Privacy Policy
Effective Date: October 15, 2025
IS.Retail Lda (hereinafter referred to as “ISRETAIL”) would like to inform you about how we handle your personal data when you use our website. This Privacy Policy explains in detail how we collect, use, store, share, and protect the personal data you provide to us as a user of www.isretail.eu.
The privacy of your data is very important to us. Therefore, we would like to share with you our data protection principles:
- We never request more personal information than is strictly necessary to provide the services requested by the user.
- We never share personal information with third parties, except to comply with a legal obligation or when the user has expressly authorized us to do so.
- We do not use your data for purposes that are incompatible with those for which they were collected.
Who is responsible for processing your data?
The data controller of the personal data collected through this website is ISRETAIL, company number 504465597, with registered office at Travessa do Forte de S. Pedro, 1, Paço de Arcos (Portugal), registered with the Commercial Registry Office of Cascais.
For any questions or requests related to the protection of personal data, you may contact ISRETAIL, as the data controller, through the following means: 📧 Email: dpo@isretail.eu
What personal data does ISRETAIL access?
The categories of data processed are:
Identification and contact data: name, phone number, email address and/or postal address.
Professional data: employer name, position, business sector, and any other information provided within your relationship with ISRETAIL.
Career data: work experience, educational background, and any additional information you may provide in your CV.
Technical data: information derived from the use of digital services, such as IP address, session identifiers, support logs, and technical details required for troubleshooting.
The personal data processed will be those provided by the user to ISRETAIL through the contact form and/or by any other means (chat, WhatsApp, telephone, email, Instagram, LinkedIn, Twitter, Facebook, etc.).
If user data are collected through a social network, the Privacy Policy applicable shall be that of the respective social network, and ISRETAIL shall not be held responsible in that regard.
For what purposes do we process your data, what is the legal basis, and how long do we keep them?
In compliance with Regulation (EU) 2016/679 of 27 April 2016 (the “General Data Protection Regulation” or “GDPR”), ISRETAIL processes your personal data lawfully and transparently for the following purposes:
1. Within the scope of commercial relations
Purpose of processing: To respond to your questions, requests, or inquiries (including remote demonstrations), manage any expression of interest in ISRETAIL products, and, if applicable, register you as a client.
Legal basis: Execution of pre-contractual or business relations (Art. 6.1.b GDPR).
Data retention: Your data will be processed for as long as necessary to fulfill the purpose for which they were collected. Once the purpose is fulfilled, your data will be blocked for the legally required retention period and then permanently deleted.
Recipients: User personal data will not be disclosed.
2. Provision of contracted services
- Purpose of processing: To provide the contracted services, maintain the contractual relationship, invite you to participate in satisfaction surveys, and send you relevant information about ISRETAIL’s updates and services.
- Legal basis: Performance of the service contract (Art. 6.1.b GDPR) and legitimate interest (Art. 6.1.f GDPR).
- Data retention: If you contract our services, your data will be stored for the duration of the contractual relationship and, in any case, for the period required by applicable tax regulations.
- Recipients: Your personal data will only be disclosed to financial institutions for invoice processing or to debt collection companies in case of non-payment of services.
3. Compliance with legal obligations
Purpose of processing: To comply with ISRETAIL’s legal obligations, including tax, accounting, commercial, data protection, or other regulatory requirements that may be imposed by administrative or judicial authorities.
Legal basis: Compliance with a legal obligation applicable to ISRETAIL (Art. 6.1.c GDPR).
Data retention: Data will be stored for the statutory limitation periods applicable in each case, after which they will be permanently deleted.
Recipients: Data may be disclosed to competent public authorities, courts, or other bodies when required by law. Certain legal, tax, or accounting service providers may also access data as processors under Article 28 of the GDPR.
4. Technical support and customer service management
Purpose of processing: To manage and resolve technical incidents, functional queries, and support requests submitted by clients, including remote assistance, request tracking, and resolution follow-up.
Legal basis: Execution of the service contract (Art. 6.1.b GDPR).
Data retention: Throughout the duration of the contractual relationship and, thereafter, for a maximum of five (5) years in a restricted (blocked) state, to address potential liabilities arising from the service provision.
Recipients: Data will not be shared with third parties. However, certain technology providers that deliver support, hosting, or system maintenance services may access data as processors under Article 28 GDPR.
5. Recruitment processes
Purpose of processing: To manage your CV for recruitment processes at ISRETAIL.
Legal basis: Implementation, at the applicant’s request, of pre-contractual measures or the intention to conclude a contract (Art. 6.1.b GDPR).
Data retention: Your data will remain active in ISRETAIL’s candidate database for one (1) year from the date of receipt of your CV. After this period, your data will be deleted.
Recipients: Your personal data may be shared with employment agencies to facilitate selection and recruitment processes. Certain service providers may also assist in these processes, acting as processors on behalf of ISRETAIL under appropriate contractual agreements.
Will your personal data be processed outside the European Economic Area (EEA)?
Whenever a transfer occurs outside the EEA, it will be based on the European Commission’s Standard Contractual Clauses (pursuant to Decision 87/2010/EC or its future replacements), ensuring that your personal data is afforded a level of protection equivalent to that within the EEA.
What are your rights as a data subject?
You have the right to request access to your personal data, rectification of inaccuracies, erasure, restriction of processing, objection to processing, portability of your data, and to not be subject to automated individual decision-making.
Access: To confirm whether ISRETAIL processes your data, to know what data are processed, for what purpose, for how long, their source, and whether they have been or will be disclosed to third parties.
Rectification: To request the correction of inaccurate data and completion of incomplete data.
Erasure: To request deletion of data when they are inadequate, excessive, or no longer necessary for the purposes collected, including the right to be forgotten.
Objection: To object, in certain circumstances, to the processing of your personal data or request that processing be suspended.
Restriction: To request, under specific conditions, that your data be stored but not processed further, except for legal claims or defense.
Portability: To receive your data in a structured, commonly used, machine-readable format and transmit them to another controller, where technically feasible.
No automated decisions: To not be subject to decisions based solely on automated processing (without human intervention) that may significantly affect you, including profiling.
You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise any of these rights, you may contact us by email at dpo@isretail.eu, with the subject “Data Protection” and indicating the right you wish to exercise.
The exercise of these rights is free of charge, except where requests are manifestly unfounded or excessive.
Finally, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) at [https://www.cnpd.pt/], if you believe that ISRETAIL has not processed your personal data in accordance with the applicable law.