THE Costafil, Clothing Industry and Commerce, LDA. (KOATI) recognises the importance of protecting your personal data, whatever its nature, and values, above all, honesty and transparency so that it is possible to build a solid and lasting relationship with customers based on trust and mutual benefit. Therefore, and with the entry into force of the new General Data Protection Regulation of the European Union (EU 2016/679), we have developed a set of security measures aimed at protecting your data and we have also updated our Privacy Policy.

This Privacy Policy aims to explain to you the Personal Data Processing Policy of Costafil, Indústria e Comércio de Vestuário, LDA. If you wish to make a purchase in our online store, you will have to accept our privacy policy as it is essential and imperative for the delivery of our products.

However, if you have any questions regarding this Policy, you can contact us at the following email address: info@koatistore.com or by letter addressed to: Costafil, Indústria e Comércio de Vestuário, LDA. Rua Fernando Pires de Lima, nº1119, 4784-908 Areias, Santo Tirso. You can also do so by going to any KOATI store.

1. COMPANY IDENTIFICATION

1.1. This website and corresponding Privacy Policy are managed by Costafil, Indústria e Comércio de Vestuário, LDA., with headquarters at Rua Albino Sousa Cruz, 437 Palmeira – 4780-324 Santo Tirso.

1.2. By browsing our website you are consenting to the terms described in this Privacy Policy.

2. OUR PRINCIPLES

2.1. Respect for the client's wishes

We respect the privacy and security of your personal data, which is why we ensure that the customer’s wishes are respected and that they are able to manage their privacy preferences autonomously, freely and without any complications. Therefore, if you disagree with any point mentioned in this Policy, you may object at any time by contacting us at the following email address: info@koatistore.com or by letter addressed to Costafil, Indústria e Comércio de Vestuário, LDA., Rua Fernando Pires de Lima, nº1119, 4784-908 Areias, Santo Tirso. You may also do so by visiting any KOATI store. We will do everything possible to satisfy your wishes and respect your concerns.

2.2. Good practices

Costafil, Indústria e Comércio de Vestuário, LDA. as the controller of personal data determines the purposes and means by which your personal data are processed, including all applicable security measures. We guarantee that your personal data is processed in Portugal in a correct and lawful manner and in accordance with good practices.

2.3. Strict necessity

When processing data that can identify you personally, directly or indirectly, we apply the principle of strict necessity. For this reason, the use of your personal data will always be minimal so as not to exceed the original purpose for which they were collected and/or processed.

3. COLLECTION AND PROCESSING OF PERSONAL DATA

3.1. The personal data collected and processed by Costafil, Indústria e Comércio de Vestuário, LDA. are only those that you voluntarily, expressly and unequivocally enter in the forms on this website.

3.2. The personal data collected are: name, gender, date of birth, email, mobile phone, address, NIF.

4. PURPOSE OF PROCESSING PERSONAL DATA

4.1. Your personal data is collected and processed by Costafil, Indústria e Comércio de Vestuário, LDA. only for purposes strictly linked to the use of this website, the services associated with it and the sale of products, management and improvement of the Loyalty Program, direct marketing and customer support management.

4.2. KOATI always seeks to maintain the relationship with its customers and provide them with the appropriate benefits, information and relevant content related to our brand. Your data will only be processed for these specific, explicit and legitimate purposes, and will not be subsequently processed in a way that is incompatible with these. The data collected and processed are adequate, relevant and not excessive in relation to these purposes.

4.3. However, your personal data may also be used for other processing operations within the limits of such applications. In particular, your personal data may be processed for the following purposes:

a) when you make a purchase on this website, we collect your personal data (for example, email address, delivery address, credit card number and telephone number) on the purchase form, solely for the purposes of selling, separating and transporting the products ordered by you;

b) when you request assistance from Customer Support we collect your personal data (e.g. first and last name, email address) solely for the purpose of providing you with the koatistore.com online store Customer Support services that are relevant to this website and to offer you the assistance you have requested from us;

c) when you register, we collect your personal data in order to simplify the preparation of your future orders;

d) when you subscribe to the newsletter, we collect your email address in order to offer you this service;

e) when you browse our website, we collect cookies – text files stored on your computer or mobile device when you visit websites. These help websites store and retrieve information about your browsing habits and customize it according to your preferences.
The information collected by these cookies serves, for example, to analyze website traffic patterns, calculate the number of users and perform statistical measurement and analysis of how users use the website, as well as allowing us to improve the content and the website in general.
If you prefer not to allow cookies, you can disable cookies in your internet browser, but this may prevent some websites from functioning correctly. You can always control the installation by selecting the advanced settings in your browser.

f) when you browse our website and subsequently visit platforms where advertising is available (social networks, Google and other partners of these networks), you may be impacted by advertisements from our brand. We will also use the data to reach new potential customers who may be interested in our products.

4.4. When we collect data, we indicate mandatory fields with asterisks when the data in question is necessary to:

• Perform our contract with you (for example for the supply of products you have purchased on our websites/apps);
• Provide you with the service you have requested (for example by providing you with a newsletter); or
• Comply with legal requirements (e.g. invoicing).

4.5. Your personal data may be communicated to service providers of Costafil, Indústria e Comércio de Vestuário, LDA. for the purpose of providing services, to judicial, tax and regulatory authorities for the purpose of complying with legal requirements.

5. WHO PROCESSES YOUR PERSONAL DATA

5.1. For organizational purposes and in order to offer you the best possible service, Costafil, Indústria e Comércio de Vestuário, LDA. works together with some entities outside its organization that will process the personal data of users of this website. This sharing of data is strictly due to the performance of the services provided by Costafil, Indústria e Comércio de Vestuário, LDA., including the sale of products.

5.2. These external entities include carriers, digital technology and service providers, digital marketing platforms, among others. The external entities referred to above were chosen by Costafil, Indústria e Comércio de Vestuário, LDA. due to their experience in data processing, the guarantees of compliance with applicable laws and regulations, as well as the technical security measures adopted by them in relation to the processing of personal data.

5.3. These external entities will always act in accordance with the instructions provided by Costafil, Indústria e Comércio de Vestuário, LDA. and only for the purposes strictly necessary for their function.
Your personal data will be shared with these entities, with the aim of:

• provision of electronic payment services, through credit/debit cards;
• processing of product sales;
• packaging and transportation of products;
• solve problems related to the sale of products;
• receive payments for the purchase of products;
• process customer product returns;

5.4. In addition to the situations set out above, your data may be shared with third parties to:

• comply with applicable laws,
• respond to judicial and government inquiries,
• comply with valid legal processes,
• protect the rights or property of Costafil, Indústria e Comércio de Vestuário, LDA.

6. CONSENT

Respecting the customer's wishes is one of KOATI's main concerns when it comes to the processing of your personal data. However, we do not want to affect the relationship we have with you or fall short of your expectations. Therefore, we consider that if you have maintained a relationship with us over the last 2 years, that is, if you have made a purchase, it was not necessary to request consent. However, if you disagree, you can object at any time by writing to us at info@koatistore.com.

7. YOUR RIGHTS

7.1. To exercise your right to access, rectify, erase, forget or block your personal data, you can send a written communication to the following email address: info@koatistore.com or by letter addressed to Costafil, Indústria e Comércio de Vestuário, LDA., Rua Fernando Pires de Lima, nº1119, 4784-908 Areias, Santo Tirso. You can also do so by going to any KOATI store and in your customer area in the online store.

7.2. If you wish to stop receiving direct marketing communications, you may exercise your right to object to the processing of your personal data at any time by managing your consents available in your Customer Area of the online store. You may also do so by sending an email to the email address info@koatistore.com or by letter addressed to: Costafil, Indústria e Comércio de Vestuário, LDA., SA, Rua Fernando Pires de Lima, nº1119, 4784-908 Areias, Santo Tirso. You may also do so by visiting any KOATI store.

8. SECURITY

8.1. KOATI uses appropriate security measures to protect your personal data against accidental or unlawful destruction, accidental loss, alteration, dissemination or unauthorized access, and against any other form of unlawful processing. Additionally, we contractually require that trusted external entities that process your personal data on our behalf do the same.

8.2. However, KOATI cannot guarantee that the security measures adopted to protect this website and the transmission of data and information through this website will prevent or exclude any risk of unauthorized access or loss of data. Therefore, we recommend that your computer is equipped with software devices that protect it in the transmission and reception of data (such as updated antivirus systems), and that your browser takes appropriate measures to ensure the security of data transmission (such as firewalls and anti-spam filters).

9. RETENTION AND PROCESSING PERIOD

9.1. Your data is kept by KOATI for the purposes described herein for the time necessary for the purposes mentioned, except if the personal data in question is necessary to prove compliance with obligations, while the limitation period of the corresponding rights has not expired, or if there is a longer data retention period imposed by law.

9.2. When your personal data is no longer needed, it will be removed from our systems and records or kept anonymous so that you cannot be identified from it.

The current version was published on 25 May 2018.