360imprimir has implemented several physical, electronic, and procedural measures to safeguard your privacy, while also preserving your personal information.

360imprimir is a registered trademark under which the company BIZAY, SA. operates, with headquarters at Hipólito Center Park, Fração F, 2.º A, Bairro Arenes, 2560-628, Torres Vedras.

For 360imprimir, the privacy of your data is important. Therefore, we thank you for the trust you have placed in us. To that extent, 360imprimir has implemented several physical, electronic and procedural measures that allow safeguarding your privacy, preserving your personal information, we also guarantee that your data will be processed in accordance with its purposes and the rights that the legislation grants you, guided by the legal principles in force for the area of privacy and protection of personal data, namely the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council - General Data Protection Regulation (“GDPR”) – and other applicable legislation on privacy and data protection, including national legislation that complements the GDPR. It was in this sense that we created this privacy policy to ensure that the User knows what information we collect and how we use it. This privacy policy applies to all our current and former customers and visitors to our website. Thus, when visiting and/or using our website, you should read and accept the terms of our Privacy Policy, agreeing to be bound by it and everything set out below.

This privacy policy explains the conditions under which all personal information that you provide to us when you visit and/or use our website is processed. Any and all personal information that we may ask you for as a visitor and/or User of our website will be treated in accordance with the privacy policy of 360imprimir and will not be shared with third parties, except in cases stipulated in this same privacy policy.

By using our website, the User consents to the collection, storage, disclosure and use of their data in accordance with the provisions of this privacy policy, and accepts its terms and conditions.

This privacy policy does not apply to your personal information when it becomes visible to third parties due to the provision of personal information that is disclosed when using certain features provided by our website, such as posting a comment or message on the Website. In this way, if the User's comment or message contains personal data and is published by the User on a publicly accessible page, the data may be noted by third parties and, as a result, the User may receive unsolicited messages from them. Content or data that the User uploads to our website that is visible to third parties is not considered personally identifiable data subject to this privacy policy, and is subject to the privacy policies of third parties. The User should always act with caution when publishing this data.

360imprimir reserves the right to revise and modify this privacy policy occasionally with a view to improvement, publishing the revised version on its website. We also encourage the User to check and review this privacy policy occasionally, so that they are aware of the changes applied.

360imprimir informs the User that by accepting this privacy policy, they also accept the privacy policy of the other countries in which 360imprimir operates within the European Economic Area.

It further informs that the content of the privacy policy of all websites of countries within the European Economic Area, including these, is totally the same, being distinct only in the language in which they are presented. However, in case of divergence between the privacy policy of the different countries in which it operates, 360imprimir informs that the Portuguese version shall prevail.

BIZAY, SA., registered at the Commercial Registry Office under the single registration and corporate identity number 509.980.422, is the entity responsible for processing the personal data of its customers and/or potential customers. For matters related to the processing of your personal data, you should contact us through the following means: Address: Hipólito Center Park, Fração F, 2.º A, Bairro Arenes, 2560-046 Torres Vedras Phone: [●] Email: [email protected]

Under the terms of the GDPR, Personal Data is any information, of any nature and in any medium, relating to an identified or identifiable natural person. An identifiable person is considered to be a person who can be identified directly or indirectly, for example by name, identification number, location data, an electronic identifier or other elements that allow the identification of that natural person.

This Privacy Policy applies to the personal data we receive in the context of the commercial relationship with customers, potential customers or suppliers, in the context of compliance with applicable legal obligations, as well as to the personal data of users of our site.

In this section of the privacy policy, 360imprimir intends to describe the categories of information it collects.

Information collected automatically by 360imprimir:
Whenever you visit our website, we automatically collect information about your transactions and your use of the same website

If you are a registered customer of 360imprimir or if the customer uses the product editor, the data that is automatically collected will be attached to your personal information.

The purpose of this collection of information is the need to carry out internal research carried out by 360imprimir to know the interests and preferences of its Users, in order to better understand their needs and priorities and, thus, to improve the services provided. 360imprimir may also use this information to communicate news about the platform, promotions, discounts and other information that is considered of interest to the user.

Information collected automatically:
The User may provide us with certain personally identifiable data when:

• Registers to obtain a 360imprimir account;
• Uses the product editor;
• Orders products or gift vouchers;
• Requests customer support services or sends us any other communication;
• Participates in sweepstakes or contests;
• Signs up to receive special offers, or receives them;
• Signs up to receive newsletters, email alerts and special offers;
• Answers surveys;
• Completes the 360imprimir representative agreement;
• Fills in our leaflets for attracting new customers;
• Other situations where Users freely and spontaneously provide their personal data to 360imprimir;

All those data that are necessary for the formalization, execution and management of the contracted services may be collected, including, but not limited to:

• Contact information: name; address; email; phone/mobile phone; billing address; shipping address;
• Personal information: citizen card / identity card number; tax identification number; bank account details; marital status; profession; employing entity;
• Identification data: customer number; contract number;
• Customer history: customer satisfaction ratio; services provided; place(s) where services are provided; purchase and payment history;
• Others: details about devices; IP addresses;
• Note that the User may also provide us with this data about other people, including their email addresses and phone numbers, if they email a product to a friend, forward a friend to the website or our promotions, or purchase products by entering a friend's information.

Cookies:
Our website uses cookies and other files similar to cookies to improve the quality of the website and the services provided to the User. The cookies used by 360imprimir, on all its Websites, do not collect personal information that allows the user to be identified, only storing generic information, namely, the way and/or place of access of the user and how they use the Websites. Cookies only retain information related to the User's preferences. The cookies used by our website are described below:

1. Permanent cookies: These are cookies that are stored at the browser level of your electronic access devices (PC, mobile and tablet) and that are used whenever you make a new visit to the 360imprimir website. They are generally used to direct navigation to the user's interests, allowing us to provide a more personalized service;
2. Session cookies: These are temporary cookies that remain in the browser's cookie file until you leave the website, so no record is left on the user's hard drive. The information collected by these cookies is used to analyze site traffic patterns, allowing us to identify problems and provide a better browsing experience;
3. Analysis cookies: These are cookies that do not collect or store personal information of the user (for example, name or address), so they cannot be used to identify users. On the contrary, they consist of cookies that allow quantifying the number of users and performing the measurement and statistical analysis of how users use the offered service. Thus, they allow 360imprimir to analyze navigation on its website, with the aim of improving the provision of products or services that we make available to you.

For more information about the cookies used by 360imprimir, we advise you to read our Cookie Policy.

By registering as a User, the User authorizes 360imprimir to use the personally identifiable information provided to:

• Offer the features and functionalities of the website;
• Satisfy the requests for products and services made by the User;
• Pay income earned with 360imprimir (commissioning model);
• Communicate with the User about the status of their orders and other information requests related to our products and services;
• Send the User information about our products and services;
• Internal business purposes of 360imprimir, such as data analysis, conducting audits, etc;
• Help 360imprimir create content that is more relevant to the User;
• Inform the User about the results of sweepstakes, contests and other promotions;

360imprimir uses the email address provided by the User to communicate with them about their account and to send certain warning messages, as well as to occasionally send marketing messages and notifications. You can unsubscribe from communications in your account by clicking on the unsubscribe link included in the footer of all emails sent by 360imprimir.

By unsubscribing from 360imprimir communications, the User will no longer receive all our information about our products and services, about the results of our sweepstakes, contests and promotions, however, temporarily, they may continue to receive emails relating to their customer account with 360imprimir. This functionality is being reviewed and soon, as soon as you unsubscribe, the User will stop receiving any and all communications from 360imprimir.

360imprimir users can refer friends/family to receive communications from it. 360imprimir reserves the right to use the data of the referred party, provided by the referrer for marketing actions, unless otherwise authorized.

We will use non-personally identifiable data to monitor the use and performance of the website, in order to learn more about how people use the website and, thus, improve our products and services and significantly improve the User's experience on our website.

In general, the personal data collected is intended for the management of the contractual relationship, the provision of the contracted services, the adaptation of our services to your needs and interests, and so that we can inform you about our events and our services/products.

Under the terms of the GDPR, the processing of personal data must have a legal basis that legitimizes the referred processing, which may be, among others:

• Consent: when you have your express consent – in writing, orally or through the validation of an option - and prior and if that consent is free, informed, specific and unequivocal. Examples include your consent to send direct marketing messages; profiling; recording calls;
• Execution of contract and pre-contractual measures: when the processing of personal data is necessary for the conclusion, execution and management of the contract concluded with 360imprimir, such as for using the website, information requests, preparation of service proposals, provision of services, management of contacts/complaints, invoicing/collection/payments;
• Compliance with legal obligation: when the processing of personal data is necessary to comply with a legal obligation to which 360imprimir is subject, such as the communication of data to police, judicial, tax or regulatory entities;
• Legitimate interest: when the processing of personal data corresponds to a legitimate interest of 360imprimir or third parties, such as improving service quality, detecting fraud, when the reasons for its use should prevail over the rights of data subjects.

We process and store your personal data to the extent necessary to comply with our contractual and legal obligations. There are cases in which the law requires the processing and conservation of data for a minimum period of time, namely for 10 years in the case of data necessary for information to the Tax Authority, for accounting, tax or related to commercial bookkeeping. In other cases, we only keep your data for the period that is necessary within the scope of the purpose for which it was collected or, if it exists, for the period of time authorized by the National Data Protection Commission (CNPD). Once the maximum retention period has been reached, your personal data will be irreversibly anonymized (and the anonymized data may be retained) or will be securely destroyed.

But, whenever there is no specific legal obligation, then the data will only be processed for the period necessary to fulfill the purposes that motivated its collection and preservation and always in accordance with the law, the guidelines and decisions of the CNPD. In the context of call recording, and under the terms of the regulatory authorization, 360imprimir will keep the recordings for proof of the commercial transaction and communications within the scope of the contractual relationship for the term of the contract agreed between the parties plus the period of limitation and expiration, which is 6 months.

360imprimir may also record and retain calls in order to monitor the quality of service and based on the Customer's consent, but for this purpose the calls will only be retained for a maximum period of 30 days.

With regard to video surveillance of its facilities, 360imprimir will only keep recordings of images and respective personal data for a maximum period of 30 days.

360imprimir may maintain other personal data for periods longer than the duration of the contractual relationship, either based on its consent, or to ensure rights or duties related to the contract, or because it has legitimate interests that support it, but always for the period strictly necessary for the realization of the respective purposes and in accordance with the guidelines and decisions of the CNPD.

As a rule, 360imprimir does not share personal data about the User with other non-affiliated people or companies without the User's consent. However, 360imprimir provides data to its agents and its service providers and other trusted service providers for limited purposes, such as:

• Fulfilling customer orders and processing credit card transactions;
• Offering certain products and services;
• Providing customer support services;
• Managing information on our behalf;
• Improving the features and functionalities of the website.

In these cases, we require these people to commit to using the data exclusively for the purposes for which we provide it and in accordance with our privacy policy. The partners are legally and contractually obliged to respect the privacy policy of 360imprimir.

By registering on the website, signing up for a promotion (e.g., a sweepstake or contest) or a service that we provide jointly with a third party, the User agrees that we may provide data (such as the User's name, email address and account activity) to these third parties, provided they are duly authorized by the customer.

360imprimir provides its sellers with the first name and the city/district/country of residence of 360imprimir customers who have purchased that seller's products. 360imprimir may also disclose the customer's data (including the User's name, addresses, phone number and account activity) whenever, in its sole discretion, it deems such disclosure necessary or appropriate to:

• Comply with the law;
• Comply with subpoenas, warrants, court orders, authority investigations or other court acts;
• Enforce or apply the terms of any of our User or license agreements;
• Investigate or respond to allegations of fraud, intellectual property infringement or other illegal activities;
• Conduct investigations in case of fraud or similar allegations;
• Protect the rights, assets or safety of 360imprimir and our Users, or third parties;
• Protect the operations of 360imprimir;
• Allow 360imprimir to trigger the available means of protection or limit the damages in which it may incur;

The User can access third party websites directly from our website. However, this privacy policy does not apply when the User accesses third party websites. 360imprimir cannot control how third parties use the personal data that the User discloses to them, so the User should carefully read the privacy policy of the third party website they visit before using it or disclosing their personal data to the respective service provider.

Within 360imprimir, the employees who need them to fulfill the contractual / pre-contractual and legal diligences or obligations have access to your data.

360imprimir may also process data outside Portugal and the European Economic Area (EEA), where data protection laws may offer less protection than in Portugal and the EEA. However, it will use the security mechanisms described below.

Whenever you open an account on the 360imprimir website, you are asked to choose a password to ensure the protection of your data as well as to enter an email address.

The User is responsible for preserving the confidentiality of their password and User account, and is also responsible for all acts performed through the use of their password or User account. The User may change their password as many times as they want by following the instructions presented for this purpose in their personal area.

The User undertakes to:

1. Immediately notify 360imprimir of any unauthorized use of the User account, or any other security breach;
2. Ensure the exit of their User account at the end of each session.

360imprimir cannot be held responsible for the losses or damages arising from the User's non-compliance with this clause.

When the User places order requests or accesses their account data, we use commercially adequate and generally accepted organizational technical security measures to protect all data we collect about the User.

In addition and as already mentioned, the User's 360imprimir account data is protected by a password, in order to ensure the privacy and security of the User. The User must always take steps to protect the confidentiality of the password they choose in order to avoid unauthorized access to their password and their computer.

The User may choose not to provide 360imprimir with certain information, but this may result in the impossibility of using certain features of our website, as the referred information may be necessary for the User to:

1. Register as a member;
2. Participate in a contest, promotion, survey or sweepstake;
3. Ask a question;
4. Or initiate other transactions on our website.

In addition, 360imprimir avoids unauthorized access or disclosure, using, for this purpose, a variety of security measures, including encryption and authentication tools, to help protect and maintain the security, integrity and availability of your personal data. We highlight the following measures:

1. Physical security measures:
   1. Security of Facilities: entry into the facilities (including subcontracted entities) is restricted to workers, and, in exceptional cases, to individuals who are duly authorized by 360imprimir.
   2. Video Surveillance Cameras, to ensure the physical security of workers and documents;
   3. There is a data protection policy, enshrined in the code of conduct of 360imprimir, which applies to all its workers.
2. Logical security measures:
   1. Access to computer systems is protected by login and password, with distinct security levels and which must be periodically changed;
   2. The entire computer network of 360imprimir is protected by antivirus, firewalls and monitoring of installed software;
   3. Use of SSL in the domain;
   4. Use of encryption technology in the collection or transfer of confidential data.

360imprimir, in compliance with the provisions of the GDPR, guarantees to the owners of personal data the following rights:

1. Right of Access: right to obtain information about which of your personal data are processed, what the purposes of the processing are, what the retention periods are, among others.
2. Right of Rectification: right to request the rectification of your personal data that is inaccurate or request that incomplete personal data be completed, such as the address, the NIF, the email, the telephone contacts, or others.
3. Right to Erasure: right to obtain the erasure of your personal data, provided that there are no valid grounds for its retention, such as the cases in which 360imprimir is obliged to retain the data to comply with a legal obligation or because there is a legal process underway.
4. Right to Portability: right to receive the data you provided to us in a digital format of common use and automatic reading.
5. Right to Limitation: right to request the limitation of the processing of your personal data, in the form of: (i) suspension of the processing or (ii) limitation of the scope of the processing to certain categories of data or processing purposes.
6. Right to Withdraw Consent or Right of Opposition: right to oppose or withdraw your consent, at any time to a data processing that is based solely on the referred consent, such as, in the case of data processing for marketing purposes, provided that there are no legitimate interests that prevail over your interests, rights and freedoms, such as the defense of a right in a legal process.
7. Right to complain: right to file a complaint with the national control authority, the CNPD.

If the User has doubts related to this Privacy Policy, as well as about the exercise of the aforementioned rights (for example, about the type of data that is stored, or wants to obtain a copy, request the deletion or alteration of this data), they should contact us through the email address [email protected].

After receiving documents proving the User's identity, we will provide them with the data, and the User may request the deletion, rectification or alteration of all or any data.

Unless otherwise indicated, the current privacy policy of 360imprimir applies to all information that 360imprimir maintains about the User and the User's account.