Privacy Policy

This Privacy Policy informs visitors and customers of the website lisboncocaineonline.com (hereinafter referred to as “the website,” “we,” or “our”) about the nature, scope, and purpose of the collection, processing, and use of personal data.
We take the protection of your personal information very seriously and treat it confidentially, in accordance with applicable data protection laws (particularly the GDPR).

Data Controller

The data controller of this website is:
[Name / Company]
[Address]
[Email]
(Optional: Phone Number)

Note: Please insert your full contact details here.

1. Data We Collect

1.1. Data Provided by You

Order information (name, shipping address, billing address)
Contact details (email address, phone number)
Payment information (transaction-related data – see Payments section)
Data submitted via contact forms or support requests
Customer account data, if you create an account (username, password – encrypted)

1.2. Data Collected Automatically

IP address (anonymized/shortened whenever possible)
Date and time of the request
Browser type and version, operating system
Referrer (previously visited page)
Pages visited on our site (server log files)
Cookies and similar technologies (see Cookies section)

2. Purposes and Legal Bases of Processing

We process your data only when there is a legal basis and for the following purposes:

Contract performance (Art. 6(1)(b) GDPR): order processing, shipping, invoicing, customer account management.
Consent (Art. 6(1)(a) GDPR): using your data for specific purposes (e.g., marketing newsletters) only with your consent.
Legal obligations (Art. 6(1)(c) GDPR): data retention required by tax and commercial laws.
Legitimate interests (Art. 6(1)(f) GDPR): service improvement, fraud prevention, IT security, statistical analysis of user behavior.

3. Cookies and Tracking Technologies

We use cookies and similar technologies to facilitate and analyze the use of our website.
Cookies are small text files stored on your device.

Types of cookies we use:

Necessary cookies: for basic functions (session management, shopping cart).
Functional cookies: store preferences (language, forms).
Statistical/analytical cookies: anonymous evaluation of website usage.

You may block or delete cookies via your browser settings, but some features of the website may be limited.

4. Use of External Service Providers

To deliver our services and optimize the website, we use external service providers (hosting, payment processing, shipping, analytics).
These providers receive only the data necessary for their tasks and act as data processors (Art. 28 GDPR).

Examples (to customize):

Hosting provider: stores the website and order data.
Payment providers: process payments (credit card, cryptocurrencies). Sensitive data (like card numbers) are handled directly by the provider.
Shipping carriers: receive name and address for delivery purposes.

5. Newsletter and Direct Marketing

If you have consented to receive our newsletter, we will use your email address to send you information about our products and offers.
You may withdraw your consent at any time (e.g., via the unsubscribe link in the newsletter or by emailing [email address]).

6. Data Disclosure

Your data will not be sold to third parties. It will only be shared:

with service providers necessary for order fulfillment (payment, shipping),
with authorities when required by law,
when necessary to protect our rights or prevent abuse.

For data transfers outside the EU/EEA, we ensure adequate protection (standard contractual clauses, adequacy decisions).

7. Security

We use technical and organizational measures (e.g., TLS/SSL encryption, access controls) to protect your data.
However, data transmission over the internet always carries risks, and absolute security cannot be guaranteed.

8. Data Retention

Your personal data is stored only for as long as necessary for the intended purposes or as required by law (e.g., tax obligations for up to 10 years).
After this period, the data will be deleted or anonymized.

9. Your Rights (Under GDPR)

Under the GDPR, you have the following rights:

Right of access (Art. 15 GDPR)
Right to rectification (Art. 16 GDPR)
Right to erasure (“right to be forgotten,” Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object (Art. 21 GDPR)
Right to withdraw consent at any time (Art. 7(3) GDPR)
Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at [email address].
We will process your request as soon as possible.

10. Minors

Our services are not directed toward minors.
Individuals under 18 years old should not provide personal data without parental consent.

11. Changes to This Privacy Policy

We reserve the right to modify this Privacy Policy at any time.
The latest version will always be available on our website. In case of significant changes, we will notify users appropriately.