Bazzicus is committed to fully respecting the privacy of its website users at www.bazzicus.com and to ensuring the protection of the personal data entrusted to it. This Privacy Policy aims to inform, clearly and transparently, about how Bazzicus collects, uses, stores, and protects its Users' personal data, as well as about their rights and how to exercise them.

This Policy was drafted in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of April 27, 2016, commonly known as the General Data Protection Regulation ("GDPR"), with Law no. 58/2019, of August 8, which ensures its implementation in Portugal, and with other applicable legislation in force.

By accessing and using the Website, or by placing an order, the User declares to have read and understood this Policy and accepts its terms. Bazzicus urges a careful reading of this document, written in an accessible way so that anyone can easily understand it. The User also guarantees that the data provided is true, accurate, and complete, being responsible for any damages that may result from its inaccuracy or outdatedness.

Identification of the Controller

The controller of personal data collected through the Website is Bazzicus, with an address at Rua Eng. Adelino Amaro da Costa, nº 10, 4640-141, Baião, Portugal, and email contact bazzicus.info@gmail.com. Bazzicus determines the purposes and means of processing Users' personal data and acts in full compliance with the data protection legislation in force in Portugal and the European Union.

Personal Data Collected

"Personal data" means any information relating to an identified or identifiable natural person. Within the scope of its activity, Bazzicus may collect and process different categories of data, depending on the User's interaction with the Website.

When the User places an order, registers an account, or contacts Bazzicus, identification data — such as full name and preferred language — and contact data, namely billing and delivery address, email address, and telephone number, are collected. In the context of commercial transactions, purchase and billing data are also processed, including order history, tax identification number (when requested for billing), and information related to the payment method used, with sensitive financial data being processed in an encrypted manner by certified payment service providers.

During navigation on the Website, Bazzicus may automatically collect technical and behavioral data, such as IP address, browser type and version, device used, country of access, pages visited, and session duration. This data is collected through cookies and similar technologies, as described in Section 9 of this Policy. Finally, whenever the User subscribes to the newsletter or requests information, data related to their commercial preferences and communication history are also processed.

Purposes and Legal Bases of Processing

Bazzicus processes Users' personal data lawfully, fairly, and transparently, for specific and legitimate purposes, based on the legal grounds provided for in Article 6 of the GDPR.

Contract performance

The main purpose of the processing is the management of contractual relationships with the User, which includes the processing, shipping, and tracking of orders, the management of exchanges, returns, and complaints, as well as customer support and response to information requests. The processing carried out for these purposes has as its legal basis the necessity for the performance of a contract to which the User is a party, under Article 6(1)(b) of the GDPR.

Compliance with legal obligations

Bazzicus is subject to various legal obligations that imply the processing of personal data, namely with regard to issuing invoices, complying with tax and accounting obligations, and responding to requests from public authorities or courts when legally required. The legal basis for this processing is compliance with a legal obligation, under Article 6(1)(c) of the GDPR.

Legitimate interests of Bazzicus

Bazzicus may also process data based on its legitimate interests, under Article 6(1)(f) of the GDPR, namely for sending newsletters and direct marketing communications related to the products and preferences shown on the Website, for the continuous improvement of the website and user experience, for fraud prevention and ensuring platform security, and for managing contacts and responding to information requests. In these cases, Bazzicus has weighed the interests involved and considers that its legitimate interests do not override the fundamental rights and freedoms of Users.

Consent

For certain purposes, namely the processing of data for specific marketing communications or the use of non-essential cookies, Bazzicus requests the User's explicit consent, under Article 6(1)(a) of the GDPR. The User has the right to withdraw this consent at any time, without affecting the lawfulness of processing based on consent given before its withdrawal.

Data Retention Periods

Personal data will not be kept for longer than is necessary for the purposes for which they were collected. Bazzicus defines and applies maximum retention periods for each category of processed data, after which it proceeds with their deletion or anonymization. The following table summarizes the main applicable periods:

Sharing and Communication of Data with Third Parties

Bazzicus does not sell, transfer, or make Users' personal data available to third parties for their own commercial purposes. However, the normal operation of the business implies, in certain circumstances, sharing data with external entities.

Within the scope of providing its services, Bazzicus uses subprocessors who process personal data on its behalf and under its instructions, namely logistics and transport companies for order delivery, certified payment processors for financial transactions, hosting and e-commerce platforms, and web analytics and communication tools. All these providers are bound by data processing agreements that guarantee a level of protection equivalent to that required by the GDPR, in compliance with Article 28 of the same regulation.

Data may also be communicated to public authorities, courts, or regulatory bodies when legally required or determined by judicial decision. Apart from these cases, any sharing of data with third parties will always be dependent on the User's explicit consent.

Bazzicus also draws attention to the fact that, by publishing or authorizing the publication of content on the Website — such as comments or reviews — the User may be making their personal data accessible to third parties. Bazzicus is not responsible for the consequences of the User's voluntary data sharing. Whenever third-party data is made available on the Website, the User assumes responsibility for having obtained the prior and explicit consent of those persons.

Rights of Data Subjects

The GDPR and Law no. 58/2019 recognize a broad set of rights for personal data subjects, which Bazzicus undertakes to respect and facilitate their exercise.

The User has the right to access their personal data and to obtain information about the purposes, categories, and recipients of the processing, as well as about the applicable retention periods. They also have the right to request the rectification of inaccurate or incomplete data and, in certain circumstances, the erasure of their data — the so-called "right to be forgotten" — when they are no longer necessary for the purpose for which they were collected, when consent has been withdrawn, or when the processing is unlawful, unless there is a legal obligation to retain them.

The User may also request the restriction of the processing of their data in specific situations, exercise the right to data portability — receiving their data in a structured, commonly used, and machine-readable format, to transmit them to another controller — and object to processing carried out based on legitimate interests, including for direct marketing purposes. Finally, the User has the right not to be subject to decisions based solely on automated processing that produce significant legal effects concerning them.

To exercise any of these rights, the User can contact Bazzicus through the email address bazzicus.info@gmail.com or by postal mail to Rua Eng. Adelino Amaro da Costa, nº 10, 4640-141, Baião, Portugal, identifying themselves properly. Bazzicus will respond within a maximum period of 30 days, which may be extended by another 60 days in cases of special complexity, with prior notification to the User.

The User also has the right to lodge a complaint with the National Commission for Data Protection (CNPD), through the email address geral@cnpd.pt, telephone +351 213 928 400, or in writing to Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa. More information at www.cnpd.pt.

Data Security

Bazzicus implements appropriate technical and organizational measures to ensure the protection of personal data against unauthorized access, loss, destruction, alteration, or improper disclosure, in accordance with Article 32 of the GDPR. Adopted measures include SSL/TLS encryption of all communications on the Website, access control and secure authentication, continuous monitoring of security incidents, and regular training of employees on data protection.

In case of a personal data breach that may pose a risk to the rights and freedoms of Users, Bazzicus will notify the CNPD within 72 hours of becoming aware of the incident and, when necessary, will communicate directly to the affected Users.

Cookies and Similar Technologies

The www.bazzicus.com Website uses cookies and similar technologies to improve the browsing experience, analyze platform usage, and support Bazzicus's marketing actions. Cookies are small text files that are downloaded to the User's device when they visit the Website, allowing it to recognize the device on subsequent visits.

The cookies used can be of different types: essential cookies, necessary for the basic functioning of the Website and which cannot be disabled; functional cookies, which remember User preferences, such as language or region; analytical cookies, which allow measuring audiences and monitoring Website performance, and may include services such as Google Analytics; and marketing cookies, used to display relevant advertising and which are always subject to the User's prior consent.

The User can, at any time, manage their cookie preferences through the management panel available on the Website or through their browser settings. Disabling certain cookies may, however, affect some Website functionalities. For more detailed information, please consult our Cookie Policy, available on the Website.

International Data Transfers

Users' personal data is, as a rule, processed within the European Economic Area (EEA). When, due to operational necessity, transfers to third countries occur, Bazzicus will always ensure the existence of adequate safeguards, namely through an adequacy decision by the European Commission regarding the destination country, the execution of standard contractual clauses approved by the European Commission, or another mechanism provided for in the GDPR, including the explicit consent of the User after being duly informed of the associated risks.

Protection of Minors' Data

The Bazzicus Website is intended for users over 18 years of age. Bazzicus does not knowingly collect personal data from minors under 16 years of age without the consent of their respective parental responsibility holders. Should it become aware that it has inadvertently collected data from a minor without the legally required consent, it will proceed to immediately delete it. Any suspicion in this regard should be reported to bazzicus.info@gmail.com.

Changes to the Privacy Policy

Bazzicus reserves the right to change this Privacy Policy at any time, namely to reflect legal or regulatory changes or to improve the information provided. The version in force will always be the one published on the Website, with an indication of the respective update date. We recommend periodically consulting this document. In case of substantial changes, registered Users will be notified through the email address associated with their account or by a prominent notice on the Website. Last updated: March 2025.

Contact

For any questions related to the processing of your personal data, to exercise your rights, or to obtain additional clarifications about this Policy, the User can contact Bazzicus through the following means:
Email: bazzicus@bazzicus.com, address Rua Eng. Adelino Amaro da Costa, nº 10, 4640-141, Baião, Portugal, website: www.bazzicus.com