PRIVACY POLICY

The Controller responsible for processing the personal data of users is Irmãos Vila Nova S.A., with registered office at Avenida da Indústria, 511, 4760-725 Ribeirão, V. N. Famalicão, share capital of EUR 4,250,000.00, registered in the Companies Registration Office under the single registration and corporate tax number 501 997 784.

You can contact us at the following e-mail address: customer.care@salsajeans.com.

Users may access, browse and use this website without providing any personal information, without prejudice to the browsing data necessary for correct management of the website. However, the use of certain tools on the website may imply the provision of personal data.

We are committed to processing only the personal data that are strictly necessary for us to provide our services with the maximum of quality. Accordingly, the processing of your personal data has the following purposes, legal bases and storage periods:

i. Website management
The processing of these personal data is necessary to permit use of the website and this processing is based on the performance of a contract whose terms are governed by the Terms and Conditions and, when not covered in these, by the general principles of law.

Your data will be stored for up to one (1) year after you last visited the website and in accordance with the information provided in the Cookie Policy.

ii. “SalsaStar” Loyalty Programme (“Loyalty Programme”)

If you join the Loyalty Programme by registering an account, processing of your personal data is necessary so that you can enjoy the features of your account, particularly online shopping, buying items not available in the shops, requesting the transfer of items from one shop to another or requesting items to be held for you in a shop, to facilitate your shopping process, to guarantee the assignment of the benefits of the Loyalty Programme and to manage your customer account. The processing is based on steps to be taken prior to entering into a contract or the performance of a contract whose conditions are governed by the Terms and Conditions of the SalsaStar Programme and, when not covered in these, by the general principles of law.

Your data will be stored for up to three (3) years after the last purchase you made in a physical shop or online or, if you have not made any purchases, for up to three (3) years after registering on the Loyalty Programme.

iii. Direct Marketing

We process your personal data so that we can send you generic or targeted information about what’s new, campaigns and offers, discounts or benefits via text message and/or e-mail. This processing is based on consent if you have subscribed to our newsletter or on our legitimate interest if your contact information was collected under the scope of the Loyalty Programme.

You may withdraw your consent at any time or object to receiving communications of this type, either though the settings in your personal account or by replying to the communications we send you.

If you have joined the Loyalty Programme, your data will be stored for receiving these communications for up to three (3) years after the last purchase you made in a physical shop or online or, if you have not made any purchases, for up to three (3) years after registering on the Loyalty Programme. .

If you have only subscribed to our newsletter, your data will be stored for up to two (2) years after your last interaction with us.

iv. Competitions and Challenges
We organise regular competitions and challenges on our social media – Facebook and Instagram. Your personal data will only be processed for the purpose of managing and organising the competitions and challenges and awarding and sending the corresponding prizes. This processing is based on steps to be taken prior to entering into a contract or the performance of a contact whose conditions are governed by the Terms and Conditions of participation in the competition or challenge.

Your data will be stored for up to one (1) year after the end of the initiative in question.

v. Transaction Management
If you ask us to include your tax number on your purchase receipt, we will need to register it for the purpose of issuing invoices for the acquisition of goods and services and then send it to the Tax Authority. This processing is based on compliance with a legal obligation.

By law, your data will be stored for a period of ten (10) years.

vi. Aftersales Service

In order to permit access to repair services for products bought in our shops and to carry out the repair or replacement, you will be asked for your personal identification data for product verification and ownership and so that we can inform you as soon as your item is ready to be picked up or for us to deliver it to your home address if you so wish. This processing is based on steps to be taken prior to entering into a contract or the performance of a contract.

Your data will be stored for up to two (2) years after notification of the product non-conformity.

vii. Exchanges | Returns

In order to exchange items and in the event of items being returned, we will ask you for your personal identification data and your banking information. This processing is based on steps to be taken prior to entering into a contract or on the performance of a contact whose conditions are governed by the Terms and Conditions.

If you have joined the Loyalty Programme, your data will be stored for up to three (3) years after the last purchase you made in a physical shop or online or, if you have not made any purchases, for up to three (3) years after registering on the Loyalty Programme.

If you have not joined the Loyalty Programme, we only store your data for the purpose of Transaction Management.

viii. Home deliveries

We process your identification data so that we can deliver your purchases to your home. This processing is based on steps to be taken prior to entering into a contract or the performance of a contract.

If you have joined the Loyalty Programme, your data will be stored for up to three (3) years after the last purchase you made in a physical shop or online or, if you have not made any purchases, for up to three (3) years after registering on the Loyalty Programme.

If you have not joined the Loyalty Programme, we only store your data for the purpose of Transaction Management.

ix. Customer Care (Service Management and Customer Support)

In order to provide you with the best assistance and help before, during and after the sale of our products and services, we need you to provide us with your personal identification data. This is so that we can identify you, analyse your request and reply to you in good time. This processing is based on steps to be taken prior to entering into a contract or the performance of a contract.

Your data will be stored for up to one (1) year after the termination of the contract or, if it was not entered into, for up to six (6) months after the beginning of the contract process that was not concluded.

x. Suggestions and Complaints

You may send suggestions or complaints about our services at any time, indicating your personal identification data.

Additionally, in compliance with DL No. 156/2005 of 15 September, we also have a physical Complaints Book in our shops and an electronic Complaints Book on the website. This processing is based on the legitimate interest of the company in following up on your requests and in compliance with legal obligations.

By law, your data will be stored for a period of three (3) years.

xi. Call recording (contractual relationship, for monitoring the service quality and compliance with legal obligations)

When you contact the customer support team, it may be necessary to record the call under the scope of the contractual relationship in order to monitor the quality of the service provided or for compliance with legal obligations. This processing is based on your consent.

Your data will be kept for six (6) months.

If the legal basis for the processing of your personal data is consent or legitimate interest, you may withdraw your consent or object to the processing, respectively, at any time, without any consequences for you, but this shall not compromise the lawfulness of the processing carried out previously. If you withdraw your consent or expressly object to processing, we will immediately cease all processing of your personal data for the purpose in question unless there is a need to process these data for compliance with legal and/or contractual obligations.

We only store your personal data for the time strictly necessary to comply with the above objectives, within the legal limits. At the end of the defined period for storing your data, we undertake to eliminate, destroy or anonymise your personal data. Generally speaking, and with the exception of the data we are legally obliged to store for a longer period, we erase your personal data as soon as your issues and your requests have been dealt with and solved, the services you requested have been provided or the guarantee periods have elapsed for the items you buy or have repaired.

If you have any questions or you would like additional information on the periods for which your personal data are stored, you can contact us at the following e-mail address: customer.care@salsajeans.com.

In the context of the purposes listed, we only process the data that are strictly necessary for those purposes, namely:

• Personal identification data (e.g. full name, e-mail address, telephone number, address, date of birth, gender, signature, tax number, image and/or voice),
• Data on payment methods and transactions (e.g. name of the credit card holder),
• Contract data (e.g. loyalty cards, purchase details and product guarantee(s)),
• Traffic data and data from call recording.

In certain cases, we may disclose your personal data, only as strictly necessary, to entities that provide services to us (“Processors”) for the above purposes (e.g. for home deliveries, product repairs, support services and marketing campaigns), under the terms of the contracts entered into with them.

Your data may also be shared with partner entities under the scope of joint responsibility agreements entered into with them.

Your personal data may be transmitted between companies of the Sonae Group for internal administrative purposes if there is a legitimate interest in data sharing within the group.

If your personal data have been shared with service providers located outside of the European Union, we ensure that your personal data benefit from a high level of protection under the terms of the applicable law on personal data matters, promoting the transfer under the scope of an adequacy decision from the European Commission or the standard data protection clauses (or similar) approved by the European Commission

Your data may also be sent to the authorities or third parties when such transmission is carried out for compliance with a legal and/or contractual obligation, a decision of the CNPD or another relevant supervisory authority or following a court order.

Under no circumstances do we share your personal data with other companies or brands for other commercial purposes.

Under the terms of the applicable law and as a data subject, you may request the right to access, rectification or erasure of your personal data at any time, as well as limitation of processing, portability, objecting and not being subject to automated decision-making.

In the cases where you have provided consent for certain processing of your personal data, you may withdraw this consent at any time.

To exercise any one of these rights, please send your request to the following e-mail address: customer.care@salsajeans.com.

You can also contact our Data Protection Officer with regard to any issues related to the processing of your data and to exercise the rights granted to you by the applicable law and, particularly, by this Privacy Policy, at the following e-mail address: customer.care@salsajeans.com.

Without prejudice to any other administrative or judicial remedy, you shall have the right to lodge a complaint with the National Data Protection Committee (“CNPD”) if you consider that our processing of personal data relating to you infringes the legal framework in force.

We have a variety of information security measures, in line with best national and international practices, in order to protect your personal data, including technological controls and administrative, technical and physical measures and procedures that guarantee the protection of your personal data, preventing their misuse, unauthorised access and disclosure, loss, improper or inadvertent alteration or unauthorised destruction.

In terms of information security, we have the same commitment to continuous improvement that guides our daily business activity.

Below are some of the more important measures we use:

i. Restricted access to your personal data;
ii. Safe storage and transfer of your personal data;
iii. Protection of information systems through devices that prevent unauthorised access to your personal data;
iv. Implementation of mechanisms that safeguard the integrity and quality of your personal data;
v. Continuous monitoring of information systems, with the aim of preventing, detecting and avoiding misuse of your personal data;
vi. Redundancy of personal data storage, processing and communication equipment to avoid loss of availability.

However, it is the responsibility of the users to ensure that the devices and equipment used to access this website are appropriately protected against harmful software, computer viruses and worms.

We may provide hyperlinks to other websites of interest or partner websites but we are not responsible for the privacy policy, cookie policy or terms and conditions of use for these websites.

When you access other websites using the hyperlinks provided, the managing entities of these websites may collect information about you which will be used by them. We recommend reading the information and conditions mentioned above when you access other websites.

When you choose to follow us on social media, when you interact with us on them or when you access the website via these, your personal data may be processed by the managing entities of the social media or the features provided, in accordance with their respective privacy policies, which we recommend that you read.

To ensure the protection of people and property in our shops, we use CCTV systems that capture and record images, under Article 31 of Law 34/2013, of 16 May (Regulations Governing Private Security Activities). This personal data processing is based on the company’s legitimate interest in assuring the safety of its staff and customers, as well as monitoring any incidents that may occur in shops.
The recordings of the footage obtained through the CCTV systems will be encrypted and stored for a period of 30 days from the data of recording, at the end of which time they will be destroyed, within no more than 48 hours. This period may be extended if there is a need for SALSA to comply with other legal obligations, if the data subject so requests or if the footage is necessary for legal proceedings.

If the legal basis for the processing of your personal data is consent or legitimate interest, you may withdraw your consent or object to the processing, respectively, at any time, without any consequences for you, but this shall not compromise the lawfulness of the processing carried out previously. If you withdraw your consent or expressly object to processing, we will immediately cease all processing of your personal data for the purpose in question unless there is a need to process these data for compliance with legal and/or contractual obligations. We only store your personal data for the time strictly necessary to comply with the above objectives, within the legal limits. At the end of the defined period for storing your data, we undertake to eliminate, destroy or anonymise your personal data. Generally speaking, and with the exception of the data we are legally obliged to store for a longer period, we erase your personal data as soon as your issues and your requests have been dealt with and solved, the services you requested have been provided or the guarantee periods have elapsed for the items you buy or have repaired. If you have any questions or you would like additional information on the periods for which your personal data are stored, you can contact us at the following e-mail address: customer.care@salsajeans.com

This Privacy Policy may be revised and updated at any time; these alterations will then by posted on our website, at https://www.salsajeans.com/en/ .

Date of last update: 19/02/2023

You have the right to change at any time the consents you have granted for the use of your personal data. In the context of the SalsaStar program, your personal data may be used for the following purposes:

• Sending marketing communications via:
  • Email
  • Phone
  • Mail

• Collecting information about the use of our services and products.

If you wish to change your consents or for any questions related to the processing of your data, please send an email to customer.care@salsajeans.com.

You have the right to obtain information about the use of your personal data, ensuring transparency in its processing. This information includes confirmation of whether your personal data is being processed or not and, if so, you have the right to obtain specific details such as the categories of personal data, the purposes of processing, the recipients of personal data, the retention period of personal data, or the source of personal data, among others.

You can request information via email at customer.care@salsajeans.com, such as:

• Categories of personal data
• Purposes of processing
• Recipients of data
• Retention period
• Source of data
• Other information (please specify)

You have the right to request the direct transfer of your personal data to another data controller in a format that is convenient for you, whenever technically feasible. To exercise this right, please complete the data sharing request by specifying which information you wish to share and the recipient(s) of that information. If you prefer, you can also specify the format in which you would like us to share the data.

Send us an email at customer.care@salsa.jeans.com with the following information:

• Name
• Email
• Phone/Cell
• Specific information to be shared
• Desired format (optional)
• Recipient(s) of the information

You have the right to request the deletion or "right to be forgotten" of your personal data when it is no longer necessary for the purposes for which it was collected, or if it has been processed unlawfully, among other reasons. There are exceptions to this right, such as when processing is necessary for the exercise or defense of a legal claim.

The deletion of your personal data is irreversible, meaning that we will not be able to recover it if you decide to reverse this request.

To request the deletion of your data, please send an email to customer.care@salsa.jeans.com with the following information:

• Name

• Email

• Phone/Cell

• Reason for request

• Category(ies) of data you wish to delete:

  • Personal data (name, address, phone, email, date of birth, and gender) - obtained when you joined the loyalty program.
  • Personal data (email) - obtained when you subscribed to our newsletter.
  • Personal data (full name) - obtained when you purchased our products or services.
  • Personal data (name, phone, email, address) - obtained when you made an online purchase.
  • Personal data (name, address, postal code, phone contact, email, purchase details) - obtained when you requested home delivery of a purchase.
  • Personal data (name, address, postal code, phone contact, email, purchase details, item warranty) - obtained when you requested repair or made a quality complaint about an item.
  • Recordings of calls, emails, or chats - obtained when you contacted our customer support team.

You have the right to limit the processing of your personal data when certain situations occur, such as when your personal data are not correct. When you exercise this right, the data may only be processed in certain cases (for example, for storage purposes), but with the affixation of specific marks.

To exercise your right to limit the processing of your personal data, please contact us by e-mail at customer.care@salsajeans.com.

You have the right to object to the processing of your personal data for reasons related to your personal situation. The right allows you to object to any processing that is not based on your consent, such as sending e-mails or text messages regarding your transactions in SALSA stores or the online store.

To exercise your right to object to the processing of your personal data, please contact us by e-mail at customer.care@salsajeans.com and specify which data processing purposes you object to.