Privacy Policy

Last updated: May 24, 2018.

Open Grow, Lda (from now on, it will be referred to as OPEN GROW), respects the privacy of all users of its websites and online services. In this way, OPEN GROW is committed to ensure the protection of all personal data provided by users. OPEN GROW has a well-defined policy of how data is processed and protected. Please keep up-to-date on any changes to this Privacy Policy through our website.

The website www.opengrow.pt is owned by OPEN GROW, with head offices at Rua Mário Pais da Costa, nº12 - 3515-174 Abraveses, Viseu, Portugal, registered at the Conservatória do Registo Comercial de Viseu under the single number of registration and of legal person 513 181 547.

This Privacy Policy applies only to OPEN GROW’s customers, OPEN GROW’s online services users, as well as to the users of the website www.opengrow.pt, its subdomains and subsites.

This Privacy Policy was written in Portuguese (Portugal). To the extent that, if any translated version of this policy conflicts with the Portuguese (Portugal) version, it will be the Portuguese version that will persevere.

The user may use some sections and/or functionalities provided by the OPEN GROW’s websites and online services, without the disclosure of any personal information. However, when it is necessary to collect personal information to provide services or when user decides to provide some of his personal data, the use of this information and data will be done in compliance with the General Data Protection Regulation - in order to ensure the confidentiality and security of personal data provided.

Who is responsible for your personal data (collection and processing)?

The entity responsible for your personal data is the Portuguese company, OPEN GROW. This company is also responsible for the collection and processing of this data.

Where is your personal data stored?

The personal data collected will be subject to computer processing and will appear in the OPEN GROW’s data base(s). This data is stored within the European Economic Area (EEA). However, such data may be transferred and processed in countries outside the European Economic Area (EEA), when dealing with situations that require the use of personal data by freight carriers in countries outside the EEA. Any transfer of personal data will always be carried out in accordance with applicable laws.

Regarding the customer data management, the personal data collected will be transmitted to third parties, like freight carriers, having as sole and exclusive purpose the realization and complete execution of the services or products purchased by the user, holder of the personal data collected.

What kind of personal data is collected?

By visiting the website www.opengrow.pt, its subdomains and subsites, data may be collected regarding user’s IP address, use of cookies, as well as other Internet tools such as Google Analytics, can collect general information about the users, the pages they visit and their interests.

OPEN GROW may also collect the personal data you provide while using its websites and online services, for example, when placing orders, contacting customer support, filling contact forms, commenting blog posts, submitting reviews about the products from our online store (Open Grow Shop) or applying to OPEN GROW’s contests. Personal data information provided by you may, for example, include contact information, date of birth, and payment information. In addition, certain personal data may be collected from outside sources, such as credit information and address updates, for example from the PayPal.

How is your personal data used?

Your personal data may be used for the following purposes:

• create and manage your customer account at the OPEN GROW’s online store;

• process your orders and returns through the OPEN GROW’s online services;

• send notifications, text based, of the status of the delivery of orders placed;

• get in touch with you in case of issues related to orders and delivery;

• answer any questions you may have and inform you about new services or changes to them;

• send marketing offers, such as newsletters and catalogs;

• notify online contests winners;

• manage your account by performing credit checks;

• data analyzes to provide you with relevant marketing information and offers;

• age validation to make sure you can legally shop online;

• send you surveys in order to give you the possibility to influence the offers and services provided by OPEN GROW;

• testing and improving OPEN GROW’s systems that provides its websites and online services;

• to prevent misuse or improper OPEN GROW’s services usage.

Your personal data will be stored for as long as necessary to fulfill the purposes described above, or for the time required by law. After that time, your personal data will be deleted.

What are your rights?

In accordance with the General Data Protection Regulation, you have the right to request information about your personal data that we maintain in our database(s) at any time. You may also require that such data be rectified, updated or removed. However, we cannot remove your data when there is a legal storage requirement such as accounting rules or when there are other legitimate reasons to keep the data, such as unpaid debts. You may also withdraw your consent to the use of your data for marketing purposes at any time. In order to exercise the mentioned rights, you can contact us by email to support@opengrow.pt or by sending a letter to the following address:

How does OPEN GROW protect your personal data?

OPEN GROW applies technical and organizational measures to protect your data against loss, manipulation and unauthorized access. We continuously adapt these measures according to technological and development progress.

Children’s personal data protection

OPEN GROW does not collect personal data from children. In this way, it is mandatory to provide the date of birth when creating a customer account at OPEN GROW’s online store and it is not possible to create an account if a birth date from a person under 18 years old is provided. Despite this prevention measure and OPEN GROW efforts to do not collect any personal data from children, it is the parent/legal guardian responsibility to ensure the children’s privacy. This way they should do everything possible to ensure children do not access to online content for which they are not authorized to use, as well as ensuring an authorization for personal data collection when using websites and online services that collects this data.