{"id":3,"date":"2024-08-08T16:41:26","date_gmt":"2024-08-08T16:41:26","guid":{"rendered":"http:\/\/madameflihan.com\/?page_id=3"},"modified":"2025-09-22T13:43:32","modified_gmt":"2025-09-22T13:43:32","slug":"politica-de-privacidad-2","status":"publish","type":"page","link":"https:\/\/madameflihan.com\/es\/privacy-policy\/","title":{"rendered":"Pol\u00edtica de privacidad"},"content":{"rendered":"

[et_pb_section fb_built=”1″ admin_label=”section” _builder_version=”4.16″ global_colors_info=”{}”][et_pb_row admin_label=”row” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.16″ custom_padding=”|||” global_colors_info=”{}” custom_padding__hover=”|||”][et_pb_text admin_label=”Text” _builder_version=”4.16″ background_size=”initial” background_position=”top_left” background_repeat=”repeat” global_colors_info=”{}”]<\/p>\n

How MadameFlihan Processes Website Users\u2019 Personal Data<\/p>\n

Under the GDPR (General Data Protection Regulation), we inform users of our website that:<\/strong><\/p>\n

a) The Data Controller is MadameFlihan, with tax identification number 518 156 729, based at Rua da Torre Alta, Torre B, n\u00ba 802, 8500-008 Alvor \u2013 Portim\u00e3o;<\/p>\n

b) The lawfulness of data processing is based on the consent of the data subject, who voluntarily enters their data in the forms available on the website;<\/p>\n

c) The data collected on the website are:<\/p>\n

\u2022 for contact purposes: full name, phone number, and email
\u2022 for product delivery: full address
\u2022 for invoicing: Tax Identification Number (NIF)
\u2022 when the payment method is bank transfer: only the IBAN<\/p>\n

d) Regarding payment processing: Payments are processed through Stripe, our certified payment platform, which also manages transactions via Google Pay and Apple Pay. All payment-related data are collected and processed directly by Stripe and are subject to Stripe\u2019s privacy policy, available at www.stripe.com\/privacy;<\/p>\n

e) In the case of author data for artwork exhibition, the following data are required: full name, IBAN, Tax Identification Number, and certificate of authenticity of the artwork;<\/p>\n

f) Internally, access to existing data may be granted, at different levels, to: the management of MadameFlihan, administrative and management support services, and the gallery team;
g) Due to legal requirements, data may also be accessed during audits and transmitted to State authorities;<\/p>\n

h) Invoicing data are kept for 10 years to comply with tax law. Contact data (name, email, and phone number) for future communications and event announcements – if authorized by the data subject – will be kept permanently until the data subject withdraws consent or exercises any Right to Object, Restrict Processing, or Erasure;<\/p>\n

i) Data are destroyed using a dedicated shredder. Digital data are securely deleted electronically;<\/p>\n

j) At any time, the person responsible for the data subject, or the data subject themselves, may request from the Data Controller the following rights: Right of Access, Right to Rectification, Right to Information, Right to Object, Right to Restriction of Processing, Right to Data Portability, and Right to Erasure\/Right to be Forgotten;<\/p>\n

k) MadameFlihan carries out profiling actions with website user data. The user may, at any time, manage automated decisions on the website and manage cookies;<\/p>\n

l) Cookies and Technologies Used: To improve your browsing experience and provide essential features, we use the following cookies and plugins:<\/p>\n

\u2022 Cookie Yes \u2013 For cookie consent management
\u2022 WPML \u2013 For website multilingual support
\u2022 Google Analytics \u2013 For traffic and user behavior analysis
\u2022 Sourcebuster \u2013 For tracking traffic sources
\u2022 WooCommerce \u2013 For e-commerce features<\/p>\n

m) Without prejudice to any other administrative appeal or legal remedy , the client\u2019s representative, or the client themselves, has the right to lodge a complaint with a supervisory authority (in Portugal, the Portuguese Data Protection Authority – CNPD) under the applicable law or the GDPR, if they believe that the processing of their data by MadameFlihan violates legal provisions in force;<\/p>\n

n) MadameFlihan is committed to the confidentiality of its clients personal data and will always take the necessary technical and organizational measures to comply with the Regulation, ensuring that data processing is lawful, fair, transparent, and limited to the lawful purpose of the contract. MadameFlihan adopts technical and organizational measures to ensure the integrity and privacy of the data collected from data subjects;<\/p>\n

o) MadameFlihan has appointed a Data Protection Officer, Antonieta Guerreiro, who can be contacted at any time by phone: +351 911 975 192 and by email: dpo@antonietaguerreiro.com;<\/p>\n

p) Externally, access to the collected data may be granted to the following processors entities, which have provided GDPR compliance declarations:<\/p>\n

Regarding regular data, we have the following processors:<\/p>\n

\u2022 DIGIBOOST \u2013 CRM created by MADAMEFLIHAN, on the gohighlevel.com platform. This software and brand are managed and owned by HighLevel Inc., headquartered in Texas, USA. MADAMEFLIHAN uses these services for website hosting and customer data management. Using this technology provided by HighLevel Inc., MADAMEFLIHAN manages its DIGIBOOST platform, owned by DIGIPIV. MADAMEFLIHAN does not share personal or business data of its clients, thus complying with the GDPR. Go High Level\u2019s privacy policy is available at: https:\/\/www.gohighlevel.com\/privacy-policy;<\/p>\n

\u2022 Jo\u00e3o Mestre \u2013 Consultoria, Contabilidade e Gest\u00e3o, Lda. \u2013 Subcontracted company for consultancy and accounting services, under the trade name \u201cMestre Conta\u201d, with access to all data necessary to manage MadameFlihan\u2019s accounting;<\/p>\n

\u2022 STRIPE Inc. \u2013 Online payment management software, headquartered in Ireland for the European market. The privacy policy is available at: https:\/\/stripe.com\/en-pt\/privacy<\/p>\n

\u2022 SiteGround Spain, S.L \u2013 Company managing the Siteground.com software. Through this software, MADAMEFLIHAN hosts its website and email. The company is based in Spain. The privacy policy is available at: https:\/\/eu.siteground.com\/privacy.htm<\/p>\n

\u2022 DIGIPIV \u2013 Company responsible for creating the MadameFlihan.com website;<\/p>\n

\u2022 Moloni, Lda., a brand of GRUPO VISMA \u2013 company based in Norway, managing the invoicing software MOLONI. In this platform, the data necessary for invoicing and accounting are entered. The privacy policy is available here: https:\/\/www.visma.com\/privacy-statement;<\/p>\n

\u2022 Avelar Bandeira e Mesquita Dinis \u2013 Sociedade de Advogados, SP, RL \u2013 Law firm contracted to provide legal and business advisory services, with access to all necessary data for such services;<\/p>\n

\u2022 Antonieta Guerreiro DPO \u2013 Data Protection Officer, Lda. \u2013 Company contracted for GDPR implementation and DPO (Data Protection Officer) services, with access to client names during internal audits;
Regarding special categories of data, we have the following processors:<\/p>\n

\u2022 Securitas \u2013 Servi\u00e7os e tecnologia de seguran\u00e7a S.A. \u2013 Subcontracted company for technical surveillance and alarm services at MadameFlihan\u2019s facilities. Securitas Portugal is the technical manager of the video surveillance system at MadameFlihan, although the latter is the Data Controller. There are 2 surveillance cameras and appropriate signage at the premises. Data are recorded for 30 days, after which the recording is overwritten. In compliance with the law, audio is turned off;<\/p>\n

\u2022 MadameFlihan uses the following communication platforms with clients, which may include images of data subjects:
o Whatsapp \u2013 This social network may be used by the Data Controller to create restricted workgroups and broadcast information groups, with the data subject\u2019s authorization. By joining, the user\u2019s profile (potentially name and photo) and phone number will be available.<\/p>\n