1. Who is the data controller?

The platform operator is Tradinportugal - Centro de Negócios Para E-Commerce, Lda, corporate tax identification number (NIPC) 516763660. It is responsible for processing the data needed to manage the platform, accounts, security, support and its own legal obligations. You can contact us about data protection at info@tradinportugal.com or through the contact page.

Stores receive the data necessary for the requests you send them. Each store may be responsible for the processing it carries out to prepare quotations, manage its sales, invoice, deliver and provide support. The store's identity and contact details should be checked on its page and in the request information. Approval of access to a store does not authorise the use of your data for any purpose whatsoever.

2. What data do we collect and where does it come from?

• Account and contact: the name, email, telephone number, address and preferences you provide; business and tax identification details where necessary for the profile or request.
• Commercial relationship: products viewed in connection with a request, messages, quotations, orders, billing or delivery details, request status and support, return or warranty cases, depending on the services used.
• Professional access: information provided when requesting certification or access to a store and the outcome of the assessment of that request.
• Authentication: data needed to start and protect your session. If you choose to sign in through an external provider, such as Google, we receive the identification and contact details authorised in that process; we do not receive the password for that external account.
• Security and operation: technical logs, IP address, browser, access dates, authentication attempts and incidents necessary to prevent abuse and investigate failures.
• Choices and rights: cookie preferences, requests relating to your data and the information needed to respond to and demonstrate the handling of those requests.

Data comes mainly from you, from use of the service and, where applicable, from the store or authentication provider involved in the request. Mandatory fields are identified on forms; without this data, it may not be possible to provide the requested functionality. Do not send passwords, authentication codes, full card details, health data or other sensitive data through the chat or general forms.

3. What do we use the data for and on what basis?

• Creating and managing the account and providing the requested services: performance of the contractual relationship and pre-contractual steps, including quotations, requests and communication with the chosen store.
• Responding to support requests: performance of the requested service or a legitimate interest in providing support and managing the relationship, depending on the context.
• Protecting accounts and the service: a legitimate interest in security, preventing fraud and abuse, detecting failures and defending rights, with proportionate measures and respect for data subjects' rights.
• Complying with legal duties: applicable tax, accounting, consumer and data protection obligations and responses to competent authorities.
• Optional statistics or marketing cookies: your prior consent to the chosen category. Refusing them does not prevent access to essential functionality.
• Commercial communications, where undertaken: consent, unless a statutory exception actually applies. You may withdraw consent or object to direct marketing at any time. Messages necessary for accounts, requests and security have a separate purpose.

Reading or accepting this Policy does not, in itself, constitute consent to marketing or optional cookies.

4. Who may data be shared with?

Data may be disclosed to the store to which you send a request and to providers necessary for the functionality used: hosting and maintenance, authentication, communications, support and security, and, where applicable to the transaction, payment, invoicing or transport services. It may also be disclosed to advisers or authorities where there is a lawful basis. Sharing must be limited to the data necessary for the relevant purpose.

Processing by providers on behalf of the operator requires the applicable responsibilities, instructions, confidentiality and protective measures to be defined. If a service involves a transfer outside the European Economic Area, the conditions laid down in the GDPR must be checked, including an adequacy decision or other applicable safeguards. You may request the identity of recipients, the countries involved and the safeguards relevant to your case using the contact details in this Policy.

5. Assistant and related services

Use of the assistant is optional. When you open the chat and send a request, the data entered, such as your name, email and messages, is disclosed to Memogadget's Assist service to provide this functionality and enable follow-up by the team. The page context sent by the chat is limited to the domain and page path, without the link's query parameters or fragment.

The operation of Assist and related artificial intelligence or credit functionality may involve additional technical providers and usage logs. This processing must have an appropriate basis and information corresponding to the functionality used. You may request clarification about recipients and processing conditions before sending information that is not necessary for your request.

The chat uses browser session storage to maintain the session and recent history. Clearing the chat removes this local state; it does not delete records already received by the service. To request access to or erasure of those records, use the channels for exercising rights listed below. Do not use the assistant to send passwords or other access secrets.

6. How long do we retain data?

Retention depends on the purpose and context:

• Account data is needed during the relationship with the user and to handle pending closure, correction or rights requests.
• Quotation, order and support data is retained for as long as necessary for the request, to comply with applicable legal obligations or to defend rights. The existence of an order does not justify retaining all data indefinitely.
• Technical and security logs must be limited to the period necessary to prevent abuse and investigate incidents.
• Cookie preferences are stored in the browser for up to 365 days after the choice, unless withdrawn or deleted earlier. A simple visit does not renew this period.
• A data export prepared in the privacy area is available to download for seven days. After that period, downloading is blocked and expired files are removed by the periodic cleanup routine. Expiry of an export does not, in itself, erase the source data.

You may request information about the criteria and periods specifically applicable to your data. Withdrawal of consent does not remove statutory retention obligations or prevent keeping the minimum evidence necessary to respect and demonstrate that choice.

7. Cookies and browser choices

Essential cookies enable functions such as sessions, security, the basket and remembering your choices. Optional statistics and marketing categories remain disabled until an explicit choice is made. Continuing to browse, scrolling or closing a window does not constitute consent.

You may accept or refuse optional categories or choose preferences in the cookie manager. You can return to Cookie settings, also available in the footer, to withdraw or change your choice just as easily. The change applies to that browser; other devices or browsers may have different preferences. When you withdraw a category, scripts dependent on that choice stop loading on subsequent pages and the page reloads to apply the change.

8. Rights and how to exercise them

Under the applicable legal conditions, you may request access to and a copy of data, rectification, erasure, restriction of processing and portability; object to processing based on legitimate interests and to direct marketing; and withdraw consent without affecting the lawfulness of earlier processing. You may also request information about any profiling or solely automated decisions that significantly affect you and exercise the corresponding rights, where applicable.

Send your request to info@tradinportugal.com or use the privacy and personal data area when signed in. You do not need to create an account or be able to sign in to contact us by email. Describe your request and provide only the information necessary to locate the data; we may request additional identity confirmation if there are reasonable doubts.

The initial response period is one month from receipt. Where the complexity or number of requests legally justifies it, this period may be extended by up to two additional months; the extension and reasons are communicated within the first month. If it is not possible to act on the request, the reasons and applicable complaint options will be communicated.

Erasure and portability are subject to the legal conditions of each right. An automatic export may exclude credentials and information that would compromise security or third-party rights; you may request clarification or additional access. If processing is solely the responsibility of a store or another controller, we will indicate the appropriate channel and the information necessary to exercise the right.

You may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados), without prejudice to other remedies.

9. Security and updates to this Policy

Access to data must respect assigned permissions and the need to use it. Use strong, unique passwords and report suspected unauthorised access using the contact details provided. No system is entirely free of risk.

This Policy may be updated when services or processing conditions change. The current date and text are available on this page; changes that require additional information or fresh consent must be addressed before the new processing takes place.