Privacy Policy

This Privacy Policy regulates the treatment of the users’ personal data (hereinafter “User” or “Users”), collected in connection with this website use www.andrezandrez.com (hereinafter “site”), by Andrez Andrez.

The following may be Users of the site, without limitation:
– All visitors to the website;
– All clients and potential clients of Andrez Andrez;
– Visitors who intend to apply to Andrez Andrez as a worker or collaborator.

The provision of personal data implies knowledge and acceptance of the General Conditions of Sale and use of the website, available for consultation at www.andrezandrez/privacypolicy (hereinafter referred to as “Terms and Conditions”).

The Privacy Policy applies exclusively to the processing of personal data carried out by Andrez Andrez in the context of the purposes established herein, in which personal information is considered relative to a singular person, of any nature and regardless of its support, identified or identifiable.

Our commitment

We ensure compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and the Council (hereinafter “RGPD”) and other legislation on personal data protection and privacy.

Respect for your privacy, the protection of your personal data and compliance with applicable legal obligations in this regard is a priority for us, which is why we are committed to only processing your personal data that is strictly necessary for us to provide you with the best service, ensuring respect for your privacy, transparency in information and the application of best practices in the field of security and protection of personal data.

Whenever your personal data is processed by contracted entities, we will require them to present the same level of security and privacy guarantee in terms of personal data protection.

Who is in charge of the treatment of your personal data?

The entity responsible for processing the Users’ personal data is Andrez Andrez, with headquarters at Avenida Cerro da Vila 31 8125-403 Vilamoura, Portugal, with a social capital of €30,000, registered at the Commercial Registry Office of Cascais under the registration and taxpayer number 12973/19991228.

How can you contact the personal data protection officer?

If you need to contact us, you may do so via the following email address: contact@andrezandrez.com.
Any User may contact the Personal Data Protection Officer about any questions related to the processing of their data and the exercise of the rights conferred on them by applicable law and, in particular, by this Privacy Policy, through the following email: contact@andrezandrez.com.

For what purpose will your personal data be processed, what is the legal basis and how long will it be kept?

The User can access, navigate and use this site without supplying any personal information, without prejudice to the navigation data necessary for the correct management of the site. However, the use of certain site tools may require the provision of personal data.

We undertake to process only the personal data strictly necessary to provide you with our services with the highest quality. In this context, the processing of your personal data has the following purposes, grounds for lawfulness and retention periods:

– Management of the website
The processing of this personal data is necessary to allow you to use the website, the processing being based on the execution of a contract the terms of which are governed by the Terms and Conditions and, failing this, by the general principles of law.

Your data will be kept up to six (6) months after your last visit to the site and in accordance with the information provided in the Cookies Policy.

– Online account
If you create an online account at www.andrezandrez.com the processing of your personal data is necessary for you to enjoy the functionalities of your account, namely, to make remote purchases and access your purchase history, basing the processing on pre-contractual diligence or the execution of a contract whose terms are governed by the Terms and Conditions and, in the absence thereof, by the general principles of law.

Your data will be kept up to 2 (two) years after the end of the contract or, failing that, up to 6 (six) months after the beginning of the contracting process.

– Direct marketing
We process your personal data to be able to send you informative communications about news, campaigns and offers, discounts or benefits, either generic or targeted, via SMS and/or email. This processing is based on consent or on our legitimate interest, if your contact has been collected as part of a commercial transaction.

You can withdraw your consent or object to receiving this type of communication at any time, either through your personal account settings, or through each communication we send you.

Your data will be retained to receive these communications and up to 1 (one) year after collection of the same or the last contact.

– In store sales | Transfers | Reservations
Whenever you wish to purchase items not available in shop, we will ask you for your details so that we can inform you as soon as your item is available for collection, as well as delivering it to your home if you so request.

We will also need your personal data if you ask us to transfer an item from one shop to another, or if you ask us to reserve an item in shop. The processing of personal data is based on consent or legitimate interest.

Your personal data is kept for as long as you maintain your consent and up to 1 (one) year after collection or last contact. In case of legitimate interest for the contracted product, we will only store your data until the termination of the contract to which the product relates.

– Arrangements
Whenever you ask us to carry out any arrangement on the items you have purchased, we will ask you for the necessary personal data to be able to inform you as soon as your item is available for collection, as well as to be able to deliver it to your home, if you so request. This processing is based on pre-contractual procedures or the execution of a contract.

Your data will be kept until 2 (two) years after the end of the contract or, if the contract has not been concluded, until 6 (six) months after the beginning of the contracting process, without conclusion.

– Contests and hobbies
On our social networks – Facebook and Instagram – we run contests and hobbies with some frequency. Your personal data will only be processed for the purpose of managing and organising the contests and competitions and awarding and sending the respective prize. This processing is based on pre-contractual steps or the execution of a contract whose terms are governed by the Terms and Conditions of participation in the contest or competition.

Your data will be kept until 1 (one) year after the end of the respective initiative.

– Requests for budgets
Whenever you ask us for a budget for any of our services, we will need to process your personal identification data. This processing in pre-contractual steps or in the execution of a contract.

Your data will be kept until 1 (one) year after the end of the contract or, if no contract has been concluded, until 6 (six) months after the beginning of the contracting process.

– Transaction management
If you ask us to indicate your tax identification number in your purchases, for the purpose of issuing invoices for the acquisition of goods and services, we will need to record it and subsequently transmit it to the Tax Authority, this treatment being based on the fulfilment of a legal obligation.

Your data will be kept, by legal imposition, for a period of 10 (ten) years.

– After-sales service
In order to allow you access to repair services for products purchased in our shops, or to proceed with their repair or replacement, we will ask you for your personal identification data to verify the product, its ownership and to inform you as soon as your item is available for collection, or to deliver it to your home, if you so wish. This treatment is based on pre-contractual procedures or the execution of a contract.

Your data will be kept until 1 (one) year after the end of the contract or, if no contract has been concluded, until 6 (six) months after the beginning of the contracting process.

– Exchanges | Returns
In order to exchange items and in the case of returns, we will ask you for your personal identification and bank details.

This processing is based on pre-contractual diligence or the execution of a contract, the terms of which are governed by the Terms and Conditions.

Your data will be kept until 1 (one) year after the end of the contract or, failing that, until 6 (six) months after the beginning of the contracting process, without conclusion.

– Home deliveries
We process your identification data so that we can deliver your purchases to your home. This treatment in pre-contractual diligences or execution of the contract.

Your data will be kept until 1 (one) year after the end of the contract or, failing this, until 6 (six) months after the beginning of the contracting process, without conclusion.

– Customer care (Service Management and Customer Support)
In order to provide you with the best possible assistance and support, before, during and after the sale of our products and services, we require that you provide us with your personal identification data. This enables us to identify you, analyse your request and respond to you in a timely manner. This processing is based on pre-contractual procedures or contractual execution.

Your data will be kept until 1 (one) year after the end of the contract or, if the contract has not been concluded, until 6 (six) months after the beginning of the contracting process, without conclusion.

– Suggestions and complaints
You may, at any time, make suggestions or complaints regarding our services, indicating your personal identification data.

Additionally, and in compliance with the Decree-Law no. 156/2005, of 15 September, we provide you with the Complaints Book in physical format in our shops and in digital format on the website. This processing is based on the legitimate interest of the company in duly following up your requests and in compliance with legal obligations.

Your data will be kept, by legal requirement, for a period of 3 (three) years.

– Call recording (evidence of commercial transactions and other communications relating to the contractual relationship, and for monitoring the quality of care)
When you contact the customer support team, it may be necessary to record the call as part of the contractual relationship, to monitor the quality of the service provided or to comply with legal obligations. This processing is based on your consent.

Your data will be kept up to 24 (twenty-four) months, 30 (thirty) days or for 3 (three) years after the recording of the calls, depending on whether the recording is made within the scope of the contractual relationship, for monitoring the quality of the service provided or to comply with a legal obligation, respectively.

If the lawful ground for processing your personal data is consent or legitimate interest, you may respectively withdraw consent or object to the processing at any time, without any consequence for you, but without this compromising the lawfulness of the processing carried out in the meantime. If you withdraw consent or expressly object, we will immediately cease your personal data processing for the purpose in question, unless there is a need to process such data in order to comply with legal and/or contractual obligations.

We only keep your personal data for the period strictly necessary to fulfil the purposes identified above, within the legal limits. Upon expiry of the defined retention period, we undertake to delete, destroy or anonymise your personal data. With the exception of data that we are required by law to store for a longer, legally stipulated period, we will generally delete your personal data once your questions and requests have been answered and properly resolved, the services you requested from us have been rendered, or the warranty periods for the items you purchase or repair have expired.

If you have any questions or require additional information regarding the retention periods of your personal data, you may contact us at the following email address: contact@andrezandrez.com.

What personal data will be processed?

In the context of the purposes stated, we process only the data strictly necessary for the pursuit of these purposes, namely:
– Personal identification data (e.g. full name, email, telephone, address, date of birth, gender, signature, tax identification number, image and/or voice),
– Payment and transaction data (e.g. name of credit card holder, card number, validity and security code)
– Contract data (e.g. loyalty cards, purchase details and guarantee(s) of the item(s)),
– Traffic data and resulting call recording.

With whom may we share your personal data?

In certain cases, we may disclose your personal data, to the extent strictly necessary, to entities providing services to us (“Subcontractors”) for the purposes set out above (e.g. in connection with home deliveries, repairs of items, support services and marketing actions), pursuant to contracts entered into with them.

Your data may also be shared with partner organisations under joint liability agreements concluded with them.

Your personal data may be transmitted for internal administrative purposes where there is a legitimate interest in intra-group data sharing.

Where your personal data must be shared with service providers located outside the European Union, we ensure that your personal data will benefit from a high level of protection under applicable legislation on personal data by promoting the transfer under an adequacy decision of the European Commission or under the standard data protection clauses (or similar) approved by the European Commission.

Your data may also be communicated to authorities or third parties when the transmission is made in order to comply with a legal and/or contractual obligation, a resolution of the CNPD or other relevant supervisory authority, or a court order.

We do not share, under any circumstances, your personal data with other companies or brands for other commercial purposes.

What are your rights and how can you exercise them?

Under the terms of the applicable law, and as the holder of personal data, you may at any time request the right to access, rectification, erasure of your personal data, limitation of processing, portability, objection and not to be subject to automated decisions.

Where you have given consent to certain processing of your personal data, you may withdraw it at any time.

To exercise any of these rights, you must do so by request to the following email: contact@andrezandrez.com.

You may also contact our Data Protection Officer on all matters relating to the processing of your data and the exercise of your rights under applicable law and, in particular, under this Privacy Policy, at the following email address: contact@andrezandrez.com.

Without prejudice to any other administrative or judicial resource, you may also file a complaint with the National Commission for Data Protection (“CNPD”), if you believe that the processing of your personal data, by us, violates the legal regime in force.

How we protect your personal data

We have a variety of information security measures in place, in line with national and international best practice, to protect your personal data, including technological controls, administrative, technical, physical and procedural measures that ensure the protection of your personal data, preventing misuse, unauthorised access to data, disclosure, loss, improper or inadvertent alteration or destruction.

In matters of information security, we assume the same commitment to continuous improvement by which we are guided in our daily activity.

Among others, we highlight the following measures:

i. Restricted access to your personal data;
ii.Secure storage and transmission of your personal data;
iii. Protection of information systems through devices that prevent unauthorised access to your personal data;
iv. Implementation of mechanisms that guarantee the safeguarding of the integrity and quality of your personal data;
v. Permanent monitoring of the information systems, with the objective of preventing, detecting and preventing the improper use of their personal data;
vi. Redundancy of personal data storage, processing and communication equipment, to avoid loss of availability.

It is, however, the Users’ responsibility to guarantee and ensure that the devices and equipment used to access this site are adequately protected against harmful software, computer viruses and worms.

Links to other websites and social networks

We may make available hyperlinks to other websites of interest or partners, but we are not responsible for the privacy policy, cookies policy or conditions of use of those sites.

When accessing other websites, through the hyperlinks provided, the entities managing those websites may collect information about you, which will be used by them. We recommend that when accessing other websites, you consult all the information and conditions mentioned above.

When you choose to follow us on social networks, when you interact with us on these, or when you access the site through these, your personal data may be processed by the management entities of the social networks or functionalities made available, in accordance with the respective privacy policies, which we recommend that you read.

Updates to this Privacy Policy

This Privacy Policy may, at any time, be revised and updated, and these changes will be duly published on the site, at www.andrezandrez.com.