Proteção de dados RGPD e política de privacidade
O presente aviso de privacidade explica como a Aipas Electric Bikes Europe GmbH trata os dados pessoais em conformidade com o Regulamento Geral sobre a Proteção de Dados da UE (Regulamento (UE) 2016/679 – RGPD).
1. Responsável pelo tratamento
Aipas Electric Bikes Europe GmbH, Mainzer Landstraße 180, 60327 Frankfurt am Main, Alemanha. E-mail: [email protected].
2. Finalidade do tratamento
Os dados pessoais recolhidos durante a finalização da compra (nome, morada de entrega, e-mail, número de telefone) são tratados exclusivamente para execução da encomenda, seguimento do transporte e documentação fiscal e de garantia exigida por lei (art. 6.º, n.º 1, alíneas b) e c) do RGPD).
3. Segurança e conservação dos dados
A nossa plataforma aplica medidas técnicas de nível empresarial em conformidade com as diretrizes OWASP Top 10. Não conservamos credenciais de pagamento sensíveis.
4. Payment Processing
Card and wallet payments are processed by Stripe Payments Europe, Ltd. (Ireland). When you choose card payment you are redirected to Stripe's hosted payment page; your card details are entered there and never reach our servers (Art. 6(1)(b) GDPR). Stripe's own privacy notice applies: https://stripe.com/privacy. SEPA transfers are made from your own bank. We store your order data (items, amounts, delivery details, payment reference) for contract fulfilment and statutory retention periods.
5. Website Analytics (First-Party, Cookieless)
We measure how the store is used with our own analytics system running on our own server — no data is sent to Google or any other third party. It sets no cookies and stores no identifier on your device. Your IP address is never stored: the server derives a short-lived pseudonymous value from it that changes every day and cannot be reversed, and this value is used solely to count unique visitors (Art. 6(1)(f) GDPR — legitimate interest in understanding aggregate store usage). Browsers signalling "Do Not Track" or Global Privacy Control are counted without any visitor value at all. Aggregated data is retained for a maximum of 400 days.
6. Live Chat
If you use the chat widget, we process the messages you send, the page you were on, and — only if you choose to provide them — your name and email address, in order to answer your enquiry (Art. 6(1)(b) and (f) GDPR). Conversations are stored on our own server and are not shared with third parties. You can request deletion of a conversation at any time via [email protected].
7. Your Rights
You have the right of access, rectification, erasure, restriction, data portability and objection (Art. 15–21 GDPR), and the right to lodge a complaint with a supervisory authority. Contact: [email protected].
Esta tradução é disponibilizada apenas por conveniência. Em caso de divergência, prevalece a versão alemã do presente documento.