Privacy Policy – in compliance with the European Union General Data Protection Regulation (GDPR)

The protection of your personal data is a key priority for Maison Ohr Design, Lda . It is our duty to ensure exemplary processing of the information you entrust to us, with the same rigor and care that we bring to the manufacture of our products. We act in strict compliance with the provisions of European and national law in force, thus guaranteeing respect for your fundamental rights and freedoms.
The purpose of this Privacy Policy is to inform you, in a clear and transparent manner, about how we collect, use, store, share and protect your personal data when you use the website www.maisonohr.com.

1. Data controller

The data controller is Maison Ohr Design, Lda, a limited liability company incorporated under Portuguese law, registered under number 518325326, with its registered office in Cascais, Portugal.
For any request for additional information, you can contact us at the following email address: contact@maisonohr.com .

2. Categories of personal data collected

We only collect data that is strictly necessary for the purposes pursued, including:
a) Identification and contact data: surname, first name, email address, telephone number, postal address;
b) Payment data: payment information is processed by certified service providers; no banking data is stored on our servers;
c) Data relating to the customer account: login details (username and password);
d) Browsing data: IP address, type of device used, browser type and version, pages viewed, session duration, approximate location data, depending on the settings of the device used;
e) Other personal data: communications sent via our forms,
correspondence (mail or email), preferences and comments posted on our site.

3. Purposes of processing

The data is processed for the following purposes:
- Processing, management and shipping of orders placed via our website;
- Creation, management and monitoring of your customer account;
- Customer service and support;
- Sending commercial and promotional information (newsletter, personalized offers) subject to your explicit consent;
- Statistical analysis and optimization of navigation in order to continuously improve our services and user experience;
- Compliance with legal obligations regarding invoicing, accounting, taxation and fraud prevention.

4. Legal bases for processing

The processing of your personal data is based on the following legal bases:
- Your free, informed and explicit consent, in particular for marketing communications;
- The execution of a contract or pre-contractual measures;
- Compliance with legal obligations incumbent on Maison Ohr ;
- The legitimate interest of Maison Ohr , in particular in the continuous improvement of its services and the prevention of offenses.

5. Sharing and transmission of data

In order to ensure proper processing, Maison Ohr may transmit your personal data to trusted third parties, such as:
a) Logistics providers: carriers and financial institutions mandated to carry out our services;
b) Technology providers;
c) Marketing or analytics partners, only with express consent;
d) Administrative, fiscal or judicial authorities, when required by law or in the context of the prevention or detection of fraud.
We ensure that all our partners and subcontractors are contractually committed to guaranteeing a high level of security and confidentiality.

6. International data transfers

It may happen that certain data is transferred to third countries or international organizations located outside the European Economic Area (EEA). In this case, Maison Ohr undertakes to scrupulously comply with Articles 44 to 50 of the GDPR. Transfers will only be made if:

- An adequacy decision from the European Commission attests to a sufficient level of protection (Article 45);
- Or if appropriate safeguards are put in place in accordance with Article 46 of the GDPR.

7. Your rights

In accordance with the GDPR, you have the following rights, which we undertake to respect:
- Right of access to your data;
- Right to rectify inaccurate or incomplete data;
- Right to erasure (“right to be forgotten”), subject to legal conditions;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing, in particular for commercial prospecting purposes;
- Right to withdraw consent at any time when processing is based on consent.
You can exercise your rights in writing at the following address: contact@maisonohr.com.

8. Data security

Maison Ohr implements appropriate technical and organizational measures to protect your data against loss, destruction, unauthorized access or disclosure, including:
- Use of secure connections (HTTPS);
- Password encryption;
- Regular security audits;
- Strict confidentiality agreements signed by our employees;
- Destruction of data at the end of the retention period or upon request;
- Strict policies limiting access to sensitive information.
We strive daily to provide a secure environment for all our customers.

9. Retention period

Personal data is kept for a limited period, proportional to the purposes of the processing:
a) Active customer account: retention of data as long as the account is active;

b) Orders: retention for up to 10 years to comply with accounting and tax obligations;
c) Marketing: retention until withdrawal of consent or expiration of the inactivity period;
d) Cookies: maximum duration of 13 months, depending on their nature (see our Cookies Policy for more information).

10. Cookies

Cookies are files collected and stored when you browse our site, in order to personalize your user experience. We use cookies to:
- Ensure the proper functioning of the site (necessary cookies);
- Personalize content and advertisements (optional cookies);
- Measure the audience (analytical cookies).
You can manage your preferences at any time via our cookie banner or your browser settings. To learn more, please see our Cookie Policy.

11. Changes to the Privacy Policy

Maison Ohr reserves the right to modify this Privacy Policy at any time in order to adapt it to legislative or technical developments. Any modifications will be published on this page with a mention of the update date.

12. Complaints and supervisory authority

If you believe that your rights are not being respected or if you have a complaint regarding the processing of your personal data, you can file a complaint with the National Data Protection Commission (CNPD) via the website: www.cnpd.pt.