Privacy Policy
GoldNutrition collects some personal data from users (personal data holders). Therefore, in order to comply with Regulation No. 2016/679, relating to the processing of personal data, which came into force in practical application on 25 May 2018, GoldNutrition informs:
Responsible for processing personal data
GoldNutrition
Rua dos bem Memodos
2645-471 Cascais – Portugal
Contact email for the person in charge of personal data protection:
– Types of personal data processed
The types of personal data that GoldNutrition processes, by itself or through third parties, are the first name, last name, telephone number, company name, email address, address, website, usage data, Cookie and User name.
Personal data may be freely provided by the user, or, in the case of usage data, collected through registration on the website or on GoldNutrition platforms. Unless otherwise specified, all data collected by GoldNutrition is mandatory and failure to provide this data by the user may make it impossible for GoldNutrition to provide its services. In cases where GoldNutrition specifically states that some data is optional, users are free to stop communicating this data without any consequences for the availability or functioning of the service.
Users who have doubts regarding the type of processing, the legality of the processing and the data involved in it, are invited to contact the person responsible for the processing, via the address indicated above or via email to the person in charge for data protection.
Any use of cookies – or other tracking tools – by this website or by the owners of third-party services used by this website will be for the purpose of providing the services requested by the user, in addition to the other purposes described in this document and in the cookie policy , if available.
– Security in the processing of personal data
The controller guarantees that the data is hosted in systems equipped with protection measures that aim to ensure a level of trust appropriate to the risk, as provided for in Regulation No. 2016/679, article 32.
Personal Data is obtained using computers and/or IT-enabled tools, following organizational procedures and means strictly related to the indicated purposes. In addition to the controller, in some cases, data may be accessed internally by GoldNutrition's administration, sales, marketing, legal system administration and subcontractors departments (such as external technical service providers, postal services, hosting providers, IT, communication agencies) appointed, when necessary, as data processors by the controller. The updated list of these parties can be requested from the controller at any time.
– Lawfulness for the processing of personal data
The controller may process personal data related to the user if one of the following hypotheses applies (Regulation no. 2016/679, article 6):
- Users have given their consent for one or more specific purposes;
- The processing of personal data is necessary to fulfill a contract with the user and/or any pre-contractual obligations thereof;
- The processing of personal data is necessary to comply with a legal obligation to which the owner is subject;
- The processing of personal data is necessary for the purposes of legitimate interests pursued by the owner or a third party;
In any case, the person responsible for the protection of personal data, appointed by the Data Controller, will gladly collaborate to clarify the legal basis that applies to the processing, and in particular if the provision of data is a mandatory requirement by law. or contractual, or a requirement necessary to enter into a contract.
– Place of processing of personal data
Personal data is processed at the Controller's headquarters. Depending on the User's location, data transfers may involve the transfer of User Data to a country other than your own.
Users also have the right to be informed about the legal basis of Data transfers to countries outside the European Union or to any international organizations governed by public international law or formed by two or more countries, and about the security measures taken by the Responsible for the treatment.
If any such transfers occur, Users can investigate the reasons in the relevant sections of this document or by asking the Owner using the information provided in the contact section.
– Period of retention of personal data
Personal Data will be kept for as long as necessary for the purposes for which they were collected.
Therefore:
Personal Data collected for purposes related to the execution of a contract between the Data Controller and the User will be kept until such contract has been completely fulfilled.
Personal Data processed for purposes related to the Owner's legitimate interests will be kept for as long as necessary to fulfill such purposes. Users may obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Person in Charge for the protection of personal data.
– The purposes of processing
User Data is collected to allow the Data Controller to provide its services and products, as well as for the following purposes: contacting the user, anti-spam protection, access to third party service accounts, statistics, saving and management of backup, content commenting, viewing content from external platforms, payment processing, interaction with social networks and external platforms, user database referencing, interaction with data collection platforms and other third parties, email address management and messaging, registration and authentication, Tag management and traffic optimization and distribution.
Facebook permissions requested by GoldNutrition website
The GoldNutrition website may ask for certain permissions on Facebook that allow you to perform actions with the user's Facebook account and to retrieve information, including personal data. This service allows connection to the User's account on the social network Facebook, provided by Facebook Inc.
For more information about the following permissions, see the Facebook permissions documentation and the Facebook privacy policy .
The permissions requested, which aim to collect personal data, are the following: birthday, email, first and last name.
Klarna Privacy Policy
To offer Klarna payment methods, at the time of payment we may transmit to Klarna during the purchase process your personal data included in the contact form and order details, so that Klarna can assess whether you meet the requirements to access your payment methods and to adapt these payment methods to your profile. Your personal data is processed in accordance with the provisions of Klarna's privacy policy .
Detailed information about the processing of Personal Data
Personal Data is collected for the following purposes and using the following services:
– Access to third-party service accounts
This type of service allows the GoldNutrition website to access your account data with a third party service and perform actions with it.
These services are not activated automatically, they require explicit authorization from the user (personal data holder).
– Access to Facebook account
This service allows the GoldNutrition website to connect with the User's account on the social network Facebook, provided by Facebook, Inc.
Permission Request: birthday, email contact and email.
Place of processing: USA – Privacy Policy .
Content comment
Content commenting services allow users to create and publish comments on the content of this service (on the GoldNutrition website).
Depending on the settings chosen by the controller, users may also leave anonymous comments.
If an email address is indicated in the personal data provided by the user, it can be used to send notifications and comments on the same content. Users are responsible for the content of their comments.
If a third-party content commenting service is installed, it may still collect web traffic data for pages where the commenting service is installed, even when users do not use the content commenting service.
– Comment System managed directly (on the GoldNutrition Website)
This Site has its own internal content commenting system.
Personal Data processed: cookie, email, name, username, surname and website.
Contact the User
– Contact form (GoldNutrition website)
By filling out the contact form on the GoldNutrition website with their details, users authorize the controller to use these details to respond to requests for information, quotations or any other type of request as indicated in the title of the form.
Personal data processed: name, user surname, email address, company name, telephone number, country and website.
– Mailing list or newsletter (GoldNutrition Website)
When the user registers for the mailing list or newsletter, their email address will be added to the contact list of those who may receive email messages containing information of a commercial or promotional nature about this website. Your email address may also be added to this list as a result of your registration on the GoldNutrition website or after making a purchase.
Personal Data processed: email, first and last name.
– Contact telephone number (GoldNutrition website)
Users who provide a telephone number may be contacted for commercial or promotional purposes related to this website, as well as to fulfill support requests.
Personal data processed: name, surname, telephone number.
Statistics
The services contained in this section enable the controller to monitor and analyze web traffic and may be used to track user behavior.
– Google Analytics (Google Inc.)
Google Analytics is an internet analysis service provided by Google Inc. (“Google”). Google uses the data collected to track and examine the use of this service (this Site) to prepare reports on activities and share them with other Google services.
Google may use the data collected to contextualize and personalize ads from its own advertising network.
Personal data processed: cookie and usage data.
Place of processing: USA – Privacy Policy – Opt Out .
– WordPress Stat (Automattic Inc.)
WordPress is an analytics service provided by Automattic Inc.
Personal Data processed: cookie and usage data.
Place of processing: USA – Privacy Policy .
User database management
These types of services allow the data controller to create user profiles based on an email address, a personal name, or other information that the user provides on the GoldNutrition website, as well as tracking the user's activities through analytical capabilities.
This personal data may also be combined with publicly available information about the user (such as social media profiles) and used to build private profiles that the owner can display and use to improve the GoldNutrition website service.
Some of these services may also be enabled to send scheduled messages to the user, such as emails based on actions performed in this service on the GoldNutrition website.
Managing email addresses and sending messages
These types of services allow the management of the email contact database and telephone numbers for communicating with the User.
These services can also be used to process data relating to the date and time the User viewed the e-mail or when the User interacted with the e-mail received (Ex: when the User selected the links included in the e-mail) .
– MailChimp (The Rocket Science Group, LLC.)
MailChimp is an email address management and messaging service provided by The Rocket Science Group, LLC.
Personal Data processed: email.
Place of processing: USA – Privacy Policy .
Tag management
This type of service helps the Data Controller to manage the tags or scripts needed by the GoldNutrition website in a centralized manner. As a result of this, user data is processed by these existing services and used subsequently for remarketing campaigns.
– Google Tag Manager (Google LLC)
Google Tag Manager is a tag management service provided by Google LLC.
Personal Data processed: Cookies and Usage Data.
Place of processing: USA – Privacy Policy .
Interaction with data collection platforms and other third parties
These types of services allow users to interact with data collection platforms or other services directly from GoldNutritiom website pages for the purpose of storing (saving) and reusing data.
If one of these services is installed by the Responsible Party on the GoldNutrition website, it may collect usage and navigation data on the pages where they are installed, even if users do not actively use the service.
Interaction with social networks and external platforms
These types of services allow users to interact with social networks or other external platforms directly from the GoldNutrition website pages. The interaction and information obtained through the GoldNutrition website are always subject to the user's privacy settings on each social network. If a service that allows interaction with social networks is installed by the person responsible, he or she may collect traffic data for the pages where the service is installed, even when users are not using them.
– The Facebook Like Button and Social Widgets (Facebook, Inc.)
The Facebook like button and social widgets are services that allow user interaction with the social network Facebook provided by Facebook, Inc.
Personal Data processed: cookie and usage data.
Place of processing: USA – Privacy Policy .
– The LinkedIn social button and widgets (LinkedIn Corporation)
The LinkedIn social button and widgets are services that allow users to interact with the LinkedIn social network provided by LinkedIn Corporation.
Personal Data processed: cookie and usage data.
Place of processing: USA – Privacy Policy .
– The YouTube social button and widgets (Google Inc.)
The YouTube social button and widgets are services that allow users to interact with the YouTube social network provided by Google Inc.
Personal data processed: usage data.
Place of processing: USA – Privacy Policy .
Payment processing
Payment processing services allow the GoldNutrition website to process payments by credit card, bank transfer or other means.
Aiming to protect personal data from the granting of the operation and by default, the website only collects (from the user, ie holder of the personal data) and transmits (to financial intermediaries) the information strictly necessary to make the payment.
Some of these services may also enable the sending of timed messages to the User of this Site such as email-based invoices and other notifications.
– Paypal (Paypal)
PayPal is a payment service provided by PayPal Inc., which allows users to make payments online.
Personal data processed: various types of data as specified in the service's privacy policy.
Anti-spam protection
These types of services analyze traffic potentially containing users' personal data, with the aim of filtering them from parts of the traffic, messages and content that are recognized as SPAM.
– Google reCAPTCHA (Google Inc.)
Google reCAPTCHA is a SPAM protection service provided by Google Inc.
Use of reCAPTCHA is subject to Google's privacy policy and terms of use .
Personal data processed: cookie and usage data.
Place of processing: USA – Privacy Policy .
Registration and authentication
By registering or authenticating, users allow the GoldNutrition website to identify them and grant users access to dedicated services.
Depending on what is described below, registration and authentication services may be provided by third parties. (for example, logging into the GoldNutriton website using Facebook credentials).
In this case, the GoldNutrition website may access some data stored by these third-party services for registration or identification purposes.
– Facebook Authentication (Facebook, Inc.)
Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the social network Facebook.
Personal data processed: various types of data as specified in the service's privacy policy.
Place of processing: USA – Privacy Policy .
Save and backup management
These types of services enable the controller to save and manage backups of the website processed at the controller's headquarters. Backups may include source code and content, as well as data you provide on the Site.
View content from external platforms
These types of services allow the user to view and interact with the content installed by the person responsible on external platforms or directly on the pages of the GoldNutrition website and to interact with them. If this type of service is installed, it can collect web traffic data for the pages where the service is installed, even when users are not using it.
– Google Fonts (Google Inc.)
Google Fonts is a type face display service provided by Google Inc. that allows this website to embed font content on its pages.
Personal data processed: usage data and various types of Data as specified in the service's privacy policy.
Place of processing: USA – Privacy Policy .
– Google Maps widget (Google Inc.)
Google Maps is a map visualization service provided by Google Inc. that allows this Site to incorporate the content of this type of data into its pages.
Personal data processed: cookie and usage data.
Place of processing: USA – Privacy Policy .
Users' rights
Users may exercise certain rights regarding their data processed by the owner.
In particular, users have the following rights:
- Withdraw consent at any time. Users have the right to withdraw consent in cases where they have previously given consent to the processing of their personal data via email at epd@goldnutrition.pt .
- Object to the processing of your data. Users have the right to object to the processing of their data if the processing is carried out on a legal basis other than consent.
- Access your data. Users have the right to obtain information about the processing of their personal data and to obtain a copy of the data being processed.
- Check and request rectification of your data. Users have the right to verify the accuracy of their data and request that it be updated or corrected.
- Restrict (limit) the processing of your data. Users have the right to restrict the processing of their data in accordance with article 18 of Regulation no. 2016/679.
- Have your personal data deleted. Users have the right to have their personal data erased, in accordance with article 17 of Regulation no. 2016/679.
- Receive your data and have it transferred to another controller (Portability). Users have the right to receive their Data, in a structured format, commonly used and capable of being read by machines and, if technically feasible, to have them transmitted to another person responsible for processing. This determination is subject to the formal exercise by the user of this right.
- File a complaint. Users have the right to lodge a complaint with the National Data Protection Commission.
- The exercise of the rights mentioned above by holders of personal data must be sent to the email epd@goldnutrition.pt .
Details about the right to object to the processing of personal data
In cases where personal data is processed for a public interest, in the exercise of an official authorization vested in the controller or for the purposes of the legitimate interests pursued by the controller, users may object to such processing without any necessary justification. for such.
Users should know, however, that if their Personal Data is processed for direct marketing purposes they can object to such processing at any time without providing any justification.
These requests can be exercised at no cost and will be responded to by the data protection officer as quickly as possible and in all cases within a period of less than one month.
Cookies Policy
The website uses cookies. To find out more and for a more detailed notice about cookies, the user can consult our Cookie Policy .
Additional information about the processing of personal data
In addition to the information contained in this privacy policy, the GoldNutrition website may provide the user with additional and contextual information about specific services or the collection and processing of personal data upon request.
System logs and maintenance
For operation and maintenance purposes, the GoldNutrition website and any third-party services may collect files that record interaction with this website (system logs) or use other personal data (such as IP address) for this purpose.
Changes to this privacy policy
The controller reserves the right to make changes to this privacy policy at any time, by communicating to its users via email, the website or by letter to the extent technically and legally feasible – sending a notice to users through any contact information available to the controller. It is highly recommended that the site be consulted several times in relation to the last modification described at the bottom.
If the changes affect the processing activities carried out based on the user's consent, the controller will collect new consent from the user, where required.
Definitions and legal references
Personal Data (or Data)
1) “Personal data”, information relating to an identified or identifiable natural person (“data subject”); An identifiable natural person is considered to be a natural person who can be identified, directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, location data, electronic identifiers or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
2) “Processing” means an operation or set of operations carried out on personal data or on sets of personal data, by automated or non-automated means, such as collection, registration, organization, structuring, conservation, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, broadcast or any other form of availability, comparison or interconnection, limitation, erasure or destruction;
4) "Profiling" means any form of automated processing of personal data which consists of using such personal data to evaluate certain personal aspects of a natural person, in particular to analyze or predict aspects related to their professional performance, their economic situation , health, personal preferences, interests, reliability, behavior, location or movements;
7) “Responsible for processing” means the natural or legal person, public authority, agency or other body that, individually or jointly with others, determines the purposes and means of processing personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria applicable to its nomination may be provided for by Union or Member State law;
8) “Subcontractor” means a natural or legal person, public authority, agency or other body that processes personal data on behalf of the person responsible for processing them;
9) “Recipient” means a natural or legal person, public authority, agency or other body that receives communications of personal data, regardless of whether or not it is a third party. However, public authorities which may receive personal data in the framework of specific inquiries in accordance with Union or Member State law shall not be regarded as recipients; the processing of these data by these public authorities must comply with the applicable data protection rules depending on the purposes of the processing;
10) «Third party» means the natural or legal person, public authority, service or body that is not the data subject, the controller, the subcontractor and the people who, under the direct authority of the controller or the subcontractor, are authorized to process personal data;
11) "Consent" of the data subject, a free, specific, informed and explicit expression of will, by which the data subject accepts, through a declaration or unequivocal positive act, that personal data concerning him or her will be subject to processing ;
21) 'supervisory authority' means an independent public authority established by a Member State in accordance with Article 51;
23) "Cross-border processing": a) The processing of personal data that takes place in the context of the activities of establishments in more than one Member State of a controller or a processor in the Union, where the controller or the processor is established in more than one Member State; or b) The processing of personal data that occurs in the context of the activities of a single establishment of a controller or a subcontractor, but which substantially affects, or is likely to substantially affect, data subjects in more than one State. Member;
24) "Relevant and reasoned objection" means an objection to a draft decision which aims to determine whether there is a violation of this Regulation or whether the envisaged action in relation to the controller or processor complies with this Regulation, clearly demonstrating the seriousness the risks arising from the draft decision for the fundamental rights and freedoms of data subjects and, possibly, for the free movement of personal data within the territory of the Union;
26) «International organization» means an organization and the public international law bodies governed by it, or another body created by an agreement concluded between two or more countries or on the basis of an agreement of that nature.
– Usage Data
Information collected automatically through this Site (or third-party services contracted through this Service (this Site)), which may include: IP addresses or domain names of computers used by users using this site, URI addresses (Uniform Resource Identifier ), the date and time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code that indicates the status of the response server (positive result, error, etc.), the country of origin, the characteristics of the browser and operating system used by the User, the various time details per visit (for example, the time spent on each page within the application) and details about the path followed within the application, with special reference the sequence of pages visited and other parameters about the User's device operating system and/or IT environment.
– User
The person using this website who, unless otherwise specified, coincides with the data subject.
– Data Holder
The natural person to whom the personal data refers.
– Responsible for treatment
GoldNutrition
Rua dos bem Memodos
2645-471 Cascais – Portugal
– Contact email for the person in charge of personal data protection:
- Service
The service provided by the Website/App as described in the relative terms (if available) and on this Website/App.
– European Union (or EU)
Unless otherwise specified, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.
- Cookie
Small units of data stored on the user's device.
– Legal information
This privacy statement was prepared based on the determinations of multiple legislations, including Arts. 13th/14th of Regulation (EU) no. 2016/679 (GDPR – General Data Protection Regulation).
This privacy policy refers only to this website, except for the cases expressly mentioned in this document