Privacy policy

 

Privacy Policy

Introduction
Extabu, Lda. considers privacy a priority. This Privacy Policy aims to describe the purposes for processing your data, how they are processed, the possible sharing of data, their retention, and how to defend your rights regarding the data we process, defining appropriate contact methods. This digital platform complies with the requirements of the General Data Protection Regulation and Law No. 58/2019, of August 8, declaring that it uses appropriate measures to ensure continuous adaptation to legislative updates/changes, safeguarding data security, notwithstanding the potential vulnerability of security measures on the internet.

This document may be modified at any time without prior notice to users. The translation of the information in this document may alter its form or content, so only the Portuguese version (PT-PT) should be used as the standard in case of conflict or doubt.

Who is responsible for your data?
Extabu, Lda. is responsible for processing your data as described in this privacy policy.
Our website is hosted on the e-commerce platform of Shopify, Inc., so the data processed as a result of using the website are also the responsibility of Shopify, which ensures the secure and certified storage of the data.

Why do we process your information?
Extabu, Lda. will only process your personal data:

1. To fulfill the contractual obligations arising from purchases made through the website www.tabucbd.pt, including collecting contact and billing information.

2. Pursuing a legitimate interest, such as:

   • Development and maintenance of our platform,
   • Providing technical support,
   • Fraud prevention and detection,
   • Ensuring network and information security,
   • Providing services or information.

3. With your consent to process your personal data for specific, explicit, and legitimate purposes; and/or

4. If necessary to comply with legal obligations that apply to you.

Purposes of processing your information
When filling out registration forms on our platform, your personal data (such as name, email, phone number, or address) are collected by Extabu, Lda. and processed to respond to your questions and requests or provide information.
Potential data transfers occur, including through:

• IT infrastructure services such as firewalls, WAF, IDS, and IPS, hosting
• Personal data identification and validation services
• Marketing services

By providing your contact details, Extabu, Lda. may contact you to clarify the services provided or for marketing and communication activities related to our services, provided you have consented to the processing of your personal data for this purpose. If you consent, you will receive marketing communications via email, SMS, MMS, or other relevant telecommunication means. However, it is your right, as the data subject, to object to this data processing.
Your consent is essential for Extabu, Lda. to process your personal data for specific purposes. If you choose not to provide your consent, your visit and use of this digital platform will not be affected.

How long do we retain your information?
Our policy is to retain data only for the period necessary to fulfill the purposes for which it was collected. However, in certain cases, we may retain data for longer periods, particularly when required by law.

What rights do you have as a data subject?
At any time, you may:
1.1 Request access to the information we hold about you:
As the data subject, you have the right to obtain confirmation of whether your data is being processed and, if so, to access your personal data and the information specified by law.

1.2 Request rectification of inaccurate or incomplete information:
As the data subject, you have the right to request that Extabu, Lda. promptly correct any inaccurate or incomplete data concerning you.

1.3 Request the deletion of your personal data:
As the data subject, you have the right to request the deletion of your data without undue delay, where one of the following grounds applies: a) The data is no longer necessary for the purpose for which it was collected or processed; b) You withdraw your consent for the processing of the data (where processing is based on consent), and there is no other legal ground for processing; c) You object to processing, and there are no overriding legitimate interests justifying the processing.

1.4 Request restriction of the processing of your personal data:
As the data subject, you have the right to request restriction of processing in cases such as: a) Contesting the accuracy of personal data for a period that allows Extabu, Lda. to verify its accuracy; b) If the processing is lawful, and you object to the deletion of your personal data, requesting instead its restricted use; c) If Extabu, Lda. no longer needs the personal data for processing purposes, but you require it for the establishment, exercise, or defense of legal claims; d) If you have objected to processing, pending verification that the legitimate grounds for processing prevail over your interests.

1.5 Object to the processing of your personal data:
Where processing is based on legitimate interests pursued by Extabu, Lda., or for direct marketing or profiling purposes, you may object at any time to the processing of your personal data.

If processing is based on your consent, you have the right to withdraw it.
3.1 If consent is required for processing personal data, the data subject has the right to withdraw consent at any time, although this does not affect the lawfulness of processing based on consent prior to its withdrawal or subsequent processing based on another legal ground, such as compliance with a contract or legal obligation.

If you wish to exercise any of your rights, please contact us in writing at the email address afonso.machado@tabucbd.pt or by mail at EN116, 90C 2640-578 Mafra, addressed to Extabu, Lda.
Your requests will be handled with special care to ensure the effectiveness of your rights. You may be asked to verify your identity to ensure that personal data is only shared with its rightful owner.
Please note that in certain cases (e.g., due to legal requirements), your request may not be immediately fulfilled.
Nonetheless, you will be informed of the actions taken within one month of the request being made.
You also have the right to file a complaint with the National Data Protection Commission or the competent authority in the Member State where you believe there has been a violation of data protection laws.

Security and Confidentiality
We prioritize keeping your data secure and take appropriate security measures to ensure the protection of your personal data and prevent unauthorized access. We periodically review our security systems and policies to ensure that data remains secure and protected. However, transmitting information over the internet is not completely secure, and we cannot guarantee absolute security of information transmitted through our online site.
We also respect the confidentiality of your information. Therefore, we do not sell, distribute, or otherwise commercially share your information with third parties. Extabu, Lda. commits to maintaining your information confidential in accordance with this Privacy Policy and applicable legislation.
Registering on the website for access to certain features and transmitting any personal data constitutes your acceptance of this Privacy Policy and implies the tacit declaration and guarantee that: (i) you have read, understood, and fully accepted Extabu, Lda.’s privacy policy; (ii) you are aware of the characteristics, constraints, limitations, and defects of the internet, particularly that data and information transmissions over the internet only benefit from relative technical reliability; (iii) you acknowledge that any digital platform on the internet is vulnerable to unauthorized third-party intrusions and that access to its users may be interrupted, and that information circulating on the internet is not protected against potential deviations (free access) or viruses; (iv) Extabu, Lda. cannot be held responsible for damages suffered by users caused by or not by third parties accessing data transmitted by the owner on this website or elsewhere on the internet.

Extabu, Lda. notifies users of its data protection policy so that they can freely and consciously determine and express, via their registration on the digital platform, their intent to provide, or not, their data to Extabu, Lda. and under what terms.
Extabu, Lda. also informs that the personal data entered by the respective owners will constitute an automated personal data file, owned by Extabu, Lda., which will be under the responsibility of this company.
Extabu, Lda. is the entity responsible for and the recipient of the personal data provided by the users.
The data transmitted to Extabu, Lda. will be used to manage contacts with clients and users of the platform and to establish contact among the various types of users, with the aim of promoting products and services (direct marketing), by Extabu, Lda., or any subcontracted entity.
Extabu, Lda. informs users that they may freely exercise their rights of access, correction, modification, or cancellation of their data at any time, by sending an email or registered letter to Extabu, Lda. at the email address afonso.machado@tabucbd.pt or to the address: EN116, 90C 2640-578 Mafra, addressed to Extabu, Lda.

Cookies
Our site uses cookies. Cookies are small text files that are stored in the user's internet browser or by the internet browser in the user's computer system.
If a user accesses a website, a cookie may be stored in the user's operating system. This cookie contains a unique character string that allows the browser to be identified when the website is accessed again.
We use cookies to make our website more user-friendly, effective, and secure. In addition, cookies allow our systems to recognize your browser even after a page change and offer you services. Some functions of our site cannot be offered without the use of cookies. For this, it is necessary for the browser to be recognized even after a page change.
We also use cookies on our site to analyze visitors' browsing behavior. Additionally, we use cookies to later approach visitors to the page on other sites with targeted advertising related to interests.
The data stored will be pseudonymized through technical precautions. Therefore, it is not possible to continue assigning the data to you. The data will not be stored alongside other personal data about you. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your browser, you can prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, please note that you may not be able to use all functions of this site in full.
In the following links, you can learn how to manage cookies in the most important browsers (including how to disable them):
Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Use of Google Analytics
We use the Google Analytics web analysis service on our site by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The data processing is for analyzing this site and its visitors.
For this purpose, Google will use the information obtained on behalf of the website operator to evaluate your use of the website, to compile reports on the website activities, and to provide other services to the website operator related to the use of the website and the internet. The IP address transmitted by your browser in connection with Google Analytics will not be combined with other Google data.
Google Analytics uses cookies to allow an analysis of your use of the website. The information generated by the cookies about your use of this website is typically transferred to a Google server in the USA and stored there.
IP anonymization is enabled on this website. As a result, your IP address will be shortened by Google within EU member states or in other states that are part of the European Economic Area Agreement. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.
Your data may be transferred to the USA, and data transfers to the USA are subject to adequacy checks by the European Commission. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, please note that in this case, you may not be able to use all the functions of this website in full. You can also prevent the storage of data generated by the cookie and related to the use of the website (including your IP address) from Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link [https://tools.google.com/dlpage/gaoptout?hl=de].
You can set an opt-out cookie to prevent Google Analytics from recording data across multiple devices. Opt-out cookies prevent the future storage of your data when you visit this site. You must disable all systems and devices in use for this to be fully effective. For more information about terms of use and privacy, visit https://www.google.com/analytics/terms/de.htm or https://www.google.de/intl/de/policies/.

Use of Google Inc. remarketing or “similar audiences” feature
We use the remarketing or “similar audiences” feature of Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) on our site.
This feature is used to analyze the behavior and interests of visitors. Google uses cookies to analyze website usage, which serves as the basis for creating interest-based ads.
Cookies are used to record visits to the website and anonymous data about website usage. No personal data of site visitors is stored. If you later visit another website in Google’s Display Network, ads will be shown that likely take into account the product areas and information you previously requested.
Your data may also be transferred to the USA, and data transfers to the USA are subject to an adequacy decision by the European Commission. You have the right to object at any time, for reasons relating to your particular situation, to this processing of personal data concerning you. You can permanently disable the use of cookies by Google by following the link below and installing the provided plug-in: https://support.google.com/ads/answer/7395996?hl=de.
Alternatively, you can disable the use of third-party cookies by accessing the opt-out page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and following the provided opt-out instructions. For more information about Google’s remarketing and the associated privacy policy, visit: https://www.google.com/privacy/ads/.

Use of Google AdWords Conversion Tracking
We use the online advertising program “Google AdWords” on our site and, in this context, conversion tracking (evaluating visitor actions). Google Conversion Tracking is a service from Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
When you click on an ad placed by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited validity, do not contain any personal data, and are not used for personal identification. If you visit certain pages on our site and the cookie has not expired, Google and we can recognize that you clicked on the ad and were redirected to that page.
Each Google AdWords customer receives a different cookie. As a result, it is not possible to track cookies across AdWords customer websites. The information stored using the conversion tracking cookie is used to compile conversion statistics. This informs us of the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag.
However, we do not receive any personally identifiable information. You have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you. For this, you can prevent the storage of cookies by selecting the appropriate technical settings in your browser software.
However, we would like to emphasize that in this case, you may not be able to use all the functions of this website in full. You will not be included in the conversion tracking statistics. Additionally, you can disable personalized advertising for yourself in the Google Ad Settings. Instructions on how to do this can be found at https://support.google.com/ads/answer/2662922?hl=de.
You can also disable the use of cookies by third parties by accessing the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ and implementing the additional opt-out instructions provided. More information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/.

Use of Facebook Remarketing
We use the “Custom Audiences” remarketing feature of Facebook Inc. on our site. (1601 S. California Ave, Palo Alto, CA 94304, USA; “Facebook”).
This feature aims to target site visitors with interest-based advertising on the Facebook social network. For this purpose, the Facebook Remarketing tag has been implemented on the site. Through this tag (pixel), a direct connection to Facebook's servers is established when visiting the site, transferring to Facebook’s server the pages we visited. Facebook assigns this information to your personal Facebook user account.
When you visit the Facebook social network, Facebook will display personalized ads based on your interests. You have the right to object at any time, for reasons related to your particular situation, to this processing of personal data concerning you.
Contact us to disable the “Custom Audiences” feature. You can find more detailed information on Facebook's data storage and usage, your rights regarding it, and how to protect your privacy in Facebook’s data protection information at https://www.facebook.com/about/privacy/.

Use of YouTube
We use the YouTube embedding feature on our site by YouTube LLC. (901 Cherry Ave., San Bruno, CA 94066, USA; “YouTube”).
YouTube is a service associated with Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). The feature displays videos stored on YouTube in an iframe on the site. The “Advanced Privacy Mode” option is enabled.
This means that YouTube does not store any information about site visitors. Only when watching a video will information about it be sent to YouTube and stored there. You can find more information on YouTube and Google’s data storage and usage, your rights regarding this, and how to protect your privacy in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Do you have any questions?

If you have any questions regarding the processing of your personal data, or wish to exercise any of your rights, please contact us:

Email: help@tabucbd.com

Address: EN116, 90C 2640-578 Mafra, addressed to Extabu, Lda.

Please note that occasionally, Extabu, Lda will update this Privacy Policy. We ask that you review this document periodically to stay informed.