Data protection

Notice

This document is an English translation of the original German version provided for your convenience.

In the event of any discrepancy, inconsistency or translation error, the original German version shall prevail.

This does not affect any mandatory consumer protection rights or other mandatory legal provisions applicable under the relevant law.

1. Definitions

According to Article 4(1) of the General Data Protection Regulation (GDPR), personal data means any information relating to an identified or identifiable natural person, such as your name, address, or email address.

For the definitions of other terms used below, such as "Controller" or "Processor", please refer to Article 4 GDPR.

2. Controller

The controller responsible for processing personal data in connection with the provision of our contractual services is:

Landbande, LDA
Rua Doutor Augusto José da Cunha, No. 3C
1495-240 Algés
Portugal
E-Mail: info@landbande.com

(hereinafter referred to as "we", "us", or "our")

3. Categories of Personal Data Processed

When you purchase products from us, we process the following categories of personal data as part of providing our services:

Master data (e.g. name, address, contact details such as email address, telephone number, and website)
Contract data (e.g. contracts, correspondence, delivery notes)
Consultation data (e.g. contents of inquiries, consultation records, related documents)
Billing data (e.g. invoices, itemized statements, payment reminders)
Any other information you voluntarily provide to us within the scope of our contractual relationship.

4. Purpose of Processing

Unless otherwise stated, we process your personal data to fulfill our contractual obligations. The legal basis for this processing is Article 6(1)(b) GDPR.

In addition, we may process your personal data for the following purposes:

Contact by Email

If you contact us by email, we will process the information you provide (such as your email address, name, telephone number, and any additional information) in order to respond to your inquiry.

Where a contractual relationship exists, the legal basis is Article 6(1)(b) GDPR.
Where no contractual relationship exists, processing is based on our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR.

5. Disclosure to Third Parties and Categories of Recipients

We may disclose your personal data to third parties where necessary for the performance of our contractual obligations pursuant to Article 6(1)(b) GDPR. This may include, for example, financial institutions for payment processing.

Furthermore, we use external technical service providers acting as data processors within the meaning of Article 28 GDPR. These providers are carefully selected and monitored by us.

We may also disclose personal data where required by law, for example to competent authorities in connection with statutory reporting obligations. The legal basis for such disclosure is Article 6(1)(c) GDPR.

6. Your Rights

Under the GDPR, you have the following rights:

Right to withdraw consent (Article 7(3) GDPR): You may withdraw any consent you have given at any time with future effect. The withdrawal does not affect the lawfulness of processing carried out before the withdrawal.
Right of access (Article 15 GDPR): You have the right to obtain information about the personal data we process concerning you.
Right to rectification (Article 16 GDPR): You have the right to request the correction of inaccurate personal data or completion of incomplete personal data.
Right to erasure (Article 17 GDPR): You may request the deletion of your personal data unless processing is required to comply with a legal obligation, exercise the right of freedom of expression and information, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to restriction of processing (Article 18 GDPR): You may request restriction of processing if:
- you contest the accuracy of your personal data;
- the processing is unlawful but you oppose its deletion;
- we no longer require the data, but you need it for the establishment, exercise, or defense of legal claims.
Right to object (Article 21 GDPR): Where we process your personal data on the basis of our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to such processing on grounds relating to your particular situation. If your objection is justified, we will cease or adapt the processing unless we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms.
Right to data portability (Article 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller where technically feasible.
Right to lodge a complaint (Article 77 GDPR): You have the right to lodge a complaint with a competent supervisory authority. You may generally contact the supervisory authority in your habitual place of residence, place of work, or place of the alleged infringement.

7. Retention Period

We retain personal data only for as long as necessary to perform and administer the contractual relationship or to comply with legal obligations.

Personal data will be deleted once it is no longer required for the performance or administration of the contractual relationship, provided that no legitimate interests or statutory retention obligations require further storage. Such statutory retention obligations may arise, in particular, under Portuguese law, including Article 123.º of the Código do Imposto sobre o Rendimento das Pessoas Coletivas (CIRC), Article 52.º of the Código do Imposto sobre o Valor Acrescentado (CIVA), Article 5(1)(e) GDPR, and Article 21 of Lei n.º 58/2019 of 8 August 2019.

In general, personal data is retained for five to ten years after the end of the contractual relationship, depending on the applicable statutory retention period.

8. Website, Cookies and Other Services

Our website and online shop are provided via the Wix platform. In this context, technical usage data such as IP address, browser, device, access and log data may be processed.

For certain functions of our website, we use additional services, in particular for forms, customer communication, bookings, newsletters and comparable functions.

We use Usercentrics for Wix to manage cookies and consent. Non-essential technologies are only used after you have given your consent, where such consent is required by law. You can change your choices at any time via the cookie settings on our website. There you will also find further information about the services currently in use.