1 - WHAT IS PERSONAL DATA AND WHAT CATEGORY OF DATA DO WE PROCESS?
What is personal data?
Personal data is any information, of any nature and on any medium (e.g. sound or image), relating to an identified or identifiable natural person. An identifiable person is one who can be identified directly or indirectly, e.g. by name, identification number, location data, electronic identifier or other elements that make it possible to identify that natural person.
Who are the personal data subjects?
The Client or User, the natural person to whom the data relates and who has used the services or products of the *Michele Encke Group, hereinafter referred to as "Michele Encke". The Client is the person who enters into the contract with Michele Encke and the User is the person who uses Michele Encke's services or products, but who may not correspond to the Client. For example:
- In the business segment, the contract with Michele Encke is in the name of the company but the Users are the customers or employees of that company;
- In the private segment, a customer can purchase various products and services.
In this regard, Michele Encke informs us that it also protects personal data and respects the rights of customers and users.
What categories of personal data do we process?
The categories of data we process are as follows:
- Basic data: Examples
- Identification and contact details and other identification data: Civil or tax identification numbers, payment details, billing address, telephone contact and e-mail address; date of birth, gender, your professional activity and IP address (if you have registered on the Internet).
- Service: Products and services purchased or subscribed to
2 -WHO IS RESPONSIBLE FOR PROCESSING YOUR PERSONAL DATA?
The person responsible for collecting and processing your personal data will be Michele Encke, who provides the service or product and who decides what data is collected, how it is processed and for what purposes it is used.
3 - ON WHAT GROUNDS CAN WE PROCESS YOUR PERSONAL DATA?
These are the circumstances in which we process your personal data:
Consent
When you have given your express consent - in writing, orally or by validating an option - and in advance, and if that consent is free, informed, specific and unambiguous. Examples include your consent for Michele Encke to analyse the use of services and products and make recommendations or send marketing messages, to use your identification data or service usage data to send Michele Encke marketing messages, your consent for us to use customer service information to improve our quality of service;
or
Contract execution and pre-contractual steps
When the processing of personal data is necessary for the conclusion, execution and management of the contract entered into with Michele Encke, such as for the preparation of a proposal for products and/or services, for the management of contacts, information and requests, for the management of invoicing, collection and payments;
or
Fulfilling a legal obligation
When the processing of personal data is necessary to fulfil a legal obligation to which Michele Encke is subject, such as the communication of identification data to police, judicial, tax or regulatory bodies;
or
Legitimate interest
When the processing of personal data corresponds to a legitimate interest of Michele Encke or a third party, such as the processing of data for the purpose of improving the quality of service, fraud detection and revenue protection, and when our reasons for using it must prevail over your data protection rights;
4 - FOR WHAT PURPOSES AND FOR HOW LONG DO WE PROCESS YOUR PERSONAL DATA?
How long do we process your Personal Data?
Your personal data will only be processed by Michele Encke for the period of time necessary to fulfil the defined purpose or, depending on what is applicable, until you exercise your right to object, right to be forgotten or withdraw consent. After the respective retention period has elapsed, Michele Encke will delete or anonymise the data whenever it should no longer be kept for a different purpose.
For what purposes do we process your Personal Data?
Marketing and Sales:
- Marketing or selling new products or services
- Analysing consumer profiles
- Adaptation and development of new products or services
Customer Management and Service Delivery
- Booking management
- Managing contacts, information or requests
- Complaints management;
- Billing, collection and payment management
Accounting, Tax and Administrative Management
- Accounting, invoicing
- Tax information, including sending information to the tax authority
Litigation Management
- Judicial and extrajudicial collection
- Managing other conflicts
Fraud detection, revenue protection and auditing
- Detection of fraud and illicit practices
- Revenue protection and control
- Credit risk management
- Internal audit and investigation
Network and systems management
- Support and improvement of the networks and applications that support the service Monitoring, improvement and support of the service
Compliance with legal obligations
- Call tracing for emergency services
- Legal requests
- Investigation, detection and prosecution of serious crime
- Response to judicial, regulatory and supervisory bodies
Information security control
- Access management, logs
- Backup management
- Security incident management
Michele Encke processes and stores your personal data in accordance with the purposes for which it is processed.
There are cases where the law requires data to be processed and kept for a minimum period of time, for example, 10 years for data needed to inform the Tax Authority for accounting or tax purposes.
However, whenever there is no specific legal obligation, the data will only be processed for the period necessary to fulfil the purposes for which it was collected and preserved, and always in accordance with the law and the guidelines and decisions of the CNPD.
Michele Encke will therefore process and keep your personal data for as long as it maintains a contractual relationship with you.
Michele Encke may keep other personal data for periods longer than the duration of the contractual relationship, either on the basis of your consent, or to ensure rights or duties related to the contract, or because it has legitimate interests that justify it, but always for the period strictly necessary for the fulfilment of the respective purposes and in accordance with the guidelines and decisions of the CNPD.
Examples include contact for marketing and sales purposes, the preservation of data in the context of invoice claim procedures, the exercise of guarantee rights or offers that are in the interest of the customer or prospect.
5 - HOW DO WE COLLECT YOUR PERSONAL DATA?
How do we collect your personal data?
We collect personal data with your consent when you purchase products or services from Michele Encke, when you make an appointment using the "Fresha" software, when you download or use e-books, quizzes, session offers, products, services and applications from Michele Encke or when you participate in market research. It may be collected orally, in writing or via the Michele Encke website. But your personal information may also be collected from publicly accessible or other sources.
How is your personal data collected indirectly?
So that you can better understand this indirect collection, we'll show you the following cases:
Other relevant information on credit risk or on identification and contact details, for collection management, fraud detection and revenue protection. Michele Encke may collect personal data from private entities that maintain relevant information on the credit of the holders of the personal data, provided that these bases respect the applicable data protection rules. Michele Encke may also access, collect or confirm personal data on public administration and private entity websites, namely to confirm the accuracy of your identification and contact details.
6 - ANALYSING DATA
Cookie Policy
Information on our use of cookies.
Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our site and also allows us to improve our site.
A cookie is a small file of letters and numbers that we store in your browser or on your computer's hard drive if you agree. Cookies contain information that is transferred to your computer's hard drive.
The cookies we use are "analytical" cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our site when they use it. This helps us to improve the way our site works, for example by ensuring that users find what they are looking for easily. You can find more information about the individual cookies we use and the purposes for which we use them below:
Analytical
The services contained in this section allow the owner to monitor and analyse web traffic and can be used to track user behaviour.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. Google uses the data collected to track and analyse the use of this website, prepare reports on its activities and share them with other Google services.
- Google can use the data collected to contextualise and personalise the ads on its own advertising network.
- Personal Data collected: Cookies and Usage Data
- Processing location: United States - Privacy Policy - Refuse.
Facebook Ads conversion tracking (Facebook, Inc.)
Facebook Ads conversion tracking is an analysis service provided by Facebook, Inc. that connects data from the Facebook advertising network with actions taken on this website.
- Personal Data collected: Cookies and Usage Data
- - Processing location: United States - Privacy Policy.
Commented Content
Content comment services allow users to make and publish their comments on the content of this site.
Depending on the settings chosen by the owner, users can also leave anonymous comments. If there is an e-mail address among the Personal Data provided by the user, it can be used to send notifications of comments on the same content. Users are responsible for the content of their own comments.
If a content commenting service provided by a third party is installed, it may still collect web traffic data for the pages on which the commenting service is installed, even when Users do not use the content commenting service.
Facebook comments (Facebook, Inc.)
Facebook Comments is a content commenting service provided by Facebook, Inc., allowing users to leave comments and share them on the Facebook platform.
- Personal Data collected: Cookies and Usage Data.
- Processing location: United States - Privacy Policy.
Email marketing
We collect your name and email address and phone number when you register for a webinar or event, request a free resource, join a waiting list, or make an appointment via Fresha (Privacy Policy).
We use this data to send you emails about useful advice and industry news and to notify you about services and products you may be interested in. You can unsubscribe from our list at any time.
In addition, we collect your surname and postal address when you purchase a product or course, as part of our payment provider's card verification and sales tax collection process.
Remarketing and behavioural targeting
This type of service allows this site and its partners to inform, optimise and serve advertising based on the user's past use of this site.
This activity is carried out by tracking Usage Data and Cookies, information that is transferred to partners who manage the remarketing and behavioural segmentation activity.
In addition to any deactivation offered by any of the services below, the user can deactivate the use of cookies by a third-party service by visiting the deactivation page of the third-party service. Network Advertising Initiative.
Facebook Remarketing (Facebook, Inc.)
Facebook Remarketing is a remarketing and behavioural targeting service provided by Facebook, Inc. that links the activity of this website to the Facebook advertising network.
- Personal Data collected: Cookies and Usage Data.
- - Processing location: United States - Privacy Policy - Refuse.
Facebook personalised audience (Facebook, Inc.)
Facebook Custom Audience is a remarketing and behavioural targeting service provided by Facebook, Inc. that links the activity of this website to the Facebook advertising network.
- Personal data collected: Cookies and e-mail address.
- - Processing location: United States - Privacy Policy - Refuse.
Interaction with external social networks and platforms
This type of service allows interaction with social networks or other external platforms directly on the pages of this website.
The interaction and information obtained through this website is always subject to the user's privacy settings for each social network.
This type of service can still collect traffic data for the pages on which the service is installed, even when Users are not using it.
Twitter Tweet button and social widgets (Twitter, Inc.)
The Twitter Tweet button and social widgets are services that allow interaction with the Twitter social network provided by Twitter, Inc.
- Personal Data collected: Cookies and Usage Data.
- Processing location: United States - Privacy Policy.
Facebook Like button and social widgets (Facebook, Inc.)
The Facebook Like button and social widgets are services that allow interaction with the Facebook social network provided by Facebook, Inc.
- Personal Data collected: Cookies and Usage Data.
- Processing location: United States - Privacy Policy.
LinkedIn button and social widgets (LinkedIn Corporation)
The LinkedIn button and social widgets are services that allow interaction with the LinkedIn social network provided by LinkedIn Corporation.
- Personal Data collected: Cookies and Usage Data.
- Processing location: United States - Privacy Policy.
How to provide or withdraw consent for the installation of cookies
In addition to what is specified in this document, the user can manage cookie preferences directly in their own browser and prevent - for example - third parties from installing cookies.
Through browser preferences, it is also possible to delete cookies installed in the past, including cookies that may have saved the initial consent for the installation of cookies by this website.
Users can, for example, find information on how to manage cookies in the most commonly used browsers at the following addresses: Google Chrome, Mozilla Firefox, Apple Safari and Microsoft Internet Explorer.
With regard to Cookies installed by third parties, Users can manage their preferences and withdraw their consent by clicking on the related deactivation link (if provided), using the means provided in the third party's privacy policy or by contacting the third party.
Notwithstanding the above, the Owner informs that Users may follow the instructions provided in the initiatives subsequently linked by the EDAA (EU)by Network Advertising Initiative (USA) and the Digital Advertising Alliance (USA), DAAC (Canada), DDAI (Japan) or other similar services. These initiatives allow users to select their tracking preferences for most advertising tools.
The Owner therefore recommends that Users make use of these resources in addition to the information provided in this document.
Logs and system maintenance
For operation and maintenance purposes, this website and any third-party services may collect files that record interaction with this website (system logs) using other personal data (such as IP address) for this purpose.
Changes to this privacy policy
The owner reserves the right to make changes to this privacy policy at any time by notifying users on this page and possibly within this site and/or - to the extent technically and legally possible - by sending notice to users via any contact information.
If the changes affect processing activities carried out on the basis of the user's consent, the owner must collect new consent from the user where necessary.
Owner and Data Controller
Michele Emcke - Aesthetics and Hairdressing, Rua João Iteperano Duarte nº 20 B
2790-368 Queijas
Owner's contact e-mail: geral@micheleencke.com
As the installation of third-party cookies and other tracking systems through the services used on this website cannot be technically controlled by the owner, any specific references to cookies and tracking systems installed by third parties should be considered indicative. For complete information, we request that the User consult the privacy policy of the respective third-party services listed in this document.
Given the objective complexity surrounding the identification of technologies based on Cookies, Users are encouraged to contact the Owner if they wish to receive further information on the use of Cookies by this Site.
7 - WHAT ARE YOUR DATA PROTECTION RIGHTS AND HOW CAN YOU EXERCISE THEM?
What are your rights?
See below for your rights and details of what is safeguarded in each one
Right of access
The right to obtain confirmation of what personal data is being processed and information about it, such as the purposes for which it is being processed, storage periods, etc. The right to see or obtain a copy of, for example, invoices, written agreements or support requests you have made.
Right of rectification
The right to request the rectification of inaccurate personal data or the completion of incomplete personal data, such as address, VAT number, email address, telephone contact details, etc.
Right to erasure or "right to be forgotten"
The right to obtain the erasure of your personal data, provided that there are no valid grounds for retaining it, such as when Michele Emcke - Estética e Cabeleireiro has to retain the data in order to fulfil a legal obligation to preserve it for the investigation, detection and prosecution of crimes or because legal proceedings are in progress.
Right to portability
The right to receive the data you have provided in a commonly used, machine-readable digital format or to request the direct transmission of your data to another entity that will become the new controller of your personal data, such as receiving your invoices or transmitting your contact details to the new controller, but in this case only if technically possible.
Right to withdraw consent or right to object
The right to object or withdraw your consent at any time to data processing, for example in the case of data processing for marketing purposes, provided that legitimate interests do not prevail over your interests, rights and freedoms, such as the defence of a right in legal proceedings.
Right of limitation
Right to request the restriction of the processing of your personal data, in the form of:
1. Suspension of treatment
2. limitation of the scope of processing to certain categories of data or processing purposes.
Right to complain
The right to lodge a complaint with the supervisory authority, the CNPD, in addition to the company or the DPO.
How can you exercise your rights?
The exercise of rights is free of charge, except in the case of a manifestly unfounded or excessive request, in which case a reasonable fee may be charged taking into account the costs. Information must be provided in writing but may be provided orally if requested. In this case, Michele Encke must verify your identity by means other than oral. Requests must be answered within a maximum of 30 days, unless the request is particularly complex.
You can exercise your rights at the following addresses:
Michele Emcke - Aesthetics and Hairdressing
Rua João Iteperano Duarte nº 20 B
2790-368 Queijas
Mail: geral@micheleencke.com
Telephone: 910 584 305
8 - TO WHOM DO WE PASS ON YOUR PERSONAL DATA?
Under what circumstances is your personal data communicated to other entities, subcontractors or third parties?
Your data may be passed on to subcontractors to process in the name and on behalf of Michele Encke. In this case, Michele Encke will take the necessary contractual measures to ensure that subcontractors respect and protect the data subject's personal data. The data may also be passed on to third parties - entities other than Michele Encke or the subcontractors - companies that may become part of the Michele Encke Group in the future, companies with which Michele Encke develops partnerships, if the data subject has consented - or entities to which the data must be communicated by law, such as the tax authority.
Under what circumstances does Michele Encke transfer your data to a third country?
Michele Encke may have to transfer your personal data to a third country outside the European Union that is not on the list of countries that the EU has already deemed to have adequate levels of personal data protection. In such cases, Michele Encke will ensure that data transfers are carried out in strict compliance with the applicable legal regulations.
9 - HOW DOES MICHELE ENCKE PROTECT YOUR PERSONAL DATA?
Michele Encke has implemented appropriate, necessary and sufficient logical, physical, organisational and security measures to protect your personal data against accidental or unlawful destruction, loss, alteration, dissemination, access or any other form of processing.
Michele Encke has implemented it:
- Logical security requirements and measures, such as the use of firewalls and intrusion detection systems in its systems, the existence of a strict policy on access to systems and information and the recording of actions carried out by Michele Encke employees on the personal data of clients or users (logging);
- Physical security measures, including strict control of access to Michele Encke's physical premises by employees, partners and visitors, as well as very restricted and permanently monitored access to Michele Encke's essential technological infrastructures;
- Means of protecting data from conception ("privacy by design") using technical means such as masking, encryption, pseudonymisation and anonymisation of personal data, as well as a set of privacy-friendly preventive measures ("privacy by default");
- Scrutiny, auditing and control mechanisms to ensure compliance with security and privacy policies;
- An information and training programme for Michele Encke's employees and partners;
- Access rules for Customers or Users to certain products or services, such as the introduction of a password, in order to reinforce control and security mechanisms.
10 - USEFUL TIPS FOR PROTECTING YOUR DATA
Michele Encke and third-party websites
Regarding the use and processing of personal data on Michele Encke websites, please refer to the rules on the use of cookies on the respective websites. Michele Encke websites, products or applications may contain links to third-party websites, products or services that have no connection with Michele Encke or that are not covered by this Privacy Policy.
The collection or processing of personal data requested by these third parties is their sole responsibility and Michele Encke cannot be held liable under any circumstances for the content, accuracy, veracity or legitimacy of these websites or for the misuse of data collected or processed through them.
We alert Michele Encke's Clients and Users to this fact and to the need, before using the websites, products or applications, to read and accept the rules regarding the processing of personal data defined by these third parties.
Other advice
Michele Encke advises caution when exposing your personal data and circulating this data on the internet, acts which are the sole responsibility of the client, since this data is not fully protected against possible breaches, the adoption of complementary security measures, including keeping equipment (PCs, tablets or mobile phones) and programmes properly updated and configured with firewalls and protection against malicious software (e.g. antivirus), antivirus), not browsing sites of dubious reputation or for which you do not have the proper guarantees of authenticity, physically protecting your equipment and avoiding placing access credentials on publicly accessible computers (e.g. internet cafés, hotels, etc.) and using strong and differentiated passwords for each service or website.
Legal information
This privacy statement has been prepared on the basis of provisions of multiple legislations, including art. 13/14 of Regulation (EU) 2016/679 (General Data Protection Regulation).
This privacy policy refers only to this website, if not stated otherwise in this document.
Information not contained in this policy
Further details on the collection or processing of personal data may be requested from the Owner at any time.
*MICHELE ENCKE GROUP
Michele Emcke - Estética e Cabeleireiro, lda
VAT: PT514275570
Providing hairdressing and beauty services and selling cosmetic products at the following addresses:
- Head office and Queijas shop: Rua João Iteperano Duarte nº 20 B 2790-368 Queijas
- Laranjeiras: Rua Virgílio Correia nº 17 B 1600-203 Lisboa
- Entroncamento: Av. Dr José Eduardo Victor das Neves 35 A Loja D 2330-066 Entroncamento
- Online: shop.micheleencke.com
Espuma de Sabão - Estética e Perfumaria, lda
VAT: PT505529149
Providing hairdressing and beauty services and selling cosmetics and perfumery products at the following address:
- Registered office and shop: Rua Nossa Senhora da Conceição nº 14, 2200-392 Abrantes
Amarelo Abençoado, lda
VAT: PT517452273
Providing hairdressing and beauty services and selling cosmetic products at the following address:
- Head office and shop: Rua da Pecuária nº 32 2820-320 Charneca da Caparica