Privacy Policy
1.1. This Privacy Policy explains how we collect and process personal data that is necessary to provide services that are available through the website, describing the practices adopted for this purpose.
2.1. Personal data is all information relating to a person and that identifies that person, or makes that person identifiable, regardless of the nature and support of the information, including the sound and image of the person.
2.2. Identifiable means a person who can be identified, directly or indirectly, in particular by reference to an identification number or other specific elements of their physical, physiological, mental, economic, cultural or social identity.
3.1. The personal data processing operations we carry out are an essential tool for your satisfaction and for ALFASTANDARD's activity and are carried out in accordance with applicable legislation and best practices.
3.2. Your personal data will not be reused for other purposes that are not previously identified or that have no relationship with those purposes for which they were initially collected.
4.1. The personal data we process has specific grounds, depending on the purposes for which it is intended, and will be kept for as long as necessary for the respective purposes, as listed in this Privacy Policy
4.2. The personal data collected is only that necessary and appropriate for the purposes indicated.
4.3. In the following table you can see the processing purposes and data collected for them, the respective grounds and the data retention periods or criteria:
|
GOAL |
BASIS |
DATA COLLECTED |
STORAGE LIFE |
|
To continue your customer registration on the website and allow you to enjoy the features of the customer area. |
Consent for this specific purpose |
Name and email |
For the period in which you are registered as a customer and wish to use the respective website services and up to 2 years after the last access. |
|
To keep your account data in the reserved area. |
Consent for this specific purpose. Regarding the order history in the reserved area, they are presented to you based on the legitimate interest in providing you with a history of your purchases |
Name, email, full address, telephone |
For the period in which you are registered as a customer and wish to use the respective website services and up to 2 years after the last access. |
|
To analyze and respond to your messages, customer support and information requests. |
Consent for this specific purpose |
Name, email, telephone number |
1 year |
|
To track your online purchase, process the order, ship the order and for billing purposes. |
Contract execution |
NIF, Email or mobile phone number, country, name, company, full address, data relating to the payment method (example: credit card details), billing address |
For the period necessary for the execution of the contract |
|
So we can send you newsletters so you can receive special offers and the latest information. |
Consent for this specific purpose |
Name, Email |
2 years |
|
For website management operations. |
Consent for this specific purpose (cookies); Legitimate interests pursued by ALFASTANDARD |
NIF, Email or mobile phone number, country, name, company, full address, data relating to the payment method (example: credit card details), billing address |
2 years |
|
For commercial purposes such as data analysis, audits. |
Consent for this specific purpose (cookies); |
Name, email, telephone number |
2 years |
|
For fraud prevention and information systems security. |
Legitimate interests pursued by ALFASTANDARD |
NIF, Email or mobile phone number, country, name, company, full address, data relating to the payment method (example: credit card details), billing address |
2 years |
|
For the adaptation, improvement and modification of services, in particular, by identifying usage trends, or, to determine the effectiveness of promotional campaigns. |
Consent for this specific purpose (cookies); |
Name, email, telephone number |
2 years |
4.4. If the law provides for a specific or mandatory period, the data retention period will be that. In all other cases, personal data will be kept for a maximum of the times indicated above, periods that ALFASTANDARD understands as sufficient to fulfill the purposes.
4.5. After the retention period ends, all personal data collected will be deleted.
5. HOW DO WE COLLECT YOUR PERSONAL DATA?
5.1. We will collect your personal data through the forms on the website, but also through the website and the communication it makes with your equipment and email messages you send to us.
5.2. Your personal data is collected through your equipment as follows:
(a) Through your browser;
(b) Through cookies;
(c) Through pixel tags and other similar technologies;
(d) IP address;
(e) Through your User data.
5.3. ALFASTANDARD is committed to processing your data in accordance with the law and in a legitimate manner.
5.4. ALFASTANDARD will not sell, rent or share your personal data with third parties, except in cases clearly identified in this Privacy Policy (see Point 9 to understand how).
5.5. ALFASTANDARD services are not aimed at minors, and personal data of minors is not intentionally processed.
6. WHAT ARE COOKIES?
6.1. Cookies are small information files that help identify your browser and that can store information, for example, User settings and preferences.
6.2. ALFASTANDARD will store cookies on your device to personalize and make browsing as easy as possible, but also for troubleshooting, statistics, quality assurance, and to monitor system security.
6.3. With the exception of cookies specifically necessary for the performance of the website, the storage of other cookies will always depend on the User's acceptance and consent, and this consent can be withdrawn at any time through specific browser tools.
6.4. To find out more about the cookies we use, you should consult our Cookies Policy .
7. HOW DO WE PROTECT YOUR PERSONAL DATA?
7.1. Your personal data is kept secure through the adoption of various security measures, of a technical and organizational nature, which ensure that only those Employees who must have access to them have access to personal data, in accordance with the need for access and rules created for the effect.
7.2. To protect your personal data, we only use data center providers that offer us adequate and documented security measures, namely, guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access.
7.3. Personal data is kept on secure servers with Shopify, which offers us adequate security guarantees to protect personal data against dissemination, loss, misuse, alteration, unauthorized treatment or access, as well as against any other means of illicit treatment. Likewise, when you browse the website, we protect your data with encryption, such as Transport Layer Security (TLS, is a security protocol that protects telecommunications via the internet) and your password is stored using a one-way hash , that is, it cannot be recovered (or disclosed) by anyone, including ALFASTANDARD, and can only be reset.
7.4. Although we take the care and precautions we deem appropriate to protect the personal data you provide and collect, you must be aware that no security system is impenetrable.
7.5. Therefore, you must take certain precautions, for example, you must keep your password secret and not disclose it to anyone else; If you believe that your password has been used inappropriately, you must notify us immediately; You should also be careful to log in and out every time you close your browser.
8. HOW YOU CAN EXERCISE YOUR RIGHTS:
8.1. Before we explain how you can exercise your rights, it is important to know what they are. Therefore, the legislation gives you the right to ask us to exercise the following rights:
(a) Access: right to obtain confirmation as to whether or not personal data concerning you are being processed and, if this is the case, the right to access your personal data;
(b) Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have your incomplete personal data completed;
(c) Erasure: the right to obtain the erasure of your personal data when one of the reasons listed in the legislation applies;
(d) Limitation of processing: the right to obtain limitation of processing if one of the situations listed in the legislation applies;
(e) Opposition: the right to object at any time to the processing of personal data concerning you;
(f) Portability: the right to receive personal data concerning you in a structured, commonly used and machine-readable format.
8.2. You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission at www.cnpd.pt)
8.3. For the purpose of exercising the rights indicated above, you must contact ALFASTANDARD via the following email support@athomelabtesting.pt or alternatively, access www.athomelabtesting.pt. 8.4. If you ask us to delete some or all of your personal data, some of the services requested may not be provided to you and ALFASTANDARD will only retain the personal data necessary to comply with the legal obligations to which it is bound.
8.5. For marketing communications that you have consented to receive, you may, at any time, opt out of receiving such communications by clicking the "unsubscribe" link at the bottom of any marketing email or by updating your Messaging Preferences at Log in to your account. It may take up to 7 days for the change to take effect. From then on, you will only receive promotional emails again if you change your Messaging Preferences again.
9. AUTOMATED DECISIONS AND PROFILE DEFINITION.
9.1. ALFASTANDARD does not participate in fully automated decision-making that has a legal or significant effect using customer data. Our subcontractor Shopify uses limited automated decision-making to prevent fraud, which does not have a legal or significant effect on the consumer.
9.2. Services that include automated decision-making elements include:
a) Temporary deny list of IP addresses associated with failed repeated transactions. This deny list persists for a small number of hours.
b) Credit card temporary deny list associated with listed deny IP addresses. This deny list persists for a small number of days.
9.3. ALFASTANDARD will not create profiles based on your purchase history. Likewise, ALFASTANDARD will not create profiles by associating purchase history with any results of laboratory analyzes carried out as part of the purchase of test kits.
10. WHEN DO WE COMMUNICATE DATA TO THIRD PARTIES?
10.1. ALFASTANDARD may use third parties to provide certain services, in terms of maintenance, technical support, marketing, invoicing or payment management, and they may have access to some of the personal data, namely the data necessary for the contractual purposes.
10.2. An example of these third parties is Shopify, which provides services associated with the provision and hosting of the online store.
10.3. ALFASTANDARD ensures that the entities that have access to the data are credible and offer high guarantees of protection, with no data being transmitted to them beyond what is necessary to provide the contracted service, however, ALFASTANDARD remains responsible for the personal data made available.
10.4. ALFASTANDARD may also transmit data to third parties within the scope of investigations, inquiries and judicial and/or administrative proceedings or of a similar nature, provided that it is duly ordered by a court order to that effect.
11. THIRD PARTY WEBSITES.
11.1. The website may contain links to other websites which may collect and process your personal data, and this processing is the sole responsibility of the owners of these websites, with ALFASTANDARD having no responsibility for their policies and/or practices.
11.2. Examples of these third parties are Facebook or Instagram, through the buttons that are present on the WEBSITE.
12. DATA TRANSFERS OUTSIDE THE EUROPEAN UNION.
12.1. If data transfers to third countries that do not belong to the European Union may occur, IVITY will make every effort to act in accordance with legal rules, particularly with regard to the suitability of the destination country with regard to the protection of personal data and the requirements, which are applicable to these transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of security and protection.
13. THE MINORS.
13.1. The website is not aimed at minors under the age of 18, so we ask that minors do not provide us with personal data through the website, application, social networks and social media or emails.
14. SENSITIVE PERSONAL DATA.
14.1. ALFASTANDARD would like to thank you if you do not send us or make us aware of any sensitive personal data, that is, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data or data relating to a natural person's sex life or sexual orientation.
14.2. If you still send or disclose these categories of personal data to us, they will be immediately deleted.
15. CHANGES TO PRIVACY POLICY.
15.1. ALFASTANDARD reserves the right to readjust or change this Privacy Policy at any time, with these changes being publicized.
16. OUR CONTACT DETAILS.
16.1. If you have any questions or concerns regarding this Privacy Policy, please contact us in writing via email support@athomelabtesting.pt.
17. LATEST VERSION.
17.1. March 8, 2023 Azambuja (Portugal).