Privacy and Cookies Policy

Under the GDPR, and subject to the limitations and conditions applicable to each specific case, you may request:

• Access to the personal data we hold about you, including the right to access the following information:

(i) the purposes of data processing;

(ii) the category of personal data processed;

(iii) the recipients or categories of recipients to whom the data have been disclosed;

(iv) the intended retention period;

(v) whether or not the data subject has the right to request from the data controller the rectification, erasure or restriction of the processing of personal data concerning the data subject, or the right to object to such processing;

(vi) the right to lodge a complaint with a supervisory authority;

(vii) information on the source of the personal data being processed, where such data has not been collected directly from you;

(viii) whether or not automated decisions are made, including profiling;

(ix) appropriate safeguards in relation to the transfer of data to third countries outside the EU or to international organisations.

Upon request, Correia Rosa Lda. will provide you, free of charge, with a copy of your data currently being processed. The provision of any further copies requested by the data subject may be subject to a fee.

• The right to have your personal data rectified if it is incorrect; you may request that it be corrected or completed, as applicable.

The erasure of your personal data, where:

1. they are no longer necessary for the purposes for which they were processed;

2. consent is withdrawn where it is the sole legal basis for processing;

3. object to processing where it is carried out for the purposes of direct marketing, or

4. your data has been processed unlawfully.

Please be advised that Correia Rosa Lda. is under no obligation to erase the data subject’s data where the processing of their personal data is necessary for compliance with a legal obligation to which Correia Rosa Lda. is subject, or for the purposes of establishing, exercising or defending a legal claim by Correia Rosa Lda. in legal proceedings.

Should you request the erasure of your data, Correia Rosa Lda. will notify each recipient or organisation to whom the data has been disclosed of the erasure, unless such notification proves impossible or would involve a disproportionate effort on the part of Correia Rosa Lda.

The right to restrict the processing of your personal data, where:

1. challenge the accuracy of your personal data and for the period during which we verify the accuracy of that data;

2. where the processing is unlawful and the data subject has objected to the erasure of the data, wishing only to restrict its use;

3. your personal data is no longer necessary for the purposes for which it was processed, but you still require it for the purposes of establishing, exercising or defending a right in legal proceedings.

Where you request the restriction of the processing of your personal data, such data may only, apart from storage, be processed with your consent or for the purposes of establishing, exercising or defending a legal claim in legal proceedings, defending the rights of another natural or legal person, or for reasons of public interest provided for by law.

Correia Rosa Lda. will also inform each recipient to whom the data has been disclosed of the relevant restriction, unless such notification proves impossible or would involve a disproportionate effort on the part of Correia Rosa Lda.

The portability of your personal data, where the processing is carried out (i) by automated means and (ii) on the basis of consent or a contract to which you are a party, means that you have the right to receive the personal data concerning you that you have provided to us in a structured, commonly used and machine-readable format, as well as the right to transmit that data to another data controller.

• The right to object to the processing of your personal data, where: (i) the legal basis for the processing of your personal data is the pursuit of legitimate interests by Correia Rosa Lda.; (ii) the processing is carried out for purposes other than those for which the personal data were collected, including profiling; (iii) the personal data is processed for statistical purposes; (iv) the personal data is processed for the purpose of sending newsletters or other promotional information.

You are also informed that you have the right not to be subject to any decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you, unless the decision: (i) is necessary for the conclusion or performance of a contract between you and Correia Rosa Lda.; (ii) is authorised by legislation to which Correia Rosa Lda. is subject; or (iii) is based on the data subject’s explicit consent.

• You may withdraw your consent at any time; it should be noted, however, that the withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent previously given.

To exercise the rights above, please contact Correia Rosa Lda. at geral@farmaciascorreiarosa.pt

Your requests will be handled with particular care so that we can ensure your rights are upheld. You may be asked to provide proof of your identity to ensure that we only share your personal data with you. We will respond to your requests without undue delay and within a maximum of one (1) month from the date of receipt of the request. This period may be extended to two (2) months where necessary, taking into account the complexity of the requests or the number of requests.

In certain cases (for example, due to legal requirements), your request may not be dealt with immediately. In any event, you will be informed without delay, and in any case within a maximum of one (1) month from the date of receipt of your request, of the reasons why your request has not been granted.

You also have the right to lodge a complaint with the National Data Protection Commission, using the forms available  https://www.cnpd.pt/.