PRIVACY POLICY
Your privacy, along with the confidentiality, availability, and integrity of your personal data, is a priority for us. We are fully committed to processing your data in a transparent and secure manner.
I. Who is responsible for processing your personal data?
The entity responsible for processing your personal data is WNP RETAIL LDA, located at Rua de Santos Pousada, n.º 199, 4000-485 – registered at the Commercial Registry Office of Porto under NIPC 517 248 751.
II. What personal data do we process, for how long, and for what purposes?
We will only process your personal data to the extent that it is essential to ensure the proper functioning of this website, ensuring that you can use all its features and that we can provide our services, in accordance with the General Data Protection Regulation (“GDPR”), Law No. 58/2019 of August 8, 2019 (the law that ensures the implementation of the GDPR in the national legal system), Directive 2002/58/EC of July 12, 2002 (the directive on the processing of personal data and the protection of privacy in the electronic communications sector), Law No. 41/2004 of August 18 (which transposes the aforementioned Directive 2002/58/EC into national law), and other applicable legislation on privacy and personal data protection.
Your personal data will be deleted or anonymized once the purposes that justified its processing have ceased, without prejudice to situations where the law or a legitimate reason justifies or requires its retention for a longer period.
Below, we provide you with all the information regarding the processing of your personal data, including the purposes, legal bases, categories of personal data involved, and applicable retention periods. We will also provide information regarding your rights in relation to personal data protection, as well as the technical and organizational measures we adopt to guarantee your privacy.
- Creation and Management of an Online Account
If you wish to create an online account on our website, we will process certain categories of personal data – identification data, contact data, and address data – for that purpose. Within your personal area, you will be able to view and correct the personal data provided, add new personal data, manage your marketing preferences, subscribe to new services, and view your latest orders.
We will process your personal data strictly in accordance with the contract constituted by these Terms and Conditions, and only as long as you maintain an active online account on our website. If you wish to have your account deleted, you must request it by sending an email to wishandpick@naver.com (see details in Section IV of this Privacy Policy). Notwithstanding the above, if you do not log in to our website for two consecutive years, we will delete your online account at the end of that second year (deletion due to inactivity).
- Purchasing Articles on wmart-mall.com
When you make purchases on this website, in accordance with the respective Service Policy, your personal data will be processed so that we can:
- (a) present you with the range of available products;
- (b) issue invoices for your purchases;
- (c) deliver your purchases to the addresses you indicate;
- (d) send you service communications (e.g., order confirmations, information regarding out-of-stock items or product substitutions, as well as website changes);
- (e) ensure our after-sales service (returns and/or exchanges of articles);
- (f) ensure the security of our website and transactions, through the collection of your Internet Protocol (IP) address as part of our fraud management process.
Payment data will be collected directly by the financial institutions involved, and these institutions are responsible for processing that personal data.
Thus, your personal data will be processed to comply with legal obligations, execute contracts, and pursue legitimate interests.
With the exception of billing data, which we are required to keep for the legally mandated period of 10 years, all other information will only be processed as long as your online account remains active, as mentioned in Section 1.
- Informative Communications and Direct Marketing
Should you provide your consent when creating your online account, we will also process your personal data for the purposes of sending you informative and direct marketing communications, either generic or personalized (which may be based on your purchase history and customer profile), via email and/or SMS.
If you wish to stop receiving these communications, you can do so through your online account (subscription management) or by clicking “unsubscribe”/“STOP SMS” included in each communication. Furthermore, if your online account is deleted, we will also cease sending these communications.
- Suggestions, Compliments, Complaints, and Requests for Information
If you need to contact us, request information, or submit complaints, suggestions, or compliments, you may do so by using the form provided on this website.
In order to legitimately manage and respond to your requests, we will process certain categories of personal data – including identification data, contact data, and order data – for the period necessary to properly handle your interactions.
Additionally, in compliance with DL No. 156/2005 of September 15, a digital complaint book is available on this website, and the information processed therein may be forwarded to the Competent Regulatory Entity.
III. To whom may we disclose your personal data?
Your personal data may be disclosed to partner companies whose involvement is essential for the proper functioning of our website and the provision of our services, such as IT, logistics, and communication companies. Whenever these companies process your personal data on our behalf and for our account, we ensure the same level of security and privacy in such processing.
You may also be required to disclose some of your personal data to the relevant Authorities, as imposed by law and/or judicial order.
IV. What are your rights regarding personal data protection and how can you exercise them?
As a data subject, you may revoke any consent provided at any time and exercise your rights regarding data protection – including the right to access, rectify, delete, restrict processing, data portability, and object – by sending an email to wishandpick@naver.com.
Please note that revoking any consent does not invalidate the processing of personal data carried out prior to the withdrawal.
It is important that you use the email address provided above and not another means of contact when exercising your data protection rights.
We will carefully review your requests, assess their legitimacy and relevance, and are committed to responding within the legally required timeframe.
Should you feel that your rights have not been respected, you may file a complaint with the National Data Protection Commission (CNPD):
- Address: Av. D. Carlos I, 134 – 1.º, 1200-651 – Lisboa
- Phone: +351 213 928 400
- Fax: +351 213 976 832
- Email: geral@cnpd.pt
V. How can you contact our Data Protection Officer (DPO)?
If needed, you can contact our DPO by sending an email to wishandpick@naver.com.
VI. How do we protect your personal data?
We apply appropriate technical and organizational measures to protect your personal data, in accordance with market best practices. These measures include, but are not limited to:
- Secure storage and transmission of your personal data;
- Protection of our information systems through controls that prevent unauthorized access to your personal data;
- Implementation of mechanisms that safeguard the integrity and quality of your personal data;
- Continuous monitoring of our information systems to prevent, detect, and counteract any misuse of your personal data;
- Redundancy of equipment involved in the storage, processing, and communication of your personal data to prevent loss of availability;
- Periodic analysis to detect vulnerabilities or security flaws in our information systems.
This Privacy Policy may be revised and updated at any time, and you will always be informed of any changes on this website.
