Privacy Policy

The processing of personal data on the website www.ninidesigncentre.com  (hereinafter referred to as the “Website”) is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), Law No. 58/2019 of 8 August (which ensures the implementation of the GDPR under Portuguese law), and all other applicable data protection legislation.

This Privacy Policy is intended to inform users of the Website (hereinafter “Users”) about how their personal data are processed when interacting with it.

  1. Data Controller

The controller responsible for the processing of personal data collected through contact forms, other communication channels or newsletter subscription is:

DESIGN CENTRE, LDA. (hereinafter the “Design Centre”)

Estrada da Pontinha
Forte de Nossa Senhora da Conceição
9000-726 Funchal

 Email: [geral@ninidesigncentre.com]

Phone: +351 291 648 780

  1. Purposes and Legal Grounds for Processing

Users’ personal data may be processed by the Design Centre for the following purposes:

  • Managing contact requests, information, proposals, suggestions, queries, or complaints, based on the Design Centre’s legitimate interest in ensuring the regular operation of its business;
  • Sending institutional and promotional communications, based on the User’s consent;;
  • Compliance with legal obligations to which the Design Centre is subject;
  • Performance of contracts or pre-contractual steps, where applicable;
  • Exercise or defense of legal claims in judicial or administrative proceedings, or other legitimate purposes.

When accessing and browsing the Website, certain technical information may be collected through cookies or similar technologies (such as Google Analytics), including:

The processing of such data is based on the User’s consent, except where cookies are strictly necessary for the technical functioning of the Website, in which case the legal ground is the Design Centre’s legitimate interest. These data are used for statistical, security, and user experience improvement purposes. For more details, please refer to our Cookie Policy available here.

  1. Data Retention

Personal data will be retained for the period strictly necessary to fulfill the purposes for which they were collected and for the longest applicable legal limitation period.

Specifically, the following guidelines apply:

  • Data submitted through contact forms: retained for up to one (1) year after the request has been addressed, or as necessary for business record-keeping purposes;
  • Newsletter subscriptions: retained until consent is withdrawn, plus a brief grace period to ensure full system updates;;
  • Data required for legal compliance: retained for the legally mandated period.
  1. Data Sharing

Personal data may be disclosed to:

  • Data processors and technical or operational service providers (e.g., hosting, IT maintenance, email marketing platforms), exclusively for the purposes outlined above and under a written contract ensuring GDPR compliance and confidentiality;
  • Judicial, administrative, or regulatory authorities, where required by law.

Except where the User has given consent, personal data will not be shared with third parties for commercial or direct marketing purposes.

  1. International Data Transfers

Whenever the Design Centre uses third-party service providers for managing forms or sending newsletters, personal data may be transferred to entities located outside the European Economic Area (EEA)), such as the MailChimp platform.

In such cases, appropriate safeguards will be implemented in advance, including Standard Contractual Clauses approved by the European Commission or other legally acceptable transfer mechanisms, to ensure an equivalent level of data protection in accordance with the GDPR.

  1. Security Measures

The Design Centre implements appropriate technical and organizational measures to ensure a level of security appropriate to the risks associated with processing, including protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data.

Such measures include role-based access controls, encryption where technically appropriate, and regular reviews of information security practices. While no security measure can guarantee absolute protection, the Design Centre continuously assesses and updates its safeguards to maintain a level of security appropriate to the risk.

Any Design Centre staff member who, in the course of their duties, has access to personal data is bound by confidentiality obligations under applicable law and internal policies.

  1. Data Subject Rights

In accordance with applicable data protection legislation, Users have the following rights:

  • Right of access: to obtain confirmation as to whether their personal data are being processed, and to access such data, including their origin, processing purposes, retention periods, and recipients, if any;
  • Right to rectification: to request the correction of inaccurate data and the completion of incomplete data;
  • Right to erasure: to request the deletion of personal data, particularly when the data are no longer necessary for the purposes for which they were collected or if consent is withdrawn, provided there are no other lawful grounds for processing (including legal obligations);
  • Right to object: to object, in certain circumstances, to the processing of personal data on grounds relating to legitimate interest, including processing for direct marketing purposes;
  • Right to restriction of processing: to request the limitation of processing in legally prescribed cases, in which case the data may only be stored;
  • Right to data portability: to receive the personal data provided in a structured, commonly used, and machine-readable format, and to transmit them to another controller, where technically feasible and where the processing is based on consent or contractual necessity;
  • Right to withdraw consent: to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
  1. Exercising Rights

Users may exercise their rights by submitting a written request to:

DESIGN CENTRE, LDA.

Estrada da Pontinha
Forte de Nossa Senhora da Conceição
9000-726 Funchal

Email: [geral@ninidesigncentre.com]

Phone: +351 291 648 780

The Design Centre undertakes to respond within one (1) month of receipt of the request. In the case of complex or multiple requests, this period may be extended by up to two (2) additional months, in which case the User will be informed of the extension and the reasons for the delay.

  1. Complaints

If you believe your rights have not been respected, you have the right to lodge a complaint with the competent supervisory authority, the Portuguese Data Protection Authority (CNPD).
Further information is available at: www.cnpd.pt

‍_________________________________

Version dated […] […] 2025