1. Data Controller

Showrooms Wonderstores is a service of Wonderstores, headquartered in Portugal.

Address: Rua Oscar da Silva, 2101, 4450-000 Leça da Palmeira, Portugal
Email: services@wonderstores.pt
Phone: +351 96 045 40 51

2. Data We Collect

Through our website, particularly the contact form, we collect the following data:

• Name / Company
• Email address
• Message content (may contain personal data that the user chooses to share)
• IP address (automatically collected for security purposes)
• Date and time of submission

3. Purposes of Processing

The collected data is exclusively intended for:

• Responding to messages and information requests sent through the contact form
• Providing customer support and clarifying questions about our services
• Improving the quality of our service
• Ensuring website security (through IP logging)

Note: Data provided through the form is NOT used for direct marketing, newsletters, or any purpose other than responding to the user's request.

4. Legal Basis

The processing of your data has the following legal basis:

• Consent of the data subject: By completing and submitting the contact form, the user expresses their willingness to be contacted and provides their data for this specific purpose (Article 6(1)(a) of GDPR).
• Legitimate interest: The recording of IP addresses for website security constitutes a legitimate interest of the data controller (Article 6(1)(f) of GDPR).

5. Data Sharing with Third Parties

Showrooms Wonderstores does not sell, rent, or share your personal data with third parties for marketing purposes.

However, we use third-party services that process data on our behalf (subcontractors):

• Plesk / Hosting Server: Server logs (including IP addresses) are processed by the hosting infrastructure. These logs are kept for 30 days and automatically anonymized.

Contact forms are processed internally through Wonderstores' email infrastructure.

6. Data Retention

• Contact forms: Data is retained for the period necessary to respond to the message and provide the requested support, after which it is deleted, unless it is necessary to keep it to comply with legal obligations.
• Server logs: IP addresses are kept for 30 days, after which they are automatically anonymized.

7. Your Rights

Under the GDPR, the user has the right to:

• Access their personal data
• Rectify inaccurate or incomplete data
• Request erasure of their data ("right to be forgotten")
• Restrict the processing of their data
• Object to the processing of their data
• Request data portability
• Withdraw consent at any time (without affecting the lawfulness of processing carried out up to that date)

To exercise these rights, contact us at services@wonderstores.pt.

8. Data Security

We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. Our website uses HTTPS (SSL) to encrypt communication between your browser and our servers.

9. Changes to This Policy

Showrooms Wonderstores reserves the right to change this Privacy Policy at any time. Changes take effect immediately upon publication on the website. We recommend that you check this page regularly.

10. Contact and Complaints

If you have questions about this Privacy Policy or about the processing of your data, contact us at:

Email: services@wonderstores.pt

If you believe your rights have not been respected, you have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisbon, Portugal
www.cnpd.pt