Sintra Digital Village
The Future of Local Commerce

Privacy Policy

Framework under Regulation (EU) 2016/679 and Law No. 58/2019

Considering Law No. 58/2019, which ensures the enforcement in the national legal order of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), which replaced Directive 95/46/EC transposed into the Portuguese legal system by Law No. 67/98 of 26 October.

All information collected through forms on www.sintraviladigital.pt is stored in a database where access is reserved to the Municipality of Sintra and its respective technical teams involved, duly authorized for maintenance and support purposes. The information collected is only used by internal services and at no time will the data be transferred to third parties for commercial purposes. It is further informed that the presented platform encrypts user passwords so that they cannot be violated. The data may only be used publicly by the Municipality of Sintra to defend its good name.

Any password or private data provided by the user is their sole responsibility. The user must ensure that only authorized individuals access their accounts. The user will be responsible for any problems associated with the misuse of their user account in case of unauthorized access.

For statistical purposes, for each visit to www.sintraviladigital.pt, information about the browser used, screen resolution, IP address, hostname, and pages visited on www.sintraviladigital.pt is collected. This information is stored in access files reserved for the Municipality of Sintra and its respective technical teams involved, duly authorized for maintenance and support purposes.

What is personal data and what categories of data do we process at Sintra Vila Digital?

According to the General Data Protection Regulation (GDPR), personal data is any information that allows the direct or indirect identification of a person, regardless of its form or medium. At Sintra Vila Digital, we process various categories of personal data, including:

• Identification and Contact Data: Examples of this data include Name, identification document number, tax identification number (NIF), age, date of birth, telephone contact, email, address, payment details, login credentials, among others.
• Relationship with Sintra Vila Digital: Purchase history, reserved services, visited pages, searches performed on the platform.
• User Profile: Preferences, interests, and interactions with the platform.

Who is responsible for processing your personal data?

The entity responsible for the processing of your personal data is the Municipality of Sintra as the Data Controller, in accordance with Article 4 of the GDPR, which manages and ensures the protection of the data collected on the platform, guaranteeing compliance with the applicable legislation on privacy and data protection.

In what situations do we process your personal data?

At Sintra Vila Digital, we process your personal data in the following situations:

• When you create an account on the platform.
• When you make a purchase or book a service.
• When you interact with the platform or use its functionalities.
• Whenever you provide us with your consent for the processing of your data.

The processing can occur digitally, in writing, or, in certain cases, through direct contact.

For what purposes do we process your personal data?

Sintra Vila Digital ensures that your personal data is processed exclusively for the purposes informed within the scope of the services made available on the platform. For example, we process your data for the following purposes:

• User Account Management: Processing of identification and contact data for account creation and management.
• Purchase Processing: Registration of orders, invoicing, and purchase history.
• Marketing and Communication: Sending information about campaigns, promotions, and news, with the user’s consent.
• Home Deliveries: Use of identification, contact, and address data for shipping orders.
• Compliance with Legal Obligations: Data retention for tax purposes and compliance with applicable legislation.

On what grounds do we process your personal data?

Sintra Vila Digital processes your personal data based on the following circumstances:

• Your express consent: When you authorize the receipt of marketing communications, such as emails or SMS with promotions and news.
• The execution of a contract: For processing purchases, managing orders, and providing services contracted on the platform.
• Compliance with a legal obligation: To ensure compliance with applicable tax and regulatory requirements.
• The legitimate interest of Sintra Vila Digital: To improve the user experience, optimize the services offered, and ensure the security of the platform.

We are committed to processing your personal data with complete confidentiality and security, preventing unauthorized access, loss, or damage.

How long do we keep your personal data?

Sintra Vila Digital keeps your personal data only for the time necessary to fulfill the purpose for which it was collected. In general, Sintra Vila Digital keeps transaction data for a period of 10 years, which is the period defined by law, as well as the maximum reasonable lifespan of our equipment. If you exercise your right to object or right to erasure, the data will be deleted, unless a legal obligation imposes its retention for a longer period.

To whom do we transmit your personal data?

Sintra Vila Digital may share your personal data with third parties only when necessary for the provision of contracted services. This includes, for example, carriers for the delivery of products. In addition, your data may be transmitted to public entities, such as the Tax Authority, when required by law.

What are your personal data protection rights and how can you exercise them?

At Sintra Vila Digital, we guarantee that you can exercise your data protection rights in a transparent and secure manner. These are your rights and how you can exercise them:

• Right of Access: You can request information about the personal data we process, including the purposes of the processing and the retention periods.
• Right to Rectification: If your data is incorrect or outdated, you can request its correction.
• Right to Erasure: You can request the deletion of your personal data, except in cases where its retention is required by law.
• Right to Data Portability: You have the right to receive your data in a structured, commonly used, and machine-readable digital format.
• Right to Object: You can object to the processing of your data or withdraw a previously given consent.
• Right to Restriction of Processing: You can request the suspension of processing or the restriction of the use of your data for specific purposes.
• Right not to be subject to automated decisions: You can request not to be subject to decisions based solely on automated processing, such as consumer profiles based on your purchase history and preferences.

To exercise any of these rights, please contact us through our contact form.

How do we protect your personal data?

At Sintra Vila Digital, we adopt rigorous security measures to ensure the protection of your personal data, aligned with the best national and international practices. These measures include technological, administrative, physical, and procedural controls to prevent misuse, unauthorized access, improper disclosure, loss, alteration, or destruction of your data.

We highlight some of the main measures implemented:

• Restricted access only to authorized employees.
• Secure storage and transmission of personal data.
• Protection of systems against unauthorized access.
• Integrity and quality mechanisms to ensure the accuracy of data.
• Continuous monitoring to prevent and detect potential threats.
• System redundancy to avoid data loss.

We are committed to continuous improvement of our security practices to ensure maximum protection of your data.

Updates to this Privacy Policy

This Privacy Policy may be reviewed and updated periodically. Any changes will be duly communicated through our platform.

Merchant Terms and Conditions

In order to facilitate your search and ensure that you quickly and efficiently find the content best suited to your needs, the platform allows for the personalization of the ordering criteria for the content displayed.

The results are organized based on the following parameters, in the different sections of the platform, according to the order indicated:

1. Object

The Sintra Vila Digital platform allows local merchants to make their products and services available for online sale, acting as an intermediary in the transaction between buyers and sellers.

2. Registration and Account

Only legally established merchants can register on the platform.

The merchant must provide truthful information, including tax and bank details, and keep the data updated.

The Marketplace reserves the right to suspend or terminate accounts that do not meet the requirements or violate the Terms and Conditions.

3. Merchant Obligations

The merchant is responsible for the accuracy of the descriptions and images of the products presented.

They must ensure the conformity of the products with applicable legislation, including safety standards and warranty rules.

The merchant sets prices, delivery times, and return policies, provided they comply with current legislation.

The merchant undertakes to provide adequate customer support and respond to buyer complaints.

4. Payments and Commissions

The Marketplace may charge a commission on sales made, the value of which will be disclosed to the merchant in advance, if applicable.

Payments to the merchant will be processed according to the methods and deadlines established by the Marketplace.

The merchant is responsible for issuing invoices to buyers in accordance with current tax rules.

5. Deliveries and Returns

The merchant is responsible for shipping the products and meeting the agreed deadlines.

They must accept returns and refunds in accordance with consumer protection legislation.

In case of logistical problems, the merchant must communicate with the buyer and present alternative solutions.

6. Guarantees and Responsibilities

The merchant assumes full responsibility for the products sold, including warranty and legal compliance.

The Marketplace is not responsible for claims arising from the relationship between merchant and buyer.

The merchant undertakes to maintain a good level of service and comply with the quality policies established by the Marketplace.

7. Penalties and Account Suspension

The Marketplace may suspend or cancel the merchant’s account in case of fraudulent practices, breach of sales conditions, or recurring customer complaints.

In case of suspension, the merchant will be notified and may present justifications.

8. Changes to the Terms

The Marketplace may change these Terms and Conditions upon prior notification. Continued use of the platform implies acceptance of the new conditions.