Privacy Policy
Commitment to Privacy and Personal Data Protection
IDRYS is dedicated and committed to complying with personal data protection legislation, privacy, and information security, in order to protect the personal data and privacy of IDRYS customers concerning personal data collected and/or transmitted online during the purchase and use of the site by its customers.
The security and privacy of customers' personal data are crucial concerns for IDRYS, as the Data Controller of said personal data. IDRYS has implemented and will continue to implement the necessary measures to ensure that IDRYS is always fully committed to complying with applicable legislation in these matters.
Please read the following text to understand and become aware of how your personal data will be processed by IDRYS.
The purpose of this Policy is to inform and explain the following points:
- What information may be collected about IDRYS site users;
- How IDRYS will use this information;
- When IDRYS may use your personal data to contact you;
- If and under what conditions IDRYS may disclose your personal data to other entities;
- Your rights regarding your personal data that may be processed by IDRYS;
- The entity responsible for collecting your personal data;
- What cookies are, how IDRYS uses them, and how you can manage your preferences regarding them;
- IDRYS' technical and organizational security measures, aiming to guarantee the customer the protection of their personal data against unauthorized access, alteration, or destruction.
The IDRYS website includes options related to social media platforms, including the "Share" or "Follow" buttons for Facebook, Twitter, Instagram, LinkedIn, WhatsApp, and YouTube. The entities responsible for these social media platforms may collect your IP address and the page you are visiting on the IDRYS site, and may install a cookie on your computer/browser to allow the relevant functionality to be executed correctly. Your interactions with these entities will be governed by the privacy policy of the company that provides those platforms and respective services.
The IDRYS website may also include links to other websites whose privacy practices are different from those of IDRYS. If you submit your personal data to any of these sites, your personal data will be managed by the privacy policies of those sites.
Collection and Processing of Personal Data
Personal data is requested when: the customer registers as a user on the IDRYS site, via the respective online form provided for this purpose, makes a purchase in the IDRYS site's online store, subscribes to IDRYS newsletters and/or receives notifications from the IDRYS site, among other services available through the site.
Your navigation through the IDRYS site may also be monitored for statistical purposes, as well as for advertising purposes, namely, targeted advertising.
IDRYS also collects information about your computer's hardware and software. This information may include your IP address, browser type, domain names, access times/time spent using the IDRYS site, viewed content, and referring website addresses.
The categories of personal data that are subject to processing by the Public for the purposes referred to in this Policy are as follows:
- Name;
- Email;
- Telephone number;
- IP address;
- Browser type used;
- Site access time;
- Referring website address;
- Gender;
- Date of birth.
Use and Purposes of Collected Personal Data
Your personal data is collected and necessary to ensure your identity. The provision of data requested during registration on the IDRYS site is mandatory for the customer to use certain available services. The information you provide during registration aims to provide a service more suited to your characteristics and needs and to send information related to the use of services provided by IDRYS.
The customer can update the information provided by them whenever they wish and with full autonomy, in the appropriate section after logging in, by entering their username and password.
Personal data provision operations are properly protected. All information is encrypted and managed with the most advanced security tools.
In addition to the purposes mentioned above, IDRYS may also use your personal data to maintain the quality of the services provided and to obtain general statistics relating to the use of the IDRYS site. For these purposes, IDRYS combines automatically collected data with personal data, such as name and email address.
We use your personal data to ensure that the IDRYS site is suitable for your needs, as well as to:
- manage the IDRYS site;
- improve the IDRYS site to ensure that content is presented in the most effective way for customers;
- analyze the use of the IDRYS site by its users/customers with a view to obtaining general usage statistics, for monitoring trends, marketing, and advertising purposes;
- keep the IDRYS site safe and protected.
IDRYS may also use your personal data within the scope of the services it provides, in particular, to:
- set up the user account;
- provide, execute, and maintain the services;
- process and conclude transactions, as well as to send related information, including transaction confirmations and invoices relating to the acquisition of goods and/or services;
- manage customers' use of the services, as well as to respond to requests for information, comments, customer/user service and support;
- prepare statistics that allow IDRYS to understand how to improve the level of services it provides and, thus, more effectively meet customer expectations.
Your personal data may also be used by IDRYS for IDRYS to communicate with you about products, services, offers, promotions, and events that IDRYS believes may be of interest to you or to send newsletters, in accordance with your preferences defined in this area. However, the customer or user may opt out of receiving such communications from IDRYS at any time by sending an email to info@idrys.com.
As mentioned, IDRYS accepts the challenge and responsibility of protecting the privacy and personal data of all users of the IDRYS site as much as possible. As a rule, IDRYS uses your personal data internally.
Under the terms, and for the aforementioned purposes, IDRYS may contact you for the following reasons:
- in relation to any service or online content you have subscribed to from IDRYS, in order to ensure that IDRYS can provide the services in question, for example, to verify your email when registering on the IDRYS site, or to reset your password;
- in relation to any correspondence you send to IDRYS or any comment you make about IDRYS services;
- to invite you to participate in surveys about IDRYS services (participation will always be voluntary);
- to inform you about any relevant changes to IDRYS policies and practices; and
- for marketing purposes, as indicated below.
IDRYS will only send you marketing communications or contact you for this purpose when you have given your consent.
The personal data referred to may also be processed by IDRYS, in certain cases, in an automated manner, for profiling purposes, aimed at the purposes already identified above, always in accordance with and respecting the applicable personal data protection legislation.
IDRYS will not sell, rent, share, or offer the personal data provided by its customers, except under the terms of the applicable personal data protection legislation and in the situations provided for in this Privacy Policy.
Lawfulness of Personal Data Processing
All processing of personal data carried out by IDRYS is lawful and has a legal basis, either (i) based on your consent regarding the processing of the personal data in question for the respective purposes; or (ii) because the processing in question is necessary for the execution of a contract to which IDRYS and the user/customer, as the personal data subject, are parties, or for pre-contractual steps at the request of the personal data subject in question; or (iii) because the processing is necessary for compliance with a legal obligation to which IDRYS is subject; or (iv) because the processing is necessary for the purposes of the legitimate interests pursued by IDRYS, as the data controller, or by third parties.
Retention of Personal Data
IDRYS will retain your personal data while your registration is active or as necessary for the relevant activity, that is, as long as necessary to provide you with the services subscribed to from IDRYS (and without prejudice to any legal obligation that requires the retention of strictly necessary personal data beyond those retention periods).
If you want to change your personal data or request that it no longer be processed by IDRYS, you can contact us via the following email: info@idrys.com
You always have the option, at any time, to close your account on the IDRYS site.
If you close your account on the IDRYS site, the personal data associated with your account will be deleted without undue delay, with the exception of your personal data that may or must continue to be processed by the Public for remaining purposes — mentioned above — under the respective lawful basis and always taking into account the applicable personal data protection legislation.
IDRYS is solely responsible for the collection of personal data carried out on the IDRYS site and in IDRYS applications. Whenever the customer stops using the services provided by IDRYS, IDRYS assumes no responsibility for the information collected outside its respective electronic pages.
Cookie and Advertising Policy
6.1 What are cookies and how does IDRYS use them?
A cookie is a small information file that is installed in the user's browser and stored on their computer when they visit a site. Cookies are generally used to improve the user experience and site performance.
IDRYS uses cookies to collect and store information within the scope of using the IDRYS site. Each user corresponds to an individual cookie, thus guaranteeing data privacy and security.
Cookies will only be used by IDRYS and their use is limited to the following purposes:
- allow IDRYS to know who the customer is, storing IDRYS account access details and user preferences, and, in this way, provide a better, safer, and personalized service;
- allow IDRYS to estimate the usage levels of the services it provides through the IDRYS site, by collecting and preparing statistics to optimize the functionality of the IDRYS site. The presentation of statistical data is done in an aggregated and not individual manner, not allowing user identification. In this way, it is possible to evaluate the performance of the IDRYS site from a perspective of constant updating and improvement, so that it can meet the preferences and needs of each customer, as a user of the IDRYS site.
6.2 How can you manage your cookies?
The user of the IDRYS site may manage their cookies under the terms described below, however, some or all of the functionalities of the IDRYS site may not work correctly if the user does not allow a certain minimum level of cookies, affecting navigation of the IDRYS site and possibly the level of quality of the services provided.
The different browsers (navigators) allow you to view the cookies that exist on your equipment and inhibit or delete, individually or totally, the cookies.
To obtain and consult more information about cookies, their use, and how to manage your preferences about cookies, you can consult the specific help pages of the different browsers (navigators) or generic pages on this topic, for example:
- www.allaboutcookies.org
- www.microsoft.com/info/cookies.mspx
- Chrome
- Internet Explorer
- Edge
- Mozzila Firefox
- Apple
- Opera
6.3 Advertising on the IDRYS site
IDRYS uses Google Analytics on its site, for anonymous reporting of IDRYS site usage and for advertising on it. If you want Google Analytics to stop monitoring your use of the site, please access the following link for this purpose: tools.google.com/dlpage/gaoptout/
The IDRYS site uses Online Behavioral Advertising (OBA) services, which allows IDRYS to present targeted advertising to users of the IDRYS site based on browsing patterns and how users interact with the IDRYS site, in order to present advertising that is judged to be of interest to each user, in order to personalize the advertising presented on the IDRYS site.
When browsing or using the IDRYS site, some of the cookies that may be installed on the user's computer will be advertising cookies, which allow us to understand what type of sites interests each user, in order to personalize the advertising presented on the IDRYS site.
No OBA used on the IDRYS site will collect personal data such as name, email, address, or telephone number.
IDRYS may also share anonymized data with advertising partners, including companies that provide sponsored content.
The OBA used on the IDRYS site also allows IDRYS and its advertising partners to present targeted advertising to the user based on browsing patterns and interactions with sites other than IDRYS.
If the user of the IDRYS site wishes to exercise their opt-out option for OBA, this does not mean that they will stop being presented with advertising when using the IDRYS site, but only that such advertising will not be customized for each user.
If you wish to consult additional information on this matter, namely, how you can exercise your opt-out possibility, you can consult the following site: www.youronlinechoices.com/pt/
The IDRYS site may contain links to other sites whose access by the user of the IDRYS site may generate revenue for IDRYS. The content presented on the IDRYS site is never, in any way, influenced by IDRYS advertising partners or companies that advertise on IDRYS, nor is it written for the purpose of promoting a product or service, except when clearly identified and presented as “Sponsored Content.”
Transfer of Personal Data to Third Parties
The provision of information or services by IDRYS to its customers and users through the IDRYS site may involve the use of subcontracted third-party services that involve the processing of their personal data, including entities established outside the European Union or the European Economic Area, which may imply access to their personal data by these third parties.
In these circumstances and when necessary, IDRYS will only use subcontracted entities that provide sufficient guarantees to carry out adequate technical and organizational measures so that the processing in question complies with the requirements of the applicable personal data protection legislation with the appropriate level of security for the risk and sensitivity of the personal data in question, and such guarantees and obligations of the subcontractor will be established by contract signed for this purpose between IDRYS and each of these third parties.
Within the scope of the provision of services made available by IDRYS that are subject to payment by the user, and if the user chooses a payment system involving third-party entities (Visa, Mastercard, and Paypal), the personal data strictly necessary for the purpose of validating and making the chosen payment method will be provided to the referred entities.
Transfer of Personal Data to Third Countries or International Organizations
IDRYS may need to transfer collected personal data to a third country outside the European Union (EU) and not included in the list of countries that the EU has already considered to comply with adequate levels of personal data protection. In these cases, IDRYS will ensure that such transfers of personal data are carried out in strict compliance with the applicable legal standards for personal data protection, namely, those arising from the General Data Protection Regulation (GDPR).
Security of your Personal Data
IDRYS takes all necessary and legally required precautions to ensure the protection of the information collected from its customers through the IDRYS site and IDRYS applications, taking into account the state of the art, implementation and execution costs, and the nature, scope, context, and purposes of processing, as well as the risks, of varying probability and severity, to your personal data. In this sense, IDRYS applies the necessary technical and organizational measures to ensure a level of security appropriate to the specific risk in question. These precautions seek to ensure the online and offline security of this information.
Whenever information relating to personal data that appears to be particularly sensitive is collected or used, the data will be encrypted using the SSL protocol.
Under the SSL (Security Sockets Layer), 128 bits protocol, which protects the transmission of all sensitive data over the Internet, all information is treated with maximum security. Your privacy is ensured, and the risk of data interception during communication is significantly or totally reduced.
However, it is the sole responsibility of the customers and users of the IDRYS site to keep their access codes confidential, not to share them with third parties, and, in the particular case of the devices used to access the IDRYS sites, to keep them in safe operating conditions, following the security practices recommended by manufacturers and/or operators, namely the installation and updating of necessary security applications including, among others, anti-virus applications.
Your Rights as a Personal Data Subject under the GDPR
Under the terms of the GDPR, as a personal data subject and in relation to the personal data processed by IDRYS, the IDRYS customer and/or user of the IDRYS site has the following rights, to be exercised under the terms of the GDPR and other applicable personal data legislation:
- The right to access your personal data;
- The right to rectification of your personal data;
- The right to erasure of your personal data;
- The right to restriction of the processing of your personal data;
- The right to data portability of the personal data provided by you;
- The right to object to certain processing of personal data concerning you;
- The right not to be subject to a decision based solely on automated processing.
IDRYS will make efforts deemed appropriate under applicable law to provide, correct, or eliminate your personal data that is subject to processing by IDRYS.
To exercise these rights, as the subject of the personal data in question, you can contact IDRYS via the following email address: info@idrys.com
If the requests are manifestly unfounded or excessive, namely due to their repetitive nature, IDRYS may:
- require the respective personal data subject to pay a reasonable fee taking into account the administrative costs of providing the information or communication, or taking the requested measures; or
- refuse to act on the request.
When processing is based on your consent, the IDRYS customer has the right to withdraw their consent at any time, without compromising the lawfulness of the processing given by IDRYS to their personal data based on the consent previously given.
Changes to the Privacy Policy
This Policy may be updated over time, so it is advisable to consult this Policy whenever you provide personal data to IDRYS.
If you do not agree with any change made to this Policy, we ask that you do not continue to use the IDRYS site to send or, in any way, submit your personal data to IDRYS.
In the event of relevant changes to the Terms and Conditions of use of the IDRYS site or this Policy, particularly changes that affect the purposes for which IDRYS processes its customers' personal data, IDRYS may promote a specific communication for the disclosure of such changes, using, for this purpose, one or more communication channels it has with its users of the IDRYS site.
Contacts