Privacy policy

Effective Date: 1/09/2024
Last Updated: 1/09/2024

At VERD (“we,” “our,” or “us”), we are committed to protecting your privacy and ensuring that your personal data is handled securely and responsibly. This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website or services (the "Service"). This policy is in compliance with the General Data Protection Regulation (GDPR) and other applicable laws within the European Union, specifically in Portugal.

1. Who We Are

• Data Controller: VERD
• Registered Address: Av Gonçalves Zarco 701 RC E, Cascais
• Contact Information: [email protected]

For the purposes of GDPR, VERD is the Data Controller responsible for the processing of your personal data through the Service.

2. What Data We Collect

We may collect and process the following categories of personal data:

2.1 Personal Data You Provide

When you use our Service, you may provide personal data, including:

• Contact Information: Name, email address, phone number (optional).
• Account Information: Username, password, and other registration details.
• Payment Information: Credit/debit card details or payment account information, if relevant for subscriptions or purchases.

2.2 Data We Collect Automatically

When you use our Service, we may automatically collect:

• Device and Usage Information: IP address, browser type, operating system, device information, and usage data (e.g., page views, time spent on the Service).
• Cookies and Similar Technologies: We use cookies, pixels, and similar technologies to track your usage of the Service and improve user experience. More details can be found in our Cookie Policy.

2.3 Third-Party Services

If you interact with our Service via third-party platforms (e.g., Google, Facebook), we may collect data such as your name, email address, and public profile data from those services, in accordance with their privacy policies.

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing the Service: To operate and maintain our Service and provide you with access to it.
• Account Management: To manage user accounts, authenticate logins, and process payments.
• Customer Support: To respond to your inquiries and provide technical support.
• Communication: To send you updates, notices, or other relevant communications.
• Marketing (with consent): To send you newsletters and promotions, only with your explicit consent. You may withdraw your consent at any time.
• Analytics and Improvements: To monitor usage and improve the functionality and performance of our Service.
• Legal Obligations: To comply with our legal obligations and respond to legal processes or requests from public authorities.

4. Legal Basis for Processing

We process your personal data on the following legal bases, as outlined in Article 6 of the GDPR:

• Contractual Necessity: When processing is required to perform a contract (e.g., providing the Service).
• Legitimate Interest: For improving the Service, ensuring security, or conducting analytics, unless overridden by your data protection rights.
• Consent: For marketing communications and optional services (you can withdraw your consent at any time).
• Legal Obligation: When processing is necessary to comply with legal obligations.

5. Sharing Your Data

We may share your personal data with:

5.1 Service Providers

We may share your data with third-party service providers who perform services on our behalf, such as:

• Hosting services.
• Payment processors.
• Customer support providers.
• Analytics services (e.g., Google Analytics).

These third parties are obligated to handle your data securely and in compliance with GDPR, and they may only use it for the purpose for which it was shared.

5.2 Legal Compliance

We may disclose your personal data when required to:

• Comply with legal obligations.
• Protect the rights and safety of VERD, users, and others.

5.3 Business Transfers

If VERD is involved in a merger, acquisition, or asset sale, your personal data may be transferred as part of that transaction.

6. International Data Transfers

We may transfer your personal data to third parties or service providers located outside the European Economic Area (EEA). In such cases, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses or equivalent) to protect your data in accordance with GDPR.

7. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes for which it was collected, or as required by law. Once your data is no longer needed, we will securely delete or anonymize it.

8. Your Data Protection Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of Access: You can request a copy of the personal data we hold about you.
• Right to Rectification: You can request correction of any inaccurate or incomplete data.
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your personal data under certain conditions.
• Right to Restrict Processing: You can request to restrict the processing of your personal data.
• Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
• Right to Object: You can object to the processing of your data, including for marketing purposes.
• Right to Withdraw Consent: If processing is based on your consent, you have the right to withdraw it at any time.
• Right to Lodge a Complaint: You have the right to lodge a complaint with the supervisory authority in Portugal, Comissão Nacional de Proteção de Dados (CNPD), regarding our data processing practices.

To exercise your rights, please contact us at [Your Contact Information].

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your data, we cannot guarantee its absolute security.

10. Children's Privacy

Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16 without verifiable parental consent. If we become aware that we have inadvertently collected data from a child under 16, we will delete it.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal obligations. We will notify you of any significant changes by posting the updated policy on our website and updating the “Last Updated” date. Your continued use of the Service following any changes constitutes your acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

VERD
Av Gonçalves Zarco 701 RC E, Cascais
Email: [email protected]
Phone: 961766091