and compliance with legal and tax obligations
- Payment management
- Customer communication and customer support
- Management of requests, complaints, or inquiries
- Website security and fraud prevention
- Statistical analysis and improvement of user experience
- Sending commercial and marketing communications, only with the user’s prior consent
Mazzaroti does not use personal data for purposes incompatible with those described above.
4. Marketing and Commercial Communications
The sending of promotional communications, campaigns, news, or other marketing actions is carried out exclusively with the express consent of the user.
The user may withdraw their consent to receive marketing communications at any time, without affecting the lawfulness of the processing carried out up to that date.
5. Payments
Payments made on the website are processed through secure external platforms, namely:
- Multibanco
- MB Way
- PayPal
- Klarna or equivalent installment payment methods
Mazzaroti does not access or store banking details or full payment information, as these are processed exclusively by the respective payment service providers.
6. Sharing of Data with Third Parties
Personal data may be shared with third parties only when necessary, namely:
- Payment service providers
- Shipping and logistics partners
- Technology and hosting service providers
- Tax or judicial authorities, when required by law
All third parties comply with legal obligations regarding data protection.
7. Cookies and Similar Technologies
The website may use cookies and similar technologies to:
- Ensure proper website functionality
- Analyze usage statistics
- Improve the user experience
- Support advertising actions on Meta platforms (Facebook and Instagram)
Cookies do not collect information that directly identifies the user, unless the user voluntarily provides such data.
The user may configure their browser to refuse or delete cookies, which may affect some website functionalities.
8. Data Retention
Personal data is retained only for the period necessary to fulfill the purposes for which it was collected, namely:
- Tax data: up to 10 years, in accordance with legal obligations
- Customer and order data: for the duration of the commercial relationship
- Marketing data: until consent is withdrawn
- Contact data and communications: for the period necessary to manage the request
9. Data Subject Rights (GDPR)
Under the GDPR, the user has the right to:
- Access their personal data
- Request correction of inaccurate or incomplete data
- Request deletion of data (“right to be forgotten”)
- Request restriction of or object to processing
- Withdraw consent, where applicable
- Request data portability
These rights may be exercised by submitting a written request to:
E-mail: monicasantos@mazzaroti.com
10. Data Security
Mazzaroti adopts appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, or alteration.
11. Geographical Scope
The website is intended for national and international users. Data may be processed within the European Union or in countries that ensure an adequate level of data protection, in accordance with the GDPR.
12. Changes to the Privacy Policy
Mazzaroti reserves the right to update this Privacy Policy whenever necessary. Any changes will be published on the website, and users are advised to consult this document regularly.
13. Contact
For any questions related to this Privacy Policy or the processing of personal data, you may contact:
