top of page

Our Privacy Policy

Privacy and the protection of your personal data are very important for Maxigrau which has always processed the collection, use, consulting and treatment of the data in strict compliance with the applicable legislation regarding personal data protection.With the application of EU Regulation 2016/679, also called the General Data Protection Regulation, Maxigrau is committed to providing its customers with detailed information about the use and protection of their personal data, the reasons why it is processed and their rights regarding this processing, in compliance with the provisions in articles 13 and 14 of the GDPR.

Data
Controller.

Maxigrau – Unipessoal, Lda, with head offices at Rua S. Miguel de Roriz, nº 2115B, 4750-652, Roriz, Barcelos is also the owner of MaxiLeaf.

Maxigrau and MaxiLeaf's customers can contact the data controller through the following addresses to raise any questions or get clarification regarding personal data protection:

- By email to info@maxileafstore.com; 
- By post to: Rua S. Miguel de Roriz, nº 2115B, 4750-652, Roriz, Barcelos

Personal 
Data.

​The personal data that Maxigrau collects and handles is limited to what MaxiLeaf customers provide voluntarily, expressly and unequivocally by completing any form contained on this website.

Maxigrau processes the various categories of personal data depending on the reason for processing the data at any time, after classifying it in the following way:

- Identification data (e.g. name, signature);

- Tax identification data (e.g. tax identification number);

- Address and contact data (e.g. tax address, postal address, telephone numbers);

Purposes of processing the data and legal grounds.

The Maxigrau customers' personal data is processed in pursuit of specific, explicit and legitimate purposes and cannot later be processed in any way that is incompatible with these purposes.

In order to ensure a minimum and limited collection of data, Maxigrau only handles data that is strictly necessary, adequate and important for the purposes for which it is handled.

Our customers' personal data can only be processed for the following purposes:

- To manage your registration on the MaxiLeaf platform, i.e. if you want to register as a user on this platform, we need to handle your data to identify you as a user and grant you access to various functions, products and MaxiLeaf services, as without processing the data this would not be possible.

- Development, compliance and enforcement of a purchase and sale or service contract, which occurs for instance when you buy a MaxiLeaf product, and, if it is necessary to deliver the item, we also have to process the data for the transport.

- Your data will be processed for accounting purposes or for billing in accordance with the legal obligations. When you buy a product on our site, we have to process your data to issue the receipt;

- Marketing and communication of products and services. Maxigrau handles your data to send you the Newsletter and MaxiLeaf promotional campaigns by email and/or Short Message Service (SMS), and to invite you to MaxiLeaf events. This data processing occurs in pursuit of the data controller's legitimate interests and/or when a customer has given their free, informed and explicit consent to this purpose.

- Customer support. Maxigrau considers it legitimate to process MaxiLeaf customers' data to respond to requests and/or questions they raise regarding MaxiLeaf products and services.

Personal 
Data 
Recipients.

  1. For the purposes mentioned above and in compliance with its legal obligations, Maxigrau may have to send the MaxiLeaf customers' personal data to third parties, namely:

  2. To entities that are subcontractors pursuant to the General Data Protection Regulation, to provide the contract enforcement services, logistics and transport, information technologies, data storage, auditing, document management and litigation, namely with service providers in the transport and logistics area, accounting, information systems, auditing and litigation areas. Maxigrau shall only use subcontracted entities who act according to its instructions and as long as they present sufficient guarantees they can undertake the proper technical and organisational measures so that the processing satisfies, among other things, the security, confidentiality and integrity requirements and these guarantees are formalised in an agreement signed by Maxigrau and each of these entities.

  3. Entities that are considered to be third parties for the purpose of the General Data Protection Regulation such as the Tax and Customs Authority, Judicial Entities and Regulators.

Storage
Period.

Your personal data will be processed as long as it is necessary or while mandatory to comply with the purposes mentioned above.

The data needed to manage the registration as a user on the platform will be kept until the customer decides to cancel their registration.

The data processed under the scope of the development, compliance and enforcement of a purchase and sale contract or service contract will be stored for the period of time strictly necessary to manage the purchase of the products or services, including any returns or complaints regarding the purchase of the product or service in question.

The data processed for accounting purposes and/or billing will be kept for the legally required period of time to pursue this purpose.

The processing of data collected for marketing and communication of products and services will be kept for 1 (one) year as of the customer's last interaction or until they withdraw the consent that they gave for the purpose, depending on the case.

The data processed under the scope of customer support will be kept for the time needed to respond to their inquiry or request.

Data Subject' Rights.

  1. Maxigrau's customers, as the data subjects, through the collection and processing of their data, have the following rights:

  2. The right of access: whenever they request, they can access their personal data, get information about the processing of their data and get a copy of their personal data that is handled;

  3.  The right of rectification: whenever they consider that their personal data is incomplete or inaccurate, they can request that it is rectified or completed;

  4. Right of erasure of the data: notwithstanding any legal obligations that may limit this right, the data subjects can request that their data is eliminated when: the data no longer needs to be processed for the purpose that justified its collection or processing; they withdraw their consent on which the data processing was grounded and there are no other legal grounds for it; they present opposition to the processing of the data and there are no prevailing legal interests, to be assessed on a case by case basis, that justify the processing; when the data has been processed illegally; the personal data has to be deleted to comply with a legal obligation that the data controller is subject to; the data has been collected in the context of the offer of services by the company mentioned in article 8(1) of the General Data Protection Regulation;

  5. Right of limiting the processing: the data subject can request to limit the processing of their data in the following situations: if they contest the accuracy of the data, during a period that allows the controller to check the accuracy; if the processing is illegal and the data subject opposes to their personal data being deleted and requests that its use be limited; if the data processor no longer needs the data to be processed but the data is still necessary for the purposes of declaration, exercise or defence of a right in a legal process; if they opposed the processing, until it is seen that the legitimate interests of the data processor prevail over theirs. 

  6. The right of objection: the data subject has the right to oppose the processing of their data when the processing is based on the legitimate interest of the controller or when the data is processed for other reasons than those for which it was collected, but that is compatible with it.

  7. If you oppose the data being processed, Maxigrau shall stop processing your data unless it has legitimate reasons to conduct this processing and these prevail over your interests. You can also oppose the processing of your data at any time for direct marketing purposes.

  8. Right to portability: if your personal data is in a structured format that is in current use and automatic reading, the processing is based on the express consent or in drawing up a contract and if it is done by automatic means, you have the right to send them to another controller as long as that is technically possible.

  9. Right to withdraw your consent: in situations where the processing in question is undertaken based on your consent, you have the right to withdraw the consent you gave at any time. In this case, the controller will stop processing the data in question, unless there are other grounds that justify the processing.

  10. The right to lodge a complaint with the supervisory authority: you have the right to lodge a complaint with the Portuguese 'Comissão Nacional de Proteção de Dados' (National Data Protection Commission) regarding the matters concerning the processing of your personal data.

bottom of page