Privacy Policy

1.1 – Introduction

Navigation in the website from ALGICEL and registration as a customer in the store online presupposes understanding and acceptance of this Privacy and Data Protection Policy.

ALGICEL maintains a constant concern for the protection of personal data privacy and preventive action regarding data security. website, of the other applications and platforms it owns, as well as the protection of the data of its customers and visitors.

To reinforce the confidentiality of personal data, new data protection measures have been implemented, both to verify the legitimacy of the use of processed personal data and to ensure compliance with the rights granted to data subjects. In this context, and through specialized customer support channels, the company aims to promote clearer and more objective communication regarding the purposes underlying the processing of personal data and the transparency of data processing operations.

Therefore, the information contained in this text is intended to convey, in a clear and unequivocal manner, the content of the privacy policy and protection of personal data that will be processed under the terms set out in the General Data Protection Regulation in force (hereinafter GDPR) and delimited by the content of the commercial relationship to be established between the data subject and ALGICEL.

1.2 – Personal data collected

In general terms, personal data is collected in three situations directly resulting from ALGICEL's activity:

2.2.1. Purchase registration: order creation and purposes of personal data processing

To make a purchase, an area is provided where the customer must enter the necessary information to identify themselves as a customer. Each purchase will be subject to the provision of additional personal information, which is essential for order processing and delivery.

Mandatory fields in the forms available for those registration phases are marked with an asterisk (*).

ALGICEL is committed to protecting customer data and this will never be made available to third parties without the knowledge or consent of the holder, as legally required.

When processing a customer's order, certain personal data—such as address and zip code—may also be disclosed to third parties for the sole purpose of preventing and detecting fraud, always following a request to do so from the competent authorities. Such entities are required to implement data protection and security measures.

Additionally, when you make a purchase on website, the customer will also be asked to provide data relating to the delivery address and payment details in order to ensure the greatest possible efficiency and compliance with delivery deadlines.

For the purposes of operating other functionalities made available by ALGICEL at the customer's request, additional personal data may be requested and will be processed under the terms specifically provided for in the terms and conditions of use thereof.

The data provided will be retained for the strictly necessary period, which typically corresponds to the lifetime of the customer's account. Therefore, when the customer deactivates their account, their personal data will be permanently deleted, except for data necessary to comply with legal obligations, specifically, but not limited to, billing and accounting records. This data will be archived in a dedicated, anonymized database created for this purpose, and only for the period absolutely necessary for such purposes. Data related to transactions carried out during this period using the PayPal and Credit Card payment methods will also be retained in this same anonymized database for periods of six and twelve months, respectively. This registration is performed for the sole purpose of processing any refunds that may be due to the customer during these periods, which begin from the date of issue of the respective invoices.

Notice: If, after the aforementioned deadlines, the customer is entitled to a refund of any amount, and this occurs after the account has been deactivated, the customer must contact ALGICEL and provide new bank details by presenting a bank statement. To this end, the customer will undergo an identity verification process. Only bank statements showing the customer as the sole or primary account holder will be accepted.

Any functionality or platform owned by ALGICEL and intended for use by the customer will be subject to acceptance of the respective terms and conditions of use, as well as, when specifically provided for, the respective privacy and data protection policy. All matters not specifically covered by these texts will be regulated, with the necessary adaptations, by the terms defined in this text.

What is the collected data used for?

Customer data is processed to carry out actions such as order processing, notifying the customer of any changes made to the website's functionalities, website, conducting research and evaluating interactions for statistical purposes.

Periodically, customers may also receive information about products and services, campaigns, promotions, and special offers via email. If they do not wish to be contacted for these purposes, they may unsubscribe from the newsletter by opting out in the appropriate fields, available in the Manage Permissions tab of their account details, or by clicking the link provided in the newsletter text for this purpose.

1.2.4. Cookies and other Marketing tools

1.2.4.1. Classification and description of Cookies used by ALGICEL

As for the type:

Essentials – allow navigation on the website and the use of its features. Without these cookies, requests cannot be processed.

Non-Essential, Functionality or Performance – collect information about how the user uses the website with a view to improving its functionality. They allow us to determine which areas are of greatest interest to the customer, measuring the effectiveness of promotional campaigns. This allows ALGICEL to understand which products and promotions best suit the customer's interests and needs, which it will do through: the preparation of statistics based on the customer's non-individualized behavior and the resulting use of the website; measuring the effectiveness of advertising campaigns; the consequent introduction of improvements in navigation, etc., with the sole purpose of improving the performance and response effectiveness of the website. For this reason, the cookies performance information provided by authorized third parties is used only for the purposes indicated herein.

Analytics – used anonymously for statistical purposes and to improve the functioning of the website, without any collection of personal information. They allow you to highlight items that may be of interest to customers or visitors, monitor the performance of the website, determine the most effective method of linking pages, or even why some pages are receiving error messages.

Regarding validity:

Permanent – stored on the client’s computer or equipment, between sessions browser, for the purpose of maintaining settings or preferences and improving the usability of the website on the next visit. Some of these cookies are provided by authorized third parties, however, with the limitation of the following purposes: presentation of campaigns and products – considered to be of interest to the customer; retargeting – advertising of ALGICEL products in websites from partners or social networks, without storing personal data or user profiles, thus not presupposing the transmission of any personal data to third parties due to the fact that advertising is completely anonymous.

Session – limited to each session initiated by the user, therefore they expire whenever a session is closed in the browser. Their purpose may be to indicate products previously placed in the shopping cart, identify problems, and ensure a better browsing experience. Some cookies session can also constitute a guarantee of increased security.

- Cookies used by ALGICEL

They remain in the internet browser used only for the duration of the session, and are deactivated if a period of approximately 20 seconds of user inactivity is detected. Regardless of the session duration, the user can always deactivate these cookies by managing the respective browser settings.

Google Analytics

https://developers.google.com/analytics/devguides/collection/analyticsjs/cookie-usage?hl=pt-pt

Name	Purpose	Validity	Type
_ga	distinguish users	determined by the provider	HTTP
_gat	speed up the percentage of orders	determined by the provider	HTTP
__utma	distinguish users and sessions. The cookie is created when the JavaScript library is executed and there is no cookie __utma. It is updated each time data is sent to Google Analytics.	determined by the provider	HTTP
__utmb	determine new sessions/visits. The cookie is created when the javascript library is executed and there is no cookie __utmb. It is updated each time data is sent to Google Analytics.	determined by the provider	HTTP
__utmz	store the traffic source or campaign through which the user arrived at your site. It's created when the JavaScript library runs and updated whenever data is sent to Google Analytics. It is updated each time data is sent to Google Analytics.	determined by the provider	HTTP

Youtube

Name	Purpose	Validity	Type
SID LOGIN_INFO PREF SSID HSID VISITOR_INFO1_LIVE	store user preferences and some contain enough information to be tracked	determined by the provider	HTTP

AddThis

https://www.addthis.com/privacy/terms-of-service/pt/

Name	Purpose	Validity	Type
Uid	identify the automatically generated and uniquely assigned user ID	determined by the provider	HTTP
di/dt	to manage the expiration of others cookies	determined by the provider	HTTP
Bt	model user interests	determined by the provider	HTTP
Uvc	measure the number of times the AddThis.com service is used	determined by the provider	HTTP
ssc psc uvc	record what users share and their social activity	determined by the provider	HTTP
Loc	geolocate people who share information	determined by the provider	HTTP
__atuvc __atuvs	created and read by AddThis, website javascript for sharing on social media	determined by the provider	HTTP

Facebook

https://www.facebook.com/about/privacy

Name	Purpose	Validity	Type
_fbp	display advertising on Facebook or on digital platforms that use Facebook Advertising	determined by the provider	HTTP

1.2.4.2. Activate and deactivate Cookies and similar technologies

Newsletters and other communications may, for statistical purposes, contain information that allows us to know whether they are opened and to verify clicks through links within them. However, the customer is always granted the option to refuse to receive the newsletter or email communication at any time by using an option specifically provided for this purpose and mentioned therein.

Additionally, in the Help menu of the browser used, the customer can manage the use of cookies and other similar technologies. As indicated in the message visible on this page, access to the ALGICEL online store requires the use of cookies, deactivating them may affect navigation on the website.

If desired and when applicable, the customer may request information regarding the retention periods for information obtained through cookies whose use is the responsibility of ALGICEL.

For more information, we suggest consulting the information available in each of the browsers or consulting articles with specific information on the topic (Ex. https://www.allaboutcookies.org/).

1.2.4.3. Individualized Communications Promoting Products or Services

Depending on whether the customer opts for the standard experience or custom experience, ALGICEL may or may not send emails, in the form of notifications or newsletters, as part of general or targeted promotional campaigns. In both cases, such communications are only issued after confirmation that the customer has given their express and unequivocal consent and that they have been informed of their right to cancel the permissions granted for such purposes at any time. The customer may, at any time, check which permissions are granted within the scope of personal data processing in the “Manage Permissions” tab of their Customer Area.

The processing of personal data carried out within the scope of individualized communications is done in strict compliance with the GDPR, both by ALGICEL employees and by any third parties to whom said data is transmitted for the purpose of carrying out the services necessary to carry out promotional campaigns.

1.2.4.4. Redirection

Some hyperlinks on this website redirect the customer to external websites that are ALGICEL partners. By clicking on these hyperlinks, the visitor will be leaving the ALGICEL website. As it is not possible to exercise any control over these websites, ALGICEL shall not be responsible for any content made available on them. Browsing and using any platform owned by ALGICEL or any of its partners constitutes acceptance of the terms of use thereof under the terms specifically determined for this purpose.

1.3 – Security, Legality, Loyalty and Transparency

ALGICEL uses one of the most secure online ordering systems available and is constantly improving its software to ensure the most efficient processing of its customers' data and their trust. A server certificate, also known as a digital certificate, ensures ALGICEL's identity, as does SSL (Secure Sockets Layer) encryption of transmitted data.

All personal data of ALGICEL customers will be processed lawfully, fairly, and transparently in relation to the data subject. Therefore, the data subject may always contact ALGICEL to clarify any questions regarding this topic, as set forth in item 2.5.1 below.

1.4 – Access and Purpose Limitation

ALGICEL is committed to using the personal data of its customers and visitors for the purposes strictly necessary for the performance of its business, subject to limitations arising from the scope of said business or the extent of the consent expressly granted by the respective data subject. This also means that the data will not be transmitted to any third party without the knowledge and/or authorization of the data subject, in cases where ALGICEL is legally obligated to do so.

In this sense, ALGICEL also ensures that access to such data by its employees is only made to the exact extent necessary to carry out the action in question, and that they are identified and tracked in accordance with the functions and tasks assigned to them within the scope of the contractual relationship that unites them.

All personal data processed by ALGICEL, whether directly provided voluntarily by the data subject or collected by ALGICEL for the purposes of executing the contract binding the data subject or for the operation of any functionality made available at the customer's request, will be permanently deleted as soon as it is confirmed that it is no longer necessary. For this reason, the retention of customers' personal data will follow the principles of data minimization and storage limitation, as only data strictly necessary to fulfill ALGICEL's legal and contractual obligations will be collected, and these data will be maintained and archived in a dedicated database only for the period absolutely necessary for such purposes.

1.5 – Rights of Personal Data Holders

1.5.1. Right to Information and Access to Personal Data

At any time, the customer may request information about the personal data stored, whether regarding the category of personal data in question, the source and recipient(s) thereof, the duration of the retention period and underlying purposes, or regarding the identification of the person responsible for processing the data, the data protection officer and their respective contacts.

1.5.2. Right to Rectification and Right to Erasure of Personal Data

If you wish to exercise your right to data rectification, the customer must send the respective request, identifying the data to be modified and the new statement thereof, via email sent to [email protected] or via registered letter sent to the person responsible for data processing: Algicel – Biotecnologia e Investigação, S.A., Rua Professor Luciano da Mota Vieira, No. 28 9500-238 Ponta Delgada, Portugal. The same procedure must be followed if the customer wishes to exercise their right to erasure of personal data. In both cases, the customer will receive confirmation, through the same channel used, that their request has been fulfilled as requested.

1.5.3. Right to Limit Processing, Object and Withdraw Prior Consent

In order to reinforce the principle of transparency in the processing of personal data and communications with the customer, ALGICEL allows the customer to modify the data processing permissions granted for each of the purposes indicated at any time.

1.6 Subsidiary Application

This text regulates all matters relating to the privacy and protection of personal data processed within the scope of the use of applications and other functionalities made available by ALGICEL, whether they are accessible via a hyperlink on the website or on any other platform owned by ALGICEL, and is directly and subsidiarily applicable to all situations that are not specifically regulated.

1.7 Changes to the Privacy Policy and Contacts

1.7.1. Any changes made to this Privacy and Data Protection Policy will be published on the ALGICEL website, with all versions prior to this one being made available upon express request by the customer.

1.7.2. Within the meaning provided by the GDPR, the business company ALGICEL – BIOTECNOLOGIA E PESQUISA, S.A., NIPC 512104492, with registered office at Rua Professor Luciano da Mota Vieira, Nº 28 9500-238 Ponta Delgada, Portugal, is the Controller of Personal Data.

1.7.3. Irregularities, situations of non-compliance and any security restrictions in the processing of personal data must be immediately reported to ALGICEL's Data Protection Officer by sending an email to: [email protected].