Privacy Policy

Nozama has always sought to maintain strong relationships with its customers, based on transparency and trust. This Privacy Policy describes who we are, for what purposes we may use your data, how we process and store it, with whom we share it, how long we keep it, as well as how to contact us and exercise your rights.

Your data will be processed by Nozama, registered as a legal entity with tax identification number 254 836 836, with registered office at Rua de São Marcos 7, 2560-232 Torres Vedras, telephone number +(351) 919019133, hereinafter referred to as “Nozama” or “we”.

Nozama is responsible for the processing of personal data that it collects and processes, as defined by the General Data Protection Regulation.

Personal data may also be collected in conjunction with brands that we sell in our stores and with which we develop loyalty programs. When this occurs, the conditions under which the data is collected and processed are transparent and visible to the data subject, and subject to double guarantee, that is, covered by Nozama's Privacy Policy and the Privacy Policy of the respective brand.

We only process personal data when it is necessary to comply with applicable legal obligations, or when such processing is necessary for the performance of a contract or pre-contractual steps related thereto, such as, in particular, transactions carried out in the online store. We may also process information if we have a legitimate interest in doing so, provided that, in each case, our interest is in accordance with applicable law and the rights of the data subject; this may occur, in particular, to:

  • Communication with our customers;
  • Marketing communication tailored to our clients' needs, including the use of profile definition;
  • Employee recruitment;
  • Website development and maintenance;
  • Provision of technical assistance;
  • Fraud prevention and detection;
  • To ensure network and information security;
  • Providing information about Nozama's activities;
  • Quality management.

When none of the other conditions of lawfulness are suitable to support the data processing operation, we will only process the information if we have obtained the data subject's consent to process their personal data for specific, explicit and legitimate purposes.

Nozama is committed to processing only the personal data strictly necessary for each process. Specifically, we may process, among others, the following personal data:

  • Identification information, such as your name, civil and tax identification numbers, and date of birth;
  • Contact information, such as your mobile phone number, email addresses, and physical address;
  • Consumer data, such as purchase history, order data, demographic and consumption profile data, and marketing preferences;
  • Transaction data, such as billing data and data necessary for transaction management;
  • Traffic data on our website, through the use of cookies.

We retain personal data only for the period necessary to fulfill the purposes for which it was collected. In certain cases, data may be retained for longer periods, particularly when required by law.

To achieve some of the listed purposes, Nozama may process your personal data to create and define your profile(s). This happens when some of your personal aspects are evaluated to make predictions about you, although Nozama does not make automated decisions based on them.

Specifically, we track and analyze your habits and activities regarding your use of Nozama's services to create user profiles, present you with useful and relevant advertising, evaluate the effectiveness of that advertising, and personalize our websites and applications to your needs, including through the use of cookies.

Profiling based on your habits and activities on our website will only occur if you have consented to the collection of cookies for such purposes. For more information on how we use cookies, please see our Cookie Policy.

If you would like more specific information about the profiling methods used by Nozama, you can contact our Data Protection Officer using the contact details below.

Information security and the protection of personal data are a priority for Nozama. We implement and ensure the maintenance of appropriate technical and organizational measures that, taking into account the most advanced techniques, application costs, the nature, scope, context, and purposes of each personal data processing operation, mitigate risks to the data subject and prevent the occurrence of personal data breaches and security incidents in general.

In particular, we highlight, among others, the following measures:

  • Developing the necessary efforts to ensure that third-party entities collaborating with us under contract, as partners or service providers, guarantee adequate protection of the personal data to which they have access.
  • Limiting access to personal data to specific employees, and only when their contact with such personal data is justified within the scope of their duties.
  • Implementation of precautionary measures to protect personal data against loss or misuse, and use of security procedures to prevent unauthorized access to this personal data.
  • Storage of personal data on servers that offer security guarantees.
  • Our systems and security policies are subject to periodic reviews to ensure that data is safe and protected.

We also respect the confidentiality of your information. As such, we do not sell, distribute, or otherwise commercially make your information available to any third party. Nozama is committed to keeping your information confidential in accordance with this Privacy Policy and applicable law.

At any time, the data subject may:

  • Requesting access to information – the holder of personal data has the right to obtain confirmation as to whether or not data concerning him or her are being processed and, where that is the case, to access his or her personal data and the information provided for by law.
  • Request the correction of information if it is inaccurate or incomplete – the holder of personal data has the right to have Nozama, without undue delay, correct inaccurate or incomplete data concerning him or her.
  • Requesting the erasure of your personal data – the data subject has the right to request Nozama to erase their data without undue delay, and Nozama has the obligation to erase personal data without undue delay when one of the following grounds applies, in particular:
    • The personal data is no longer necessary for the purpose that motivated its collection or processing;
    • Opposes treatment and there are no overriding legitimate interests that justify treatment; or
    • You have withdrawn your consent to the processing of your data (in cases where the processing is based on consent) and there is no other legal basis for said processing.
  • Requesting the restriction of the processing of your personal data – the data subject has the right to request Nozama to restrict the processing of their data if one of the following situations applies, in particular:
    • To contest the accuracy of personal data for a period that allows Nozama to verify its accuracy;
    • The data processing is lawful and the data subject objects to the erasure of personal data and requests, instead, the restriction of its use;
    • Nozama no longer needs personal data for processing purposes, but this data is required by the data subject for the establishment, exercise or defense of legal claims.
    • If you have objected to the processing, it will remain pending until it is verified that the legitimate grounds of the controller override those of the data subject.
  • Objecting to the processing of your personal data – the data subject, 1) in cases where data processing is carried out for the purposes of the legitimate interests pursued by Nozama; or 2) data processing is carried out for direct marketing purposes; or 3) profiling; you may also, at any time, object to the processing of your personal data.
  • If the processing depends on your consent , you have the right to withdraw it – if consent is legally required for the processing of personal data, the data subject has the right to withdraw consent at any time, although this right does not compromise the lawfulness of the processing carried out based on the consent previously given, nor the subsequent processing of the same data based on another legal basis, such as compliance with the contract or the legal obligation to which Nozama is subject.

Data subjects may exercise their rights at any time by contacting info@nozama.pt via email or by mail to Rua de São Marcos 7, 2560-232 Torres Vedras.

You can also contact the Data Protection Officer at dpo@nozama.pt .

Your requests will be handled with special care so that we can ensure the effectiveness of your rights. You may be asked to prove your identity to ensure that personal data is only shared with its owner.

Please keep in mind that in certain cases (for example, due to legal requirements) your request may not be fulfilled immediately.

In any case, you will be informed of the measures taken in this regard within one month from the moment the request is made.

You also have the right to lodge a complaint with the National Data Protection Commission https://www.cnpd.pt/ .

This policy should be consulted regularly by data subjects, as it may be updated.