Privacy Policy – GDPR Compliance

Protecting your personal data is a top priority for Maison Ohr Design, Lda. We are committed to handling the information you share with us with the same care and rigor as we apply to our products. We operate in strict compliance with applicable European and national laws, ensuring your fundamental rights and freedoms are respected. This Privacy Policy explains clearly and transparently how we collect, use, store, share, and protect your personal data when you use our website www.maisonohr.com.

1. Data Controller

The data controller is Maison Ohr Design, Lda, a Portuguese limited liability company, registered under number 518325326, with its headquarters in Cascais, Portugal.
For any further information, you can contact us at: contact@maisonohr.com.

2. Categories of Personal Data Collected

We only collect the personal data necessary for the purposes listed below:

a) Identification & Contact Data: Name, email address, phone number, postal address
b) Payment Data: Payment information is processed by certified providers; no banking data is stored on our servers
c) Customer Account Data: Login credentials (username and password)
d) Browsing Data: IP address, device type, browser type/version, pages visited, session duration, approximate location based on device settings
e) Other Personal Data: Communications through forms, correspondence (mail or email), preferences, and comments posted on our site

3. Purpose of Processing

Your personal data is processed for the following purposes:

• Processing, managing, and shipping orders placed on our website

• Creating, managing, and monitoring your customer account

• Customer service and support

• Sending commercial and promotional information (newsletter, personalized offers) with your explicit consent

• Statistical analysis and navigation optimization to continuously improve our services and user experience

• Compliance with legal obligations in accounting, taxation, and fraud prevention

4. Legal Basis for Processing

Processing your personal data relies on the following legal bases:

• Your free, informed, and explicit consent (especially for marketing communications)

• Execution of a contract or pre-contractual measures

• Compliance with legal obligations applicable to Maison Ohr

• Legitimate interests of Maison Ohr, such as improving services and preventing offenses

5. Sharing and Transfer of Data

To ensure proper handling, Maison Ohr may share personal data with trusted third parties such as:

a) Logistics Providers: Carriers and financial institutions mandated to execute our services
b) Technology Providers
c) Marketing or Analytics Partners: Only with explicit consent
d) Regulatory, tax, or judicial authorities when required by law or to prevent/detect fraud

All partners and processors are contractually obliged to maintain high levels of security and confidentiality.

6. International Data Transfers

Some data may be transferred to countries outside the European Economic Area (EEA). Maison Ohr ensures these transfers comply with GDPR Articles 44–50. Transfers occur only if:

• A European Commission adequacy decision ensures sufficient protection (Article 45)

• Or appropriate safeguards are in place (Article 46 GDPR)

7. Your Rights

Under GDPR, you have the following rights:

• Access your data

• Rectify inaccurate or incomplete data

• Erasure (“right to be forgotten”), subject to legal conditions

• Restrict processing

• Data portability

• Object to processing, including for marketing purposes

• Withdraw consent at any time when processing relies on it

You can exercise your rights in writing at: contact@maisonohr.com

8. Data Security

Maison Ohr implements appropriate technical and organizational measures to protect your data against loss, destruction, unauthorized access, or disclosure, including:

• Secure connections (HTTPS)

• Password encryption

• Regular security audits

• Strict confidentiality agreements for staff

• Data deletion at the end of retention periods or upon request

• Strict access control policies for sensitive information

We strive to provide a secure environment for all our customers daily.

9. Data Retention

Personal data is retained for a limited period, proportional to the purpose of processing:

a) Active Customer Account: As long as the account is active
b) Orders: Up to 10 years for accounting and tax compliance
c) Marketing: Until consent is withdrawn or inactivity expires
d) Cookies: Maximum of 13 months depending on type (see our Cookie Policy for details)

10. Cookies

Cookies are collected and stored during site navigation to personalize your experience. We use cookies to:

• Ensure proper site functionality (necessary cookies)

• Personalize content and ads (optional cookies)

• Measure audience (analytics cookies)

You can manage preferences anytime via the cookie banner or browser settings. See our Cookie Policy for more information.

11. Changes to Privacy Policy

Maison Ohr reserves the right to modify this Privacy Policy at any time to adapt to legislative or technical changes. Any updates will be published on this page with the updated date.

12. Complaints and Supervisory Authority

If you believe your rights are not respected or have a complaint regarding data processing, you can submit a complaint to the Portuguese Data Protection Authority (CNPD) via: www.cnpd.pt