kosmotec

Privacy and Data Protection Policy

Last updated: October 21, 2025

Data Controller

Kosmotec by José Lopes Silva Vieira is responsible for processing your personal data, through automated means or otherwise, from collection, organization, storage to deletion.

Kosmotec knows and complies with the rules established for the processing of personal data, currently set out in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR), and applicable national electronic communications and data protection laws.

By accepting this privacy policy, the user grants informed, explicit, free, and unequivocal consent for the personal data provided through this website to be included in a database managed by Kosmotec, meeting appropriate technical and organizational security measures.

The data present in this database consists solely of information provided directly by users upon registration.

Consent for Personal Data Processing

By using this website and accepting our cookie policy, you explicitly consent to:

  • Data Collection: Name, email, telephone, delivery and billing address, Tax ID (NIF).

  • Purpose: Processing orders, fulfilling shipments, issuing invoices, and sending communications.

  • Legal Basis: Article 6(1)(a) GDPR (consent) and Article 6(1)(b) (contract performance).

  • Retention Period: Commercial relationship duration + 10 years (tax obligations).

  • Recipients: Gls, Ctt, Entidade Bancaria, Sibs and Eupago, Tax Authority.

  • Rights: Access, rectification, erasure ("right to be forgotten"), restriction, objection, data portability.

How to Revoke Consent

You may revoke your consent at any time via:

  • Email: marketing@kosmotec.com

  • Customer Area: Access privacy settings.

  • Cookie Banner: Click on "Customize" and uncheck categories.

Important: Revocation does not affect the lawfulness of processing carried out prior to withdrawal. However, withdrawing consent for essential data (name, address, email) will prevent the processing of future orders, but will not affect already completed orders nor the retention of fiscal data legally required.

Purpose of Data Processing

Personal data processed through this page will be used exclusively for the following purposes:

  • Order processing and purchase management.

  • Customer communication and inquiry support.

  • Processing requests for information and estimates.

  • Complaint processing and warranty management.

  • Invoice issuance and tax compliance.

  • Website traffic statistical analysis (subject to specific consent).

  • Sending commercial communications (only with prior and explicit consent).

Legal Basis for Processing

The processing of your personal data is based on the following legal grounds under the GDPR:

  • Consent (Art. 6(1)(a)): For commercial communications, traffic analysis, and non-essential cookies.

  • Contract Performance (Art. 6(1)(b)): To process orders, ship items, and issue invoices.

  • Legal Obligation (Art. 6(1)(c)): Compliance with tax, accounting, and legal requirements.

  • Legitimate Interest (Art. 6(1)(f)): Fraud prevention and website security.

Website Traffic Analysis

With your explicit and informed consent, Kosmotec may collect and process data regarding your visit to our website for statistical analysis and service improvement.

Data Collected for Traffic Analysis

  • Browser information (user agent, language, device type).

  • Screen resolution and browser window dimensions.

  • Approximate geographic location (GPS coordinates, only if explicitly authorized).

  • IP address (anonymized according to Art. 32 GDPR).

  • Date and time of visit.

  • Referring page.

  • Visited URL.

Legal Basis

Explicit user consent (Art. 6(1)(a) GDPR), requested through an informative banner with options to accept, reject, or customize.

Specific Purpose

Statistical traffic analysis, understanding visitor behavior, and continuous improvement of navigation and services.

Retention Period for Analytics Data

Analytics data is stored for a maximum period of 25 months. Consent records remain in the user's browser until browsing data is cleared or consent is revoked.

Data Anonymization

In accordance with Art. 32 GDPR, the IP address is anonymized prior to processing by removing the final octets to ensure direct user identification is prevented.

Geolocation

GPS coordinates are only collected if the user grants explicit permission through their browser. This permission is independent of cookie consent.

Data Recipients

Collected data is processed internally by Kosmotec and is not shared with unauthorized third parties, except for:

  • Google Analytics (G-H4HYS3WKKG): Only with consent for analytics cookies, with anonymized IP.

  • Facebook Pixel (726937832472727): Only with consent for advertising cookies.

Data Subject Rights

Under data protection regulations, users may at any time exercise their rights to:

  • Access (Art. 15): Access held data and obtain confirmation regarding processing.

  • Rectification (Art. 16): Request correction of inaccurate or incomplete data.

  • Erasure / Right to be Forgotten (Art. 17): Request deletion of data, except where legal retention obligations apply.

  • Restriction (Art. 18): Request temporary limitation of processing.

  • Objection (Art. 21): Object to data processing, particularly for direct marketing.

  • Portability (Art. 20): Request data portability in a structured format.

  • Withdraw Consent: Withdraw consent at any time without retroactive impact.

  • Lodge a Complaint: File a complaint with the National Data Protection Commission (CNPD).

How to Exercise Your Rights:

  • Email: marketing@kosmotec.com

  • Customer Area: Access your account on the website.

  • Response Time: We respond within 30 days of request receipt.

Data Retention Periods

Your data will be stored for the following periods:

  • Order and invoice data: Commercial relationship + 10 years (tax and accounting compliance).

  • Marketing contact data: Until consent withdrawal or 3 years of inactivity.

  • Browsing and analytics data: Maximum 25 months.

  • Non-essential cookies: 6 to 24 months.

Recipients and Data Transfers

Your personal data may be shared with the following recipients exclusively for specified purposes:

  • Couriers: Gls, Ctt (for shipping fulfillment).

  • Banking entities and payment processors: Entidade Bancaria, Sibs and Eupago (Transferencias Bancarias, Mbway, Ent. e Ref. Multibanco) (for processing transactions).

  • Tax and Customs Authority: Compliance with fiscal obligations.

Data Security

Kosmotec implements appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access.

  • SSL/TLS encryption across all website communications.

  • Regular and secure data backups.

  • Access control and user authentication.

  • Regular data protection training for authorized staff.

Cookie Policy

We use small text files called cookies, first-party and third-party, for navigation, performance, functionality, analytics, and marketing purposes.

What Are Cookies?

Cookies are software files installed by websites or applications on user devices to store information about visits, optimizing navigation and personalizing user experience.

We use cookies to:

  • Ensure pages function correctly.

  • Store user preferences (language, font size).

  • Keep the shopping cart active and maintain user login sessions.

  • Collect anonymous statistical data regarding website usage.

Types of Cookies and Purpose

Strictly Necessary Cookies (Always Active)

Legal Basis: Legitimate interest (Art. 6(1)(f) GDPR)
Essential for website functionality (shopping cart, payment gateway, user session, security, and cookie consent tracking).

Performance Cookies (Require Consent)

Legal Basis: Consent (Art. 6(1)(a) GDPR)
Used to improve loading speeds and optimize overall website performance.

Analytics Cookies (Require Consent)

Legal Basis: Consent (Art. 6(1)(a) GDPR)
Collect anonymous statistical information via Google Analytics 4 (G-H4HYS3WKKG).

Advertising Cookies (Require Consent)

Legal Basis: Consent (Art. 6(1)(a) GDPR)
We use Facebook Pixel (ID: 726937832472727) for campaign tracking and retargeting.

Geolocation Cookies (Require Consent)

Legal Basis: Consent (Art. 6(1)(a) GDPR)
Used to provide region-specific content (shipping calculations, currency).

Cookie Management and Control

You can accept, reject, or configure cookies directly through our initial consent banner or by adjusting your web browser settings (Google Chrome, Mozilla Firefox, Safari, Microsoft Edge).

Policy Updates

Last update date: October 21, 2025.

Privacy Contact Information

For questions or rights exercise: marketing@kosmotec.com (DPO: José Lopes Silva Vieira).

Kosmotec is committed to treating your personal data with utmost respect and security.
Your trust and privacy are our highest commitment.