Privacy Policy

This Site collects certain Personal Data from Users.

Owner and Data Controller

Stunning Beauty, Lda. Rua Damião de Gois Nº24, 3ºesq 1400-089 Lisbon, Portugal

Owner’s contact e-mail : geral@rubenmalcatanogueira.pt

Types of Data collected

Among the types of Personal Data that this Site collects, by itself or through third parties, there are: First Name; Surname; Telephone Number; Company Name; Email; Cookies.

Full details of the Personal Data collected are provided in the dedicated sections of this privacy policy or by specific explanatory texts displayed prior to collection.

Personal Data may be provided voluntarily by the User, or in the case of Usage Data, collected automatically when using this Site.

Unless it is specified that all Data requested by this Site is mandatory and failure to provide this Data may make it impossible for this Site to provide its Services. Where this Site specifically states that certain Data is not required, Users will not be required to complete that Data and there will be no consequences for the availability or operation of the Service.

Users who have questions regarding which Personal Data are required are invited to contact the Owner.

Any uses of cookies – or other tracking tools – by this Site or the third party service owners used by this Site will be for the purpose of providing the Services requested by the User, in addition to the other purposes described herein and in the Cookies Policy, if available.

Users are responsible for any third-party Personal Data that is obtained, published or shared through this Service (this Site) and confirm that they have the third party’s consent to provide the Data to the Owner.

How and where the data is processed

Processing method

The Owner shall take appropriate security measures to prevent unauthorised access, disclosure, alteration or unauthorised destruction of the Data.

Data processing is carried out by means of computers and/or IT enabled tools, following organisational procedures and means strictly related to the stated purposes. In addition to the Owner, in some cases, the Data may be accessed by certain types of persons in charge, involved with the operation of this Service (this Site) (administration, sales, marketing, legal system administration) or external persons (such as third-party providers of technical services, couriers, etc.) appointed, where necessary, as Data Processors by the Owner. The updated list of these parts can be requested from the Owner at any time.

Legal basis for processing

The Owner may process Personal Data relating to the User if one of the following applies:

• Users who have given their approval for one or more specific purposes; Note: Under some legislations the Owner may have the permission to process Personal Data UNTIL the User objects to this (“opt-out”), without having to rely on permission or any other legal grounds below. This, however, does not apply where the processing of Personal Data is subject to European data protection legislation;

• the provision of the Data is necessary for the performance of a contract with the User and/or any pre-contractual obligations of the User;

• the processing is necessary for compliance with a legal obligation to which the Owner is subject;

• the processing relates to a task that is carried out in the public interest or in the exercise of an official authorisation in which the Owner is vested;

• the processing is necessary for the purpose of legitimate interests pursued by the Owner or a third party;

In any case, the Owner will willingly cooperate to clarify which legal basis applies to the processing, and in particular if the provision of Data is a mandatory requirement under law or contract, or a necessary requirement to enter into a contract.

Place

The data is processed at the registered offices of the Owners, and any other places where the parties involved in the processing are located.

Depending on the User’s location data transfers may involve the transfer of User Data to a country other than your own. To find out more about the place of processing of such transferred Data Users may check the section containing the details on the processing of Personal Data.

To find out more about the place of processing of such transferred Data Users may check the section containing the details on the processing of Personal Data.

If any such transfers occur Users can find out more about them by checking the relevant sections of this document or by asking the Owner using the information provided in the contact section.

Conservation period

Personal Data will be processed and stored for as long as necessary for the purposes for which they are collected.

Therefore:

• Personal Data collected for purposes related to the performance of a contract between the Owner and the User will be kept until such contract has been fully performed.

• Personal Data collected for purposes related to the legitimate interests of the Owner shall be kept for as long as necessary to fulfil those purposes. Users may obtain specific information about the legitimate interests pursued by the Owner within the relevant sections of this document or by contacting the Owner.

The Owner may be permitted to retain Personal Data for a longer period where the User has given his or her consent to such processing, as long as such consent has not been withdrawn. In addition, the Owner may be obliged to retain Personal Data for a longer period on all occasions when it is required to do so in order to comply with a legal obligation or in compliance with a warrant from an authority.

Once the retention period is over, the Personal Data will be deleted. Thus, the right of access, the right to erasure, the right to correction and the right to data portability cannot be enforced after the expiry of the retention period.

The purposes of processing

Data relating to the User is collected to enable the Owner to provide its Services, as well as for the following purposes: Contacting the User; Anti-spam protection; Accessing third party service accounts; Statistics; Saving and managing backup; Commenting on content; Viewing content from external platforms; Processing payments; Interacting with social media and external platforms; Managing User databases; Interacting with data collection platforms and other third parties; Managing email addresses and sending messages; Registration and authentication; Tag management and Traffic optimisation and distribution.

Users may obtain additional detailed information on such processing purposes and on the specific Personal Data used for each purpose in the respective sections of this document.

Facebook permissions requested by this Site

This Site may ask for certain Facebook permissions that allow you to perform actions with your Facebook account and to retrieve information, including personal data. This service allows this Site to connect with the User’s account on the Facebook social network, provided by Facebook Inc.

Para mais informações sobre as seguintes permissões, consulte a documentação de permissões Facebook https://developers.facebook.com/docs/facebook-login/permissions” title=”https://developers.facebook.com/docs/facebook-login/permissions)”>https://developers.facebook.com/docs/facebook-login/permissions) e a política de privacidade do Facebook (https://www.facebook.com/about/privacy/).

The permissions requested are as follows: Birthday, Email Contact, Email and Basic Information.

Detailed information on the processing of Personal Data

Personal Data is collected for the following purposes and using the following services:

Access to third party service accounts

This type of service allows this service (https://rubenmalcatanogueira.pt/) to access your Account Data with a third party service and perform actions with it.

These services are not automatically activated, they need the explicit authorization of the User

Access to Facebook account (this Site)

This service allows this Site to connect with the User’s account on the Facebook social network, provided by Facebook, Inc.

Permission Request: Birthday; Email Contact; Email.

Place of processing: USA – Privacy Policy().

Participant in the Privacy Shield.

Content commentary

The content comment service allows Users to create and publish comments on the content of this service (this Site).

Depending on the settings chosen by the Owner, Users can also leave anonymous comments. If there is an e-mail address among the Personal Data provided by the User, it may be used to send notifications of comments on the same content. Users are responsible for the content of their comments.

If a content comment service provided by a third party is installed, it may still collect web traffic data for the pages where the comment service is installed, even when Users do not use the content comment service.

Directly Managed Comment System (this Site)

This Site has its own internal content commenting system.

Personal data collected: Cookie; E-mail; Name; Username; Surname; Website.

Contact the User

Contact form (this site)

By completing the contact form with their Details, Users authorise this Site to use these details to respond to requests for information, quotation or any other type of request as indicated by the title of the form.

Personal Data collected: Name, E-mail; Company name; Telephone number.

Mailing list or newsletter (this Site)

By registering on the mailing list or newsletter, the User’s e-mail address will be added to the contact list of those who may receive e-mail messages containing information of a commercial or promotional nature about this Site. Your email address may also be added to this list as a result of you registering for this service (this Site) or making a purchase.

Personal data collected: E-mail; First name; Surname.

Contact telephone (this Site)

Users who have provided a telephone number may be contacted for commercial or promotional purposes in connection with this Site, as well as for the fulfilment of support requests.

Personal Data collected: Telephone number.

Statistics

The services present in this section enable the Owner to monitor and analyse web traffic and can be used to track User behaviour.

Google Analytics (Google Inc.)

Google Analytics is an internet analytics service provided by Google, depending on where this Site is accessed from, (“Google”). Google uses the data collected to track and analyse your use of this service (this Site) to prepare reports on activity and share it with other Google services.

Google may use the data collected to contextualise and personalise ads in its own ad network.

Personal Data collected: Cookie; Usage data.

Place of processing: USA – Privacy Policy (https://www.facebook.com/policy.php) – Opt (https://policies.google.com/privacy?hl=pt) Oct.

Participant in the Privacy Shield.

WordPress Stat (Automattic Inc.)

WordPress is an analytics service provided by Automattic Inc.

Personal Data collected: Cookie; Usage data.

Place of processing: USA – Privacy Policy (https://automattic.com/privacy/).

User database management

These types of services allow the Owner to create User profiles from an e-mail address, a personal name, or other information that the User has provided to this Site, as well as to track User activities through analytical features. This Personal Data may also be combined with publicly available information about the User (such as social media profiles) and used to build private profiles that the Owner can display and use to improve the service (this Site).

Some of these services may also be enabled to send scheduled messages to the User such as emails based on actions taken on this service (this Site).

Intercom (Intercom Inc.)

Intercom is a database management service provided by Intercom Inc.

Intercom can also be used as a means for communications, both through e-mail and messages within this service (this Site).

Personal Data collected: Cookie; usage data; email; various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy (https://docs.intercom.io/pricing-and-terms/privacy).

Managing e-mail addresses and sending messages

These types of services allow the management of the database of email contacts, telephone numbers or other contact information for the purpose of communicating with the User.

These services may also be used to collect data regarding the date and time when the User viewed the email; and also when the User interacted with the email received, such as when the User selected the links included in the email.

Mailchimp (The Rocket Science Group, LLC.)

Mailchimp is the email address management and messaging service provided by The Rocket Science Group LLC.

Personal Data collected: e-mail.

Place of processing: USA – Privacy Policy (https://mailchimp.com/legal/privacy/).

Participant in the Privacy Shield.

Sendgrid (Sendgrid)

Sendgrid is the email address management and messaging service provided by Sendgrid Inc.

Personal Data collected: e-mail.

Place of processing: USA – Privacy Policy (https://sendgrid.com/policies/privacy/).

Tag management

This type of service helps the Owner to manage the tags or scripts required by this Site centrally. As a result of this User Data flows through these services and there is the possibility of retention of this Data.

Google Tag Manager (Google)

Google Tag Manager is a management service provided by Google depending on the location from which this Site is accessed.

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).

Participant in the Privacy Shield.

Interaction with data collection platforms and other third parties

Interaction with data collection platforms and other third parties

If one of these services is installed, it may collect Usage and Navigation Data on the pages where they have been installed, even if Users do not actively use the service.

Widget Wufoo (Wufoo Inc.)

The Wufoo Widget is a service for interacting with the Wufoo data collection platform provided by SurveyMonkey Inc. or SurveyMonkey Europe UC, depending on the location from which this Site is accessed,

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (http://www.wufoo.com/privacy/).

Participant in the Privacy Shield.

Interaction with social networks and external platforms

These types of services allow interaction with social networks or other external platforms directly from the pages of this service (this Site).

The interaction and information obtained through this Site is always subject to the privacy settings of the User in each social network.

This type of service may also collect traffic data for pages where the service is installed, even when Users are not using it.

It is recommended to exit the respective services in order to ensure that the data processed in this service (this Site) is not being connected back to the User’s profile.

The Facebook Like button and Social Widgets (Facebook, Inc.)

The Facebook Like button and Social Widgets are services that allow interaction with the Facebook social network provided by Facebook, Inc.

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://www.facebook.com/privacy/explanation).

Participant in the Privacy Shield.

The +1 button and Social Widgets from Google+ (Google Inc.)

The +1 button and Google+ Social Widgets are services that allow interaction with the Google+ social network provided by Google, depending on the location from which this Site is accessed.

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).

Participant in the Privacy Shield.

The LinkedIn Social Button and Widgets (LinkedIn Corporation)

The LinkedIn social button and widgets are services that allow interaction with the LinkedIn social network provided by LinkedIn Corporation.

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://www.linkedin.com/legal/privacy-policy).

Participant in the Privacy Shield.

The YouTube social button and widgets (Google Inc.)

The YouTube social button and widgets are services that allow interaction with the YouTube social network provided by Google, depending on the location from which this Site is accessed.

Personal Data collected: Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).

Participant in the Privacy Shield.

Traffic optimisation and distribution

These types of services allow this Site to distribute their content using servers located in different countries in order to optimise their performance.

Some Personal Data is processed and depends on the characteristics and the way in which these services are implemented. Its function is to filter communications between this Site and the User’s browser.

Considering the widespread distribution of this system, it is difficult to determine the locations to which contents, which may contain personal information of the User, have been transferred.

Considering the widespread distribution of this system, it is difficult to determine the locations to which contents, which may contain personal information of the User, have been transferred.

Sucuri CloudProxy is a traffic optimization and distribution service provided by Sucuri, Inc.

The way the Sucuri CloudProxy is integrated means that it filters all traffic through this service (this Website), i.e. communication between this Website and the User’s browser, while at the same time, allowing analytical data from this Application to be collected.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy (https://bit.ly/2QQX3Al).

Payment process

Payment processing services enable this Site to process payments by credit card, bank transfer or other means. To ensure greater security, this Site provides only the information necessary to execute the transaction with the financial intermediaries operating the transaction.

Some of these services may also enable the sending of timed messages to the User of this Site such as email-based invoices and other notifications.

Paypal (Paypal)

PayPal is a payment service provided by PayPal Inc. that allows Users to make payments online.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Anti-spam protection

These types of services analyse the traffic of this service (this Site), which may contain Personal Data of the Users, in order to filter them from the parts of the traffic, messages and contents that are recognised as SPAM.

Google reCAPTCHA (Google Inc.)

Google reCAPTCHA is a SPAM protection service provided by Google or Google depending on where this Website is accessed from.

Use of reCAPTCHA is subject to Google’s privacy policy (https://policies.google.com/privacy?hl=pt-BR) and terms of use (https://policies.google.com/terms?hl=pt-BR).

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).

Participant in the Privacy Shield.

Akismet (Automattic Inc.)

Akismet is a SPAM protection service provided by Automattic Inc.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy (https://automattic.com/privacy/).

Registration and authentication

By registering or authenticating, Users allow this service (this Site) to identify them and give them access to dedicated services. Depending on what is described below, registration and authentication services may be provided by third parties. In this case, this Site may access some Data stored by these third party services for registration or identification purposes.

Facebook Authentication (Facebook, Inc.)

Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to the Facebook social network.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy (https://www.facebook.com/help/405977429438260).

Participant in the Privacy Shield.

Save and manage backup

These types of services allow the Owner to save and manage the backups of this service (this Website) on external servers managed by the service provider itself. The backups may include source code and content as well as data that the User provides to this Site.

Backup on Google Drive (Google LLC)

Google Drive is a service for storing and managing backups provided by Google.

Personal Data collected: various types of Data as specified in the privacy policy of the service.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy).

Participant in the Privacy Shield.

Viewing content from external platforms

These types of services allow the User to view and interact with content present on external platforms directly from the pages of this service (this Site). If such a service is installed it may collect web traffic data for pages where it is installed, even when Users are not using them.

Google Fonts (Google Inc.)

Google Fonts is a font type preview service provided by Google, depending on the location from which this Site is accessed, that enables this Site to incorporate content of that type on its pages.

Personal Data collected: Usage data; various types of Data as specified in the service’s privacy policy.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=policies&gl=it).

Participant in the Privacy Shield.

Google Maps widget (Google Inc.)

Google Maps is a map display service provided by Google, depending on the location from which this Site is accessed, that enables this Site to incorporate content of this type on its pages.

Personal data collected: Cookies; Usage data.

Place of processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt&gl=it).

Participant in the Privacy Shield.

Gravatar (Automattic Inc.)

Gravatar is an image-viewing service provided by Automattic Inc. that enables this Site to incorporate such content into its pages.

Please note that if Gravatar images are used in commenting systems, the email address of the person who made the comment or parts of it may be sent to Gravatar – even if that person has not signed up for this service.

Personal Data collected: usage data; e-mail.

Place of processing: USA – Privacy Policy (https://automattic.com/privacy/).

Users’ rights

Users may exercise certain rights in respect of their Data processed by the Owner.

In particular, Users have rights such as:

• Withdraw your approval at any time.Users have the right to withdraw their approval in cases where they have previously given their approval for the processing of their Personal Data.

• Refuse the processing of your Data. Users have the right to refuse the processing of their Data if the processing is performed on a legal basis other than approval. Further details are provided in the specific section below.

• Accessing your Data. Users have the right to know whether their Data is being processed by the Owner, to obtain disclosures about certain aspects of the processing and to obtain a copy of the Data that is being processed.

• Check and request correction. Users have the right to check the accuracy of their Data and to request any updates or corrections.

• Restrict the processing of your Data. Users have the right, under certain circumstances, to restrict the processing of their Data for any purpose other than the storage of their Data.

• Delete your Personal Data or have it removed in another way. Users have the right, under certain circumstances, to obtain the deletion of their Owner Data.

• Receive your Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without any problem. This determination is conditional upon the Data being processed by automated means and the processing being based on the User’s approval of, a contract to which the User is a party to or by pre-contractual obligations of the User.

• Register a complaint. Users have the right to lodge a complaint with their competent data protection authority.

Details on the right to refuse processing

Where Personal Data is processed for a public interest, in the exercise of an official authorisation in which the Owner is vested or for purposes of the legitimate interests pursued by the Owner, Users may refuse processing by providing a reason related to their particular situation to justify the refusal.

Users should be aware that if their Personal Data are processed for marketing purposes, they may refuse the processing at any time without providing any justification. Users can consult the respective sections of this document.

How to exercise these rights

Any requests to exercise the rights of Users can be directed to the Owner using the contact details provided on this document. These requests can be exercised free of charge and will be answered by the Owner as soon as possible and in all cases within less than one month.

Cookies Policy

This Site uses Cookies. To find out more and for a more detailed notice about cookies, the User can consult the Cookies Policy.

Additional information on Data collection and processing

Legal action

The Personal Data of Users may be used for legal purposes by the Owner concerned or in the steps leading to possible legal action arising from a misuse of this Service (this Site) or the related Services.

The User declares to be aware that the Owner may be obliged to disclose Personal Data upon request by government authorities.

Additional information on the User’s Personal Data

In addition to the information contained in this privacy policy, this Site may provide the User with additional and contextual information about specific services or the collection or processing of Personal Data upon request.

System logs and maintenance

For system and maintenance purposes, this Site and any third party services may collect files that store interaction with this Site (system logs) or use other Personal Data (such as IP address) for this purpose.

Information not contained in this policy

Further details about the collection or processing of Personal Data may be requested from the Owner at any time. Please see contact information at the beginning of this document.

How “Do Not Track Me” requests at the beginning of this document are handled.

This Site does not support “Do Not Track Me” requests.

To determine whether any of the third party services you use honour “Do Not Track Me” requests, please read their privacy policies.

Changes to this privacy policy

The Owner reserves the right to make changes to this privacy policy at any time by communicating to its Users on this page and possibly within this Service, this Site and/or – insofar as it is technically and legally feasible – by sending notice to Users via any contact information available to the Owner. It is highly recommended that this page be consulted several times in relation to the last modification described at the bottom.

If the changes affect the processing activities carried out on the basis of the User’s approval, the Owner will collect the new approval from the User, where required.

Definitions and legal references

Personal Data (or Data)

Any information that directly, indirectly or in connection with other information – including a personal identification number – allows the identification or identifiability of a natural person.

Usage Data

The information automatically collected through this Site (or third party services contracted on this Service), which may include: the IP addresses or domain names of the computers used by Users using this Site, the URI (Uniform Resource Identifier) addresses, the date and time of the request, the method used to submit the request to the server, the size of the file received in response, the numeric code indicating the status of the response server (positive result, error , etc. ), the country of origin, the characteristics of the browser and operating system used by the User, the various time details per visit (for example, the time spent on each page within the application) and the details about the path followed within the application, with particular reference to the sequence of pages visited and other parameters about the operating system of the User’s device and/or IT environment.

User

The person using this Site who, unless otherwise specified, coincides with the Data Subject.

Data Subject

The natural person to whom the Personal Data relate.

Data Processor (or Data Supervisor)

The natural or legal person, public administration, agency or other body that processes Personal Data on behalf of the Controller as described in this privacy policy.

Data Controller (or Owner)

The natural or legal person, public administration, agency or other body which alone or jointly with others determines the purposes and means of processing Personal Data, including security measures relating to the operation and use of this Service (this Site). The Data Controller, unless otherwise specified, is the Owner of this Service (this Site).

This Site (or this Application)

The means by which the User’s Personal Data is collected and processed.

Service

The service provided by this Site as described in the relative terms (if available) and on this site/application.

European Union (or EU)

Unless otherwise specified, all references in this document to the European Union include all current member states of the European Union and the European Economic Area.

Cookies

Small units of data stored on the User’s device.

Legal information

This privacy statement has been prepared based on the provisions of multiple pieces of legislation, including Arts. 13/14 of Regulation (EU) 2016/679 (GDPR – General Data Protection Regulation).

This privacy policy relates only to this Site.

Last updated: 1 July 2023

Privacy Policy

Privacy Policy

Contact

Site Map

Useful Links

Marque a sua consulta

Make your appointment