GDPR

Data Protection Registration and Statement

This is the data protection registration and statement of Saunamo LDA in accordance with the Personal Data Protection Act (sections 10 and 24) and the EU General Data Protection Regulation (GDPR). Drafted on 25.08.2022

1. Registration Controller

Saunamo LDA, R. dos Bombeiros Voluntários de Ourém, 57, Vilar dos Prazeres, 2490-755 Ourém, Portugal
info@saunamo.us

2. Name of the Register

Saunamo LDA Customer Register, Online Services User Register and Marketing Register.

3. Legal Basis and Purpose of Processing Personal Data

The legal basis for processing personal data under the EU General Data Protection Regulation is — the person's consent (documented, voluntary, specific, informed and unambiguous), or — a contract to which the person is a party, or — the legitimate interest of the registration controller (for example customer relationship, employment relationship, membership). The purpose of processing personal data is communication with customers, maintaining the customer relationship, and targeting advertising and marketing. The data is not used for automated decision-making or profiling.

4. Data Content of the Register

The data recorded includes: the person's name, contact details (telephone number, email address, postal address), IP address of the internet connection, information about the services ordered and any changes to them, billing information and other information related to the customer relationship and the services ordered.

5. Regular Sources of Data

The data recorded is obtained from the customer through messages sent via forms on the saunamo.us website, by email, telephone, social media services, contracts, customer meetings and other situations in which the customer provides their information.

6. Regular Disclosures of Data and Transfer of Data Outside the EU or EEA

Data is not regularly disclosed to third parties. Mobile phone numbers, SMS opt-in data and consent records are not shared with third parties or affiliates for marketing or promotional purposes. Data may be published to the extent agreed with the customer. Data may be transferred by Saunamo LDA outside the EU or EEA.

7. Principles of Register Protection

The register is processed with care and data processed through information systems is protected appropriately. When register data is stored on internet servers, the physical and digital security of the equipment is ensured. Saunamo LDA ensures that stored data, server access rights and other information critically important to the security of personal data are handled confidentially and only by employees authorised to do so within their roles.

8. Right of Access and Right to Correct Data

Every registered person has the right to check their data recorded in the register and request the correction of any inaccurate information or the addition of missing information. If a person wishes to check the data recorded about them or request its correction, the request must be sent in writing to the registration controller. Saunamo LDA may ask the person to provide proof of identity if necessary. Saunamo LDA will respond to the customer within the period set by the EU General Data Protection Regulation (usually within one month).

9. Other Rights Related to the Processing of Personal Data

Every registered person has the right to request the deletion of their personal data from the register ("right to be forgotten"). In addition, registered persons have other rights under the EU General Data Protection Regulation, such as the restriction of processing of personal data in certain situations. Requests must be sent in writing to the registration controller. Saunamo LDA may ask the person to provide proof of identity if necessary. Saunamo LDA will respond to the customer within the period set by the EU General Data Protection Regulation (usually within one month).