What data will be collected?
When subscribing to the SITF GLOBAL, LDA services, using its platforms, or making Tax Free purchases, SITF GLOBAL, LDA may collect and process information about the user. This data may include personal information, details about completed purchases, data related to the use of the Tax Free process, as well as other data provided or collected (including data related to the use of devices connected to the internet).
How will the data be used and what is the basis for its processing?
The collected data will be used to manage the services provided by SITF GLOBAL, LDA, including the processing and execution of VAT refund processes. This processing is necessary to fulfill contractual obligations between SITF GLOBAL, LDA and the user, as well as to comply with legal obligations with the competent authorities.
Legal requirements and/or contractual obligations may justify the collection and processing of certain personal data. During collection, the user will be informed about mandatory data fields. If the user chooses not to provide the required data, SITF GLOBAL, LDA will not be able to provide the service.
Contact details (such as email or phone number) may be used to inform the user about services, offers, or products that may be of their interest. Whenever necessary, SITF GLOBAL, LDA will obtain prior consent for the processing of such data.
The collected data will also be analyzed to understand how the user interacts with the services, identify purchasing patterns, and send personalized offers, discounts, or suggestions based on the user’s purchase history and browsing behavior.
The supply of more sensitive personal data, such as passport details or bank account number, will be used for refund processing, transaction registration, compliance with reporting obligations to competent authorities. In general terms, the information will be used in order to provide the contracted service. By using SITF GLOBAL, LDA services, the user acknowledges and consents to the collection and processing of this data in accordance with this Privacy Policy.
If data is collected by third parties, appropriate precautions will be taken to ensure that the third party has obtained the necessary consent, as required by law.
With whom will the data be shared?
The data may be shared within the SITF GLOBAL, LDA network of companies and with its partners. Data sharing will be carried out for the processing of VAT refunds or to improve the service offerings.
The data may also be shared with:
- Tax authorities, customs, and other entities responsible for VAT refunds, as well as financial institutions, when necessary;
- Companies, entities, or suppliers directly involved in processing the monetary transfer of the refund to the user, such as, but not limited to, banks, payment processing companies, and card payment companies;
- Partner companies and suppliers, such as advertising service providers, data analytics providers, and others, to send offers and advertisements of interest to the user;
- Professional consultants to ensure compliance with legal and regulatory obligations;
- Regulatory entities, governmental, or other authorities in case of legal obligations or to protect the rights of the user or third parties;
- Any third party that acquires, or to whom SITF GLOBAL, LDA transfers its assets or business operations. In such cases, measures will be taken to ensure that the data is handled consistently with this Privacy Policy.
Most data will be stored and processed within the European Union, but it may be transferred to countries outside the EU in compliance with data protection legislation, implementing the necessary measures to ensure data security.
Data storage and retention
The data will be retained for as long as the contractual relationship with the user exists. After the relationship ends, the data may be kept for an additional period to:
- Comply with legal record retention requirements;
- Defend or respond to existing or potential legal claims;
- Address complaints regarding the services provided.
Personal data will be deleted when it is no longer necessary for the purposes for which it was collected, unless there is a legal obligation to retain it.
International data transfer
Personal data may be transferred outside the European Union to countries where the legal protection of personal data may be lower than that of European legislation. In such cases, appropriate safeguards, such as contractual clauses, will be implemented to ensure that personal data is adequately protected.
User rights
Under certain circumstances, the user may have the right to:
- Access their personal data and correct inaccurate information;
- Request the deletion or restriction of the processing of their data;
- Oppose to the processing of their data, particularly regarding direct marketing and automated profiling;
- Request the portability of their personal data.
To exercise any of these rights, the user may contact SITF GLOBAL, LDA. Please refer to the contacts provided at the end of this Privacy Policy.
If the user believes that SITF GLOBAL, LDA is unable to resolve an issue or concern, they may file a complaint with the local data protection authority.
Contact
If there are any questions about how personal data is processed or the user wishes to exercise their rights, they may contact the Data Protection Officer (DPO) of SITF GLOBAL, LDA at dpo@sitaxfree.com.
This Privacy Policy has been drafted in Portuguese.
In case of any doubt or discrepancy in interpretation, the Portuguese version shall prevail.