Privacy Policy

KONTROLSAT UNIPESSOAL, LDA · Tax ID 509 043 267 · Version 2026

Index

1. Responsible for Treatment
2. Personal Data We Collect
3. Purposes and Legal Basis of the Processing
4. Data Recipients
5. International Transfers
6. Storage Periods
7. Rights of Data Subjects
8. Automated Treatment and Artificial Intelligence
9. Cookies
10. Data Security
11. Changes to this Policy
12. Contacts and Complaints

1.1 — This Privacy Policy applies to the processing of personal data carried out by KONTROLSAT UNIPESSOAL, LDA (hereinafter "KONTROLSAT"), within the scope of activities developed through the website www.kontrolsat.com , including all its subdomains, the physical store and associated communication channels.

1.2 — KONTROLSAT is the entity responsible for processing your personal data, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR) and Law No. 58/2019, of August 8.

2.1 — KONTROLSAT collects only the personal data strictly necessary for each purpose. The categories of data processed are:

2.2 — KONTROLSAT does not collect or process special categories of personal data (sensitive data), such as health data, ethnic origin, political beliefs, or sexual orientation.

3.1 — Your personal data is processed for the following purposes, under the legal bases indicated (Article 6 of the GDPR):

3.2 — When the legal basis is consent, you may withdraw it at any time without compromising the lawfulness of the processing carried out up to that date. To withdraw your marketing consent, use the unsubscribe link in each email or contact [email protected] .

4.1 — KONTROLSAT does not sell or transfer your personal data to third parties for commercial purposes. Data may be shared with the following categories of entities, exclusively for the purposes indicated:

4.2 — All subcontractors that process data on behalf of KONTROLSAT are bound by contracts that guarantee compliance with the GDPR and the adoption of appropriate security measures.

5.1 — Your personal data is generally processed within the European Economic Area (EEA).

5.2 — When data transfer to countries outside the EEA is necessary (for example, via web analytics tools or email marketing services), KONTROLSAT ensures that adequate safeguards are in place, including adequacy decisions from the European Commission or standard contractual clauses approved by the European Commission (Article 46 of the GDPR).

6.1 — KONTROLSAT retains your personal data only for the period strictly necessary to fulfill the purpose that justified its collection:

6.2 — After the retention period has expired, the data is irreversibly deleted or anonymized.

7.1 — Under the GDPR, you have the following rights regarding your personal data:

7.2 — To exercise any of these rights, contact us at [email protected] . KONTROLSAT will respond to your request within a maximum of 30 days .

7.3 — If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the National Data Protection Commission (CNPD) — www.cnpd.pt.

8.1 — KONTROLSAT uses a virtual assistant called VitorIA , based on artificial intelligence, to assist customers with issues related to orders, invoices, and store policies. VitorIA may access order data to provide this service.

8.2 — Some product descriptions are generated using AI. The manufacturer's official technical specifications always take precedence over any automatically generated description.

8.3 — KONTROLSAT does not make decisions with legal or significant effects based exclusively on automated processing, including profiling.

9.1 — The website www.kontrolsat.com uses cookies to improve the browsing experience, analyze website usage, and personalize content. The types of cookies used are:

9.2 — You can manage your cookie preferences at any time through the website's cookie panel or your browser settings.

9.3 — Disabling non-essential cookies does not prevent browsing the website, but may limit some functionalities.

10.1 — KONTROLSAT implements appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, including: SSL/TLS encryption in all communications, restricted access to data only by authorized personnel and continuous monitoring of systems.

10.2 — These measures are reviewed and updated periodically to ensure compliance with best information security practices.

This Privacy Policy may be updated periodically to reflect changes in legislation or KONTROLSAT's data processing practices. The updated version will always be published on this page, indicating the date of the last revision.

For any questions related to the protection of your personal data or to exercise your rights, please contact us: