www.desenhabitado.pt Privacy Policy

This Site collects some Personal Data from Users.

Owner and Data Controller

Desenhabitado, Arquitectura de Interiores Lda.
bulthaup Lisbon
Rua das Amoreiras nº 70 b | 1200-005 Lisboa

Owner’s contact e-mail: info@desenhabitado.pt

Types of data collected

Among the types of Personal Data that this Site collects, by itself or through third parties, are: Name; Surname; Telephone number; Company name; E-mail; Cookies.

Full details of the Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanatory texts displayed before it is collected.

Personal Data may be provided voluntarily by the User or, in the case of Usage Data, collected automatically when using this Site.

Unless specified, all Data requested by this Site is mandatory and failure to provide this Data may make it impossible for this Site to provide its Services. In cases where this Site specifically states that some Data is not mandatory, Users will not have to fill in such Data and there will be no consequences for the availability or functioning of the Service.

Users who have doubts about which Personal Data is mandatory are invited to contact the Owner.

Any use of cookies – or other tracking tools – by this Site or by the owners of third-party services used by this Site will be for the purpose of providing the Services requested by the User, in addition to the other purposes described in this document and in the Cookies Policy, if available.

Users are responsible for any third party Personal Data obtained, published or shared through this Service (this Site) and confirm that they have the third party’s authorisation to provide the Data to the Owner.

Method and place of data processing


Method of processing

The Owner will take appropriate security measures to prevent unauthorised access, disclosure, alteration or unauthorised destruction of the Data.

Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and means strictly related to the purposes indicated. In addition to the Owner, in some cases the Data may be accessed by certain types of persons in charge, involved with the operation of this Service (this Site) (administration, sales, marketing, legal system administration) or external persons (such as third-party providers of technical services, couriers, etc.) appointed, where necessary, as Data Processors by the Owner. The updated list of these parties may be requested from the Owner at any time.

Legal basis for processing


The Owner may process Personal Data relating to the User if one of the following applies:

  • Users who have given their approval for one or more specific purposes; Note: Under some legislations the Owner may be allowed to process the Personal Data UNTIL the User objects to this (“opt-out”), without having to rely on permission or any of the following other legal bases. This, however, does not apply where the processing of Personal Data is subject to European data protection legislation;
  • the provision of the Data is necessary for the fulfilment of a contract with the User and/or any pre-contractual obligations thereof;
  • the processing is necessary for the fulfilment of a legal obligation to which the Owner is subject;
  • the processing is related to a task carried out in the public interest or in the exercise of an official authorisation in which
  • the Owner is vested;
  • the processing is necessary for the purposes of legitimate interests pursued by the Owner or by a third party;

In any case, the Owner will willingly co-operate to clarify which legal basis applies to the processing, and in particular if the provision of Data is a mandatory requirement by law or contract, or a necessary requirement to enter into a contract.

Location

Data is processed at the headquarters of the Owners, and in any other places where the parties involved in the processing are located.

Depending on the User’s location, data transfers may involve the transfer of User Data to a country other than their own. To find out more about the place of processing of such transferred Data, Users can check the section containing details on the processing of Personal Data.

Users also have the right to be informed about the legal basis for transfers of Data to countries outside the European Union or to any international organisations governed by public international law or formed by two or more countries, such as the UN, and about the security measures taken by the Owner to protect their Data.

If any such transfers occur, Users can find out more by checking the relevant sections of this document or by asking the Owner using the information provided in the contact section.

Retention period

Personal Data will be processed and stored for as long as necessary for the purposes for which it is collected.

Therefore:

  • Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be kept until such contract has been fully performed.
  • Personal Data collected for purposes related to the legitimate interests of the Owner will be kept for as long as necessary to fulfil such purposes. Users may obtain specific information on the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be allowed to keep Personal Data for a longer period of time when the User has given his/her authorisation for such processing, as long as such authorisation has not been withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period of time on all occasions when it is obliged to do so for the fulfilment of a legal obligation or in compliance with a warrant from an authority.


Once the retention period has expired, the Personal Data will be deleted. This means that the right to access, the right to erasure, the right to correction and the right to data portability cannot be enforced after the expiry of the retention period.

The purposes of processing

User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Contacting the User; Anti-spam protection; Access to third party service accounts; Statistics; Saving and managing backup; Commenting on content; Viewing content from external platforms; Payment processing; Interaction with social networks and external platforms; User database management; Interaction with data collection platforms and other third parties; Email address management and messaging; Registration and authentication; Tag management and Traffic optimisation and distribution.

Users may obtain additional detailed information on such processing purposes and on the specific Personal Data used for each purpose in the respective sections of this document.

Facebook permissions requested by this Site

This Site may request certain Facebook permissions that allow it to carry out actions with the User’s Facebook account and to retrieve information, including personal data. This service allows this Site to connect with the User’s account on the Facebook social network, provided by Facebook Inc.

For more information on the following permissions, please consult the Facebook permissions documentation https://developers.facebook.com/docs/facebook-login/permissions” title=”https://developers.facebook.com/docs/facebook-login/permissions)”>https://developers.facebook.com/docs/facebook-login/permissions) and Facebook’s privacy policy (https://www.facebook.com/about/privacy/).

The permissions requested are as follows: Birthday, Email contact, Email and Basic information.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Access to third-party service accounts

This type of service allows this service (this Site) to access the Data in your account with a third-party service and carry out actions with them.

These services are not activated automatically, they require explicit authorisation from the User

Access to the Facebook account (this Site)


This service allows this Site to connect with the User’s account on the Facebook social network, provided by Facebook, Inc.

Permission request: Birthday; Email contact; Email.

Place of processing: USA – Privacy Policy(https://www.facebook.com/policy.php).

Privacy Shield Participant.

Content comments


Content comment services allow Users to create and publish comments on the content of this service (this Site).

Depending on the settings chosen by the Owner, Users can also leave anonymous comments. If there is an e-mail address among the Personal Data provided by the User, it can be used to send notifications of comments on the same content. Users are responsible for the content of their comments.

If a content commenting service provided by a third party is installed, it may still collect web traffic data for the pages where the commenting service is installed, even when Users do not use the content commenting service.

Directly managed comments system (this site)


This Site has its own internal content comments system.

Personal Data collected: Cookie; E-mail; Name; User name; Surname; Website.

Contacting the User

Contact form (this Site)

By filling in the contact form with their Data, Users authorise this Site to use these details to respond to requests for information, quotations or any other type of request as indicated by the title of the form.

Personal Data collected: Name, E-mail; Company name; Telephone number.

Mailing list or newsletter (this Site)


By registering for the mailing list or newsletter, the User’s e-mail address will be added to the contact list of those who may receive e-mail messages containing information of a commercial or promotional nature about this Site. Your e-mail address may also be added to this list as a result of registering for this service (this Site) or after making a purchase.

Personal Data collected: E-mail; First name; Surname.

Contact telephone number (this Site)

Users who have provided a telephone number may be contacted for commercial or promotional purposes related to this Site, as well as to fulfil support requests.

Personal Data collected: Telephone number.

Statistics


The services in this section enable the Owner to monitor and analyse web traffic and may be used to track User behaviour.

Google Analytics (Google Inc.)

Google Analytics is an Internet analysis service provided by Google, depending on the location from which this Site is accessed, (“Google”). Google uses the data collected to track and analyse the use of this service (this Site) to prepare reports on activities and share them with other Google services.

Google may use the data collected to contextualise and personalise the ads of its own advertising network.

Personal Data collected: Cookie; Usage Data.

Place of processing: USA – Privacy Policy (https://www.facebook.com/policy.php ) – Opt (https://policies.google.com/privacy?hl=pt) Out.

Privacy Shield Participant.

WordPress Stat (Automattic Inc.)

WordPress is an analysis service provided by Automattic Inc.

Personal Data collected: Cookie; Usage data.

Place of processing: USA – Privacy Policy (https://automattic.com/privacy/).

User database management

These types of services allow the Owner to create User profiles from an e-mail address, a personal name, or other information that the User has provided to this Site, as well as tracking User activities through analytical features. This Personal Data may also be combined with publicly available information about the User (such as social network profiles) and used to build private profiles that the Owner can display and use to improve the service (this Site).

Some of these services may also be enabled to send the User scheduled messages such as emails based on actions taken on this service (this Site).

Intercom (Intercom Inc.)


Intercom is a database management service provided by Intercom Inc.

Intercom can also be used as a means for communications, both via e-mail and messages within this service (this Site).

Personal Data collected: Cookie; Usage Data; e-mail; various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://docs.intercom.io/pricing-and-terms/privacy).

Managing e-mail addresses and sending messages

These types of services allow the management of the database of e-mail contacts, telephone numbers or other contact information for the purpose of communicating with the User.

These services can also be used to collect data regarding the date and time the User viewed the e-mail; and also when the User interacted with the e-mail received, such as when the User selected the links included in the e-mail.

Mailchimp (The Rocket Science Group, LLC.)


Mailchimp is the e-mail address management and message sending service provided by The Rocket Science Group LLC.

Personal Data collected: e-mail.

Place of processing: USA – Privacy Policy (https://mailchimp.com/legal/privacy/).

Privacy Shield Participant.

Sendgrid (Sendgrid)

Sendgrid is the email address management and message sending service provided by Sendgrid Inc.

Personal Data collected: e-mail.

Place of processing: USA – Privacy Policy (https://sendgrid.com/policies/privacy/).

Tag management


This type of service helps the Owner to manage the tags or scripts required by this Site in a centralised way. As a result, User Data flows through these services and there is the possibility of retaining this Data.

Google Tag Manager (Google)

Google Tag Manager is a management service provided by Google, depending on the location from which this Site is accessed.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).

Privacy Shield Participant.

Interaction with data collection platforms and other third parties

These types of services allow Users to interact with data collection platforms or other services directly from the pages of this service (this Site) in order to save and reuse data.

If one of these services is installed, it may collect Usage and Browsing Data on the pages where it has been installed, even if Users do not actively use the service.

Wufoo Widget (Wufoo Inc.)

The Wufoo Widget is a service for interacting with the Wufoo data collection platform provided by SurveyMonkey Inc., SurveyMonkey Brasil Internet Ltda. or SurveyMonkey Europe UC, depending on the location from which this Site is accessed,

Personal Data collected: Cookies; Usage Data.

Place of processing: USA – Privacy Policy (http://www.wufoo.com/privacy/).

Privacy Shield Participant.

Interaction with social networks and external platforms


These types of services allow interaction with social networks or other external platforms directly from the pages of this service (this Site).

The interaction and information obtained by this Site is always subject to the User’s privacy settings on each social network.

This type of service may also collect traffic data for the pages where the service is installed, even when Users are not using it.

It is recommended to log out of the respective services in order to ensure that the data processed in this service (this Site) is not being connected back to the User’s profile.

The Facebook Like button and Social Widgets (Facebook, Inc.)

The Facebook Like button and Social Widgets are services that allow interaction with the Facebook social network provided by Facebook, Inc.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://www.facebook.com/privacy/explanation).

Privacy Shield Participant.

The +1 button and Google+ social widgets (Google Inc.)

The +1 button and Google+ Social Widgets are services that allow interaction with the Google+ social network provided by Google, depending on the location from which this Site is accessed.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).

Privacy Shield Participant.

The LinkedIn social button and widgets (LinkedIn Corporation)

The LinkedIn social button and widgets are services that allow interaction with the LinkedIn social network provided by LinkedIn Corporation.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://www.linkedin.com/legal/privacy-policy).

Privacy Shield Participant.

The YouTube social button and widgets (Google Inc.)

The YouTube social button and widgets are services that allow interaction with the YouTube social network provided by Google, depending on the location from which this Site is accessed.

Personal Data collected: Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).

Privacy Shield participant.

Traffic optimisation and distribution

These types of services allow this Site to distribute their content using servers located in different countries in order to optimise their performance.

Some Personal Data is processed and depends on the characteristics and manner in which these services are implemented. Their function is to filter communications between this Site and the User’s browser.

Considering the widespread distribution of this system, it is difficult to determine the locations to which content that may contain the User’s personal information has been transferred.

Sucuri CloudProxy (Sucuri, Inc.)

Sucuri CloudProxy is a traffic optimisation and distribution service provided by Sucuri, Inc.

The way Sucuri CloudProxy is integrated means that it filters all traffic through this service (this Site), i.e. communication between this Site and the User’s browser, while at the same time allowing analytical data from this Application to be collected.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://bit.ly/2QQX3Al).

Payment process

Payment processing services allow this Site to process payments by credit card, bank transfer or other means. To ensure greater security, this Site only provides the information necessary to execute the transaction with the financial intermediaries operating the transaction.

Some of these services may also enable the sending of timed messages to the User of this Site such as email-based invoices and other notifications.

Paypal (Paypal)


PayPal is a payment service provided by PayPal Inc., which allows Users to make online payments.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Anti-spam protection

These types of services analyse the traffic to this service (this Site), which may contain Users’ Personal Data, with the aim of filtering it from parts of the traffic, messages and content that are recognised as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google or Google, depending on the location from which this Site is accessed.

Use of reCAPTCHA is subject to Google’s privacy policy (https://policies.google.com/privacy?hl=pt-BR) and terms of use (https://policies.google.com/terms?hl=pt-BR).

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).

Privacy Shield Participant.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://automattic.com/privacy/).

Registration and authentication

By registering or authenticating, Users allow this service (this Site) to identify them and give them access to dedicated services. Depending on what is described below, registration and authentication services may be provided by third parties. In this case, this Site may access some Data stored by these third-party services for registration or identification purposes.

Facebook Authentication (Facebook, Inc.)

Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the Facebook social network.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://www.facebook.com/help/405977429438260).

Privacy Shield Participant.

Backup saving and management


These types of services allow the Owner to save and manage backups of this service (this Site) on external servers managed by the service provider itself. The backups may include the source code and content, as well as the data that the User provides to this Site.

Backup on Google Drive (Google LLC)

Google Drive is a service for storing and managing backups provided by Google.

Personal Data collected: various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy).

Privacy Shield participant.

Viewing the content of external platforms

These types of services allow the User to visualise and interact with the content present on external platforms directly from the pages of this service (this Site). If this type of service is installed, it may collect web traffic data for the pages where it is installed, even when Users are not using them.

Google Fonts (Google Inc.)


Google Fonts is a font visualisation service provided by Google, depending on the location from which this Site is accessed, which allows this Site to incorporate content of that type on its pages.

Personal Data collected: Usage Data; various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=policies&gl=it).

Privacy Shield Participant.

Google Maps widget (Google Inc.)

Google Maps is a map visualisation service provided by Google, depending on the location from which this Site is accessed, which allows this Site to incorporate content of this type on its pages.

Personal Data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt&gl=it).

Privacy Shield Participant.

Gravatar (Automattic Inc.)

Gravatar is an image visualisation service provided by Automattic Inc., which allows this Site to incorporate content of this type into its pages.

Please note that if Gravatar images are used in comment systems, the e-mail address of the person who made the comment or parts of it may be sent to Gravatar – even if that person has not signed up for this service.

Personal Data collected: usage data; e-mail.

Place of processing: USA – Privacy Policy (https://automattic.com/privacy/).

Users’ rights

Users may exercise certain rights with regard to their Data processed by the Owner.

In particular, Users have rights such as:

  • Withdraw your consent at any time. Users have the right to withdraw their consent in cases where they have previously given their consent to the processing of their Personal Data.
  • Refuse the processing of their Data. Users have the right to refuse the processing of their Data if the processing is carried out on a legal basis other than approval. Further details are provided in the specific section below.
  • Access your Data. Users have the right to know whether their Data is being processed by the Owner, to obtain disclosures about certain aspects of the processing and to obtain a copy of the Data that is being processed.
  • Verify and request correction. Users have the right to verify the accuracy of their Data and request any updates or corrections.
  • Restrict the processing of their Data. Users have the right, under certain circumstances, to restrict the processing of their Data for any purpose other than storing it.
  • Delete Personal Data or otherwise remove it. Users have the right, under certain circumstances, to obtain the deletion of their Data from the Owner.
    Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any problem.
  • This determination is conditional on the Data being processed by automated means and on the processing being based on the User’s approval, on a contract to which the User is a party or on the User’s pre-contractual obligations.
    File a complaint. Users have the right to lodge a complaint with their competent data protection authority.

Details on the right to refuse processing

In cases where Personal Data is processed for a public interest, in the exercise of an official authorisation in which the Owner is vested or for the purposes of the legitimate interests pursued by the Owner, Users may refuse processing by providing a reason relating to their particular situation to justify the refusal.

Users should be aware that if their Personal Data is processed for marketing purposes, they may refuse processing at any time without providing any justification. Users can consult the relevant sections of this document.

How to exercise these rights

Any requests to exercise Users’ rights can be directed to the Owner using the contact details provided in this document. These requests can be exercised free of charge and will be dealt with by the Owner as soon as possible and in all cases within less than one month.

Cookies Policy

This website uses cookies. To find out more and for a more detailed warning about cookies, the User can consult the Cookies Policy.

Additional information on data collection and processing

Legal action

Users’ Personal Data may be used for legal purposes by the Owner in question or in the steps leading to possible legal action arising from a misuse of this Service (this Site) or related Services.

The User declares to be aware that the Owner may be obliged to disclose Personal Data at the request of government authorities.

Additional information about the User’s Personal Data

In addition to the information contained in this privacy policy, this Site may provide the User with additional and contextual information about specific services or the collection and processing of Personal Data upon request.

System logs and maintenance

For system and maintenance purposes, this Site and any third-party services may collect files that store interaction with this Site (system logs) or use other Personal Data (such as IP address) for this purpose.

Information not contained in this policy

Further details on the collection or processing of Personal Data may be requested from the Owner at any time. Please see the contact information at the beginning of this document.

How “Do Not Track” requests are handled

This Site does not support “Do Not Track” requests.

To determine whether any of the third-party services you use honour Do Not Track requests, please read their privacy policies.

Changes to this privacy policy


The Owner reserves the right to make changes to this privacy policy at any time by communicating to its Users on this page and possibly within this Service, this Site and/or – to the extent technically and legally feasible – by sending notice to Users via any contact information available to the Owner. It is strongly recommended that this page be consulted several times in relation to the last modification described at the bottom.

Should the changes affect processing activities carried out on the basis of the User’s approval, the Owner will collect the User’s new approval where required.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly or in connection with other information – including a personal identification number – allows the identification or identifiability of a natural person.

Usage Data


The information collected automatically through this Site (or third-party services contracted in this Service), which may include: the IP addresses or domain names of the computers used by Users using this Site, the URI addresses (Uniform Resource Identifier), the date and time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response server (positive result, error, etc.), the country of origin, the characteristics of the browser and the time spent on the page within the application, and details of the path followed. ), the country of origin, the characteristics of the browser and operating system used by the User, the various time details per visit (for example, the time spent on each page within the application) and details about the path followed within the application, with particular reference to the sequence of pages visited and other parameters about the operating system of the User’s device and/or IT environment.

User

The person using this Site who, unless otherwise specified, coincides with the Data Subject.

Data Subject


The natural person to whom the Personal Data relates.

Data Processor (or Data Supervisor)

The natural or legal person, public administration, agency or other body that processes the Personal Data on behalf of the Controller as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of Personal Data, including security measures relating to the operation and use of this Service (this Website). The Data Controller, unless otherwise specified, is the Owner of this Service (this Site).

This Site (or this Application)


The means by which the User’s Personal Data is collected and processed.

Service

The service provided by this Site as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.

Cookies

Small units of data stored on the User’s device.

Legal information

This privacy statement has been prepared on the basis of multiple legal provisions, including Articles 13/14 of Regulation (EU) 2016/679 (GDPR – General Data Protection Regulation).

This privacy policy refers only to this Site.

Last updated: 23 August 2022

contact us: