Privacy Policy

The Leaf naif online shop at www.leafnaif.com NIF 301216983 with registered office at Rua da Fé, nº 2o, 2400-762 Leiria, Portugal processes the personal data provided by the Customer in order to comply with and enforce the Terms and Conditions, process orders and electronic deliveries and for the necessary communication within the period required by law.

General Conditions 

1. The controller of the personal data, in accordance with the RGPD (referred to as "Regulation") is Priscila Vieira de Mesquita, company with NIF 301216983, located at Rua da Fé, nº 2o, 2400-762 Leiria, Portugal (referred to as "Responsible");

2. The contact details of the Responsible Party are: e - mail: info@leafnaif.com, tel: +351915624168;

3. Personal data is any information relating to an identified or identifiable natural person.

Origin of personal data

1. The responsible person processes personal data obtained with the consent of the customer and collected as part of the purchase contract and execution of the electronic order placed in the online shop www.leafnaif.com;

2. The person in charge processes only the customer identification data and contact details necessary to enforce the purchase contract;

3. The party responsible processes the personal data for delivery and accounting purposes and for the necessary communication between the parties involved in the contract for the period of time required by law. Personal data will not be disclosed and will not be transferred to other countries.

Purpose of data processing

The responsible party processes the customer's personal data for the following purposes:

1. Registration on the Website www.leafnaif.com in accordance with Chapter 4, Section 2 of the RGPD;

2. For the execution of electronic requests created by the Customer (name, address, email, telephone);

3. To comply with laws and regulations resulting from the contractual relationship between the Client and the data controller;

4. For the execution of the purchase contract on the basis of the personal data required. The contract cannot be performed without the personal data.

Data storage period

1. The responsible party stores the personal data for the period necessary to enforce the laws and regulations resulting from the contractual relationship between the Customer and the responsible party and for the period of 3 years after the conclusion of the contractual relationship;

2. The responsible party must delete all personal data as soon as the personal data storage period ends.

Recipients and controllers of personal data

The third parties that process personal data of the customer are subcontracted by the responsible entity. The services of the subcontractors are essential for the successful fulfilment of the contract for the acquisition and processing of electronic orders between the responsible party and the customer.

The subcontractors of the Responsible Party are:

• Webnode AG (e-commerce system);
• Carriers;
• Google Analytics (website analysis);

Consumer Rights

In accordance with the Regulations, the Customer is entitled to:

1. Access to personal data;

2. Rectification of personal data

3. Right to delete personal data

4. The right to object to the processing of personal data;

5. The right to port the personal data;

6. The right to withdraw consent to the processing of personal data in writing or by e-mail: info@leafnaif.com;

7. the right to lodge a complaint with the supervisory authority in case of alleged violation of the regulation.

Security of personal data

1. The data controller shall take all necessary technical and organisational precautions for the protection of personal data;

2. The data controller has taken technical precautions to protect the spaces where data storage takes place, in particular by protecting computer access with a password, using antivirus software and by performing regular computer maintenance.

Final provisions

1. By creating an electronic order on the website www.leafnaif.com the customer confirms that he/she is informed about all conditions of the protection of personal data and accepts them as far as possible;

2. The customer accepts these conditions by ticking the check box in the order form;

3. The responsible party may update these conditions at any time. A new updated version shall be published on the website.

These Rules come into force on 27 March 2023.