I — Information and consent

The Personal Data Protection Law (hereinafter "LPDP") and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, hereinafter "GDPR") ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.

Under the law, "personal data" means any information of any nature, regardless of its medium, including sound and image, relating to an identified or identifiable natural person; therefore, this protection does not cover the data of legal entities.

By accepting this Privacy Policy, the user gives their informed, express, free and unequivocal consent for the personal data provided through the site pcbyte.pt to be included in a file held by PCByte, the processing of which, in accordance with the LPDP and the GDPR, complies with appropriate technical and organisational security measures.

PCByte maintains a database with the records of its customers. The data in this database are solely those provided by the customers themselves at the time of registration, collected and processed automatically, under the terms approved by the National Data Protection Commission and by the entity responsible for the corresponding file.

Information about philosophical or political beliefs, party or trade-union membership, religious faith, private life and racial or ethnic origin, as well as data relating to health and sexual life, including genetic data, will under no circumstances be requested.

We will under no circumstances carry out any of the following activities with the personal data provided to us through this site:

• Transfer them to other persons or entities without the prior consent of the data subject;
• Transfer them outside the European Economic Area (EEA) without the prior consent of the data subject.

II — Purposes of personal data processing

Your personal data is collected and processed by PCByte only for purposes strictly related to the use of this site, its services and the purchase of products.

However, your personal data may also be used for other processing operations that fall within the limits of these uses:

• Whenever you carry out a purchase of products sold on this site, we collect your personal data (for example, password, size, email address, delivery address, credit card number and phone number) in the purchase form, solely for the purpose of selling, picking and shipping the products ordered.
• Whenever you submit a contact request, we collect your personal data (name, email address, phone contact) in order to provide you with the online shop’s Customer Service that is relevant to this site and assistance.
• Whenever you save a delivery address, we collect your personal data in order to simplify the placement of your future orders.

III — Disclosure of personal data

Your personal data will only be communicated to third parties that provide specific services, such as external entities engaged by PCByte.

Your personal data will be disclosed in the following cases:

• Payment service providers: Stripe (for credit/debit card payments and digital wallets such as Apple Pay and Google Pay) and PayPal (for payments via PayPal account). We transmit to these providers only the data strictly necessary to authorise the transaction. The providers’ privacy policies are available at stripe.com/privacy and paypal.com/uk/legalhub/privacy-full.
• Processing of purchased products and orders;
• Selecting, packing and dispatching items;
• Resolving questions or queries related to the sale of products;
• Processing payments for the purchase of items;
• Processing returns of items.

They may also be disclosed to third parties in order to:

• Comply with applicable laws;
• Respond to judicial and governmental enquiries;
• Comply with valid legal proceedings;
• Protect the rights or property of PCByte.

Any disclosure will be carried out without going beyond the purpose for which your personal data was collected and subsequently processed. Above all, your personal data will not be disclosed to third parties without your being informed or without your consent where this is required by law, except in the cases set out in this document.

IV — Personal data collected

Your personal data is requested in forms when:

• Registration form: creation of an account on the PCByte e-commerce website and to proceed with sales. Data requested: company name, VAT number, address, postal code, city, phone number, business area, contact name, position, email, mobile.
• Contact request form: to resolve problems with website access, questions about products and orders. Data requested: name, email, phone number.
• Job application form: to contact the user about a job opening listed on the PCByte website. Data requested: name, email, CV.

We retain your personal data for the period necessary to fulfil the purpose for which it was collected.

V — Security measures

The IP address is automatically collected by the pcbyte.pt website for security and to optimise the website experience.

VI — Commercial and promotional communications

One of the purposes for which we may collect and process personal data provided by users is to send electronic communications with information regarding commercial and promotional communications.

Such communications will always be directed exclusively to users who have previously authorised them with information relating to commercial and promotional communication.

VII — Cookies

PCByte uses cookies on its website to improve the performance and browsing experience of our users and customers. You can consult our Cookie Policy to better understand the purposes for which we use cookies on the PCByte website.

VIII — Contacts

To exercise the rights of personal-data subjects referred to on this page, or for any matter related to the protection of your personal data, privacy or information security, the user may contact us by any of the following means:

• Email: info@pcbyte.pt
• Phone: 965 650 262

IX — Data subject rights and account deletion

Under the GDPR and applicable Portuguese law, the user, as data subject, may at any time exercise the following rights over their personal data:

• Right of access: to obtain confirmation that your data is being processed and to access it.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): to request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
• Right to restriction of processing: to request temporary suspension of the processing of your data.
• Right to data portability: to receive your data in a structured, commonly used and machine-readable format.
• Right to object: to object to the processing of your personal data for direct marketing or other legitimate purposes.
• Right to withdraw consent: at any time, without affecting the lawfulness of processing based on prior consent.

How to request deletion of your account:

To delete your PCByte account and the associated personal data, send an email to info@pcbyte.pt with the subject "Account deletion request", indicating the email address registered on the account. We will respond to your request within a maximum of 30 days.

Please note that we may retain some data for the period legally required (for example, billing data for 10 years under the Portuguese VAT Code), even after the account deletion request.

If you believe that the processing of your personal data infringes applicable law, you have the right to lodge a complaint with the National Data Protection Commission (CNPD) at cnpd.pt.

X — Notices, modifications and cancellation of services

PCByte may change or update all or part of this Privacy Policy at any time, even where not required by applicable laws and regulations.

All changes and updates will take effect once published in this section of the site. You should therefore access this section of the site regularly in order to view the up-to-date version of our Privacy Policy.

XI — Intellectual property rights

All content on this site is the exclusive property of PCByte: texts, images or any other type of information that does not come from third parties. They are therefore protected by the Code of Copyright. PCByte reserves the right, at any time, to make changes to this content, without any obligation to give prior notice to users.

XII — Legislation

The processing of personal data by PCByte will be carried out in accordance with the Portuguese law in force. The contracts for the purchase and sale of products through this site are governed by Portuguese law.