360imprimir has implemented various physical, electronic, and procedural measures to safeguard your privacy while preserving your personal information.

360imprimir is a registered trademark under which the company BIZAY, SA. operates, with headquarters at Hipólito Center Park, Fração F, 2.º A, Bairro Arenes, 2560-628, Torres Vedras.

At 360imprimir the privacy of your data is important. Therefore, we appreciate the trust you have placed in us. Consequently, 360imprimir has implemented various physical, electronic and procedural measures to safeguard your privacy, while preserving your personal information, and we also ensure that your data will be processed in accordance with its purposes and the rights established by law, will be guided by the legal principles existing in the scope of privacy and personal data protection, in particular the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council - General Data Protection Regulation ("GDPR") - and other applicable legislation on privacy and data protection, including national legislation that complements the GDPR. That is why we have created this privacy policy to ensure that you know what information we collect and how we use it. This developed privacy policy applies to all our customers and visitors to our website, both current and past. Therefore, when you visit and/or use our website, you must read and accept the terms of our Privacy Policy, committing to comply with it and everything established below.

This privacy policy explains the conditions under which all personal information you provide to us when you visit and/or use our website is treated. All personal information that we request from you as a visitor and/or user of our website will be treated in accordance with the privacy policy of 360imprimir and will not be shared with third parties, except in the cases stipulated in this same privacy policy.

By using our website, the User consents to the collection, storage, disclosure and use of his/her data in accordance with the provisions of this privacy policy, and accepts the terms and conditions thereof.

This privacy policy does not apply to your personal information when it becomes visible to third parties due to the provision of personal information that is disclosed when using certain features provided by our website, such as posting a comment or message on the website. Thus, if the User's comment or message contains personal data and is published by the User on a publicly accessible page, the data may be taken into account by third parties and, consequently, the User may receive unsolicited messages from them. The contents or data that the User uploads to our website that are visible to third parties are not considered personally identifiable data subject to this privacy policy and are subject to the privacy policies of third parties. The User should always act with caution when publishing this data.

360imprimir reserves the right to revise and modify this privacy policy from time to time in order to improve it by posting the revised version on its website. We also encourage you to review this privacy policy from time to time to be aware of any changes that have been made.

360imprimir informs you that by accepting this privacy policy, you also accept the privacy policy of other countries in which 360imprimir operates within the European Economic Area.

You should also note that the content of the privacy policy of all websites in countries within the European Economic Area, including the current ones, is completely coincident, differing only in the language in which they are presented. However, in case of divergence between the privacy policies of the different countries in which it operates, 360imprimir informs that the Portuguese version should prevail.

BIZAY, SA., registered in the Commercial Registry under the single registration number and legal entity 509.980.422, is the entity responsible for the processing of personal data of its customers and/or potential customers. For questions regarding the processing of your personal data, you can contact us by the following means: Address: Hipólito Center Park, Fração F, 2.º A, Bairro Arenes, 2560-046 Torres Vedras Phone : [●] E-mail: [email protected]

Under the GDPR, Personal Data means any information, of any nature and in any medium, relating to an identified or identifiable natural person. A person shall be considered identifiable when he/she can be identified directly or indirectly, for example by means of his/her name, identification number, location data, electronic identifier or other elements that allow identifying that natural person.

This Privacy Policy applies to the personal data we receive as part of our business relationship with customers, prospective customers or suppliers, as part of our compliance with applicable legal obligations, as well as to the personal data of users of our site.

In this section of the privacy policy, 360imprimir intends to describe the categories of information collected from you.

Information collected automatically by 360imprimir:
Each time you visit our website, we automatically collect information about your transactions and your use of the same website.

If you are a registered customer of 360imprimir or if you use the product editor, the data that is automatically collected will be attached to your personal information.

The purpose of this collection of information is to carry out an internal investigation conducted by 360imprimir in order to know the interests and preferences of its Users, better understand their needs and priorities and, in this way, improve the services provided. 360imprimir may also use this information to communicate platform news, promotions, discounts and other information that is deemed to be of interest to the user.

Information collected automatically:
You may provide us with certain personally identifiable information when:

• Register for a 360imprimir account;
• Use the product editor;
• Order products or gift certificates;
• Request customer service or send us any other communication;
• Participate in sweepstakes or contests;
• You sign up to receive special offers, or receive them;
• Sign up to receive newsletters, email alerts and special offers;
• Answer the questions;
• Fill out the 360imprimir representative agreement;
• Fill out our new customer brochures;
• Other situations in which the User provides his/her personal data to 360imprimir freely and spontaneously;

All data necessary for the formalization, execution and management of the contracted services may be collected, including, but not limited to:

• Contact information: name; address; e-mail; telephone/mobile; billing address; shipping address;
• Personal data: citizen card/identity card number; taxpayer number; bank details; marital status; profession; work entity;
• Identification data: customer number; contract number;
• Customer history: customer satisfaction index; services provided; local services provided; purchase and payment history;
• Other: details about devices; IP addresses;
• Please note that you may also provide us with this information about other people, including their email addresses and telephone numbers, if you email a product to a friend, forward a friend to the website or our promotions, or purchase products by entering a friend's information.

Cookies:
Our website uses cookies and other similar files to improve the quality of the website and the services provided to you. The cookies used by 360imprimir, in all its websites, do not collect personal information that allows the user to be identified, retaining only generic information, namely the way and/or place of access of the user and the way in which the websites are used. Cookies only retain information related to the User's preferences. The cookies used by our website are described below:

1. Permanent Cookies: These are cookies that are stored in the browser of your electronic access devices (PC, mobile and tablet) and are used each time you visit the 360imprimir website again. They are generally used to target navigation to the user's interests, which allows us to provide a more personalized service;
2. Session Cookies: These are temporary cookies that remain in the browser's cookie file until you leave the website, so there is no record on the user's hard drive. The information collected by these cookies is used to analyze site traffic patterns, which allows us to identify problems and provide a better browsing experience;
3. Analysis Cookies: These are cookies that do not collect or store personal information about you (e.g. name or address) and, therefore, cannot be used to identify you. On the contrary, they consist of cookies that allow quantifying the number of users and perform the measurement and statistical analysis of how users use the service offered. In this way, they allow 360imprimir to analyze the navigation through its website, with the aim of improving the offer of products or services that we offer you.

For more information about the cookies used by 360imprimir, we advise you to read our Cookies Policy.

By registering as a User, the User authorizes 360imprimir to use the personally identifiable information provided to:

• Offer the features and functionality of the website;
• Fulfill requests for products and services made by the User;
• Pay for income earned with 360imprimir (commission model);
• Communicate with the User about the status of their orders and other requests for information related to our products and services;
• Send the User information about our products and services;
• 360imprimir's internal business purposes, such as data analysis, auditing, etc;
• Helps 360imprimir create content that is more relevant to the user;
• Inform the User about the results of sweepstakes, contests and other promotions;

360imprimir uses the email address provided by You to communicate with You about Your account and to send certain warning messages, as well as to send marketing messages and notifications from time to time. You can unsubscribe from your account communications by clicking on the unsubscribe link included in the footer of all 360imprimir emails.

By unsubscribing from 360imprimir communications, the user will stop receiving all our information about our products and services, about the results of our sweepstakes, contests and promotions but, temporarily, may continue to receive emails regarding their customer account with 360imprimir. This functionality is being revised and briefly, so if the user unsubscribes, he/she will not receive any communication from 360imprimir.

360imprimir users may refer friends/family to receive communications from 360imprimir. 360imprimir reserves the right to use the referral data provided by the sender for marketing purposes, unless otherwise authorized.

We will use non-personally identifiable information to monitor website usage and performance in order to learn more about how people use the website and thus improve our products and services and significantly improve the user experience on our website.

In general, the personal data collected is intended for the management of the contractual relationship, the provision of contracted services, the adaptation of our services to your needs and interests, and so that we can inform you about our events and our services/products.

According to the GDPR, the processing of personal data must have a legal basis that legitimizes such processing, which may be, among others:

• Consent: when you have your express consent -in writing, orally or through the validation of an option- and prior consent and if that consent is free, informed, specific and unequivocal. Examples of this are your consent to send direct marketing messages, profiling and call recording;
• Execution of the contract and pre-contractual due diligence: when the processing of personal data is necessary for the conclusion, execution and management of the contract entered into with 360imprimir, such as for the use of the website, requests for information, the preparation of service proposals, the provision of services, the management of contacts and claims, invoicing, collection and payment;
• Compliance with legal obligations: when the processing of personal data is necessary to comply with a legal obligation to which 360imprimir is subject, such as the communication of data to law enforcement, judicial, tax or regulatory bodies;
• Legitimate interest: when the processing of personal data corresponds to a legitimate interest of 360imprimir or third parties, such as improving the quality of service, fraud detection, where the reasons for its use must prevail over the rights of the data subject.

We process and store your personal data to the extent necessary to comply with our contractual and legal obligations. There are cases in which the law requires the processing and retention of data for a minimum period of time, of 10 years in the case of data necessary for information to the Tax Administration, for accounting, tax or commercial purposes. In other cases, we keep your data only for as long as is necessary for the purpose for which it was collected or, where applicable, for the time authorized by the National Data Protection Commission (CNPD). Once the maximum retention period has been reached, your personal data will be irreversibly anonymized (anonymized data may be retained) or securely destroyed.

However, when there is no specific legal obligation, the processing of data will be done only for the time necessary to fulfill the purposes for which it was collected and stored and always in accordance with the law, guidelines and decisions of the CNPD. In the context of call recording and in accordance with regulatory authorization, 360imprimir will retain the recordings as evidence of the commercial transaction and communications in the context of the contractual relationship for the period of validity of the contract agreed between the parties, plus the statute of limitations and expiration period, which is 6 months.

360imprimir may also record and retain calls for the purpose of monitoring the quality of service and on the basis of the Customer's consent, but for this purpose the calls will only be retained for a maximum period of 30 days.

With regard to video surveillance of its facilities, 360imprimir will only retain image recordings and related personal data for a maximum period of 30 days.

360imprimir may retain other personal data for longer than the duration of the contractual relationship, either on the basis of your consent, or to ensure rights or duties related to the contract, or because you have legitimate interests on which to base it, but always for the period strictly necessary to achieve the respective purposes and in accordance with the guidelines and decisions of the CNPD.

As a general rule, 360imprimir does not share your personal data with other unaffiliated persons or companies without your consent. However, 360imprimir provides data to its agents and its service providers and other trusted service providers for limited purposes, such as:

• Fulfillment of customer orders and processing of credit card transactions;
• The offer of certain products and services;
• The provision of customer support services;
• The management of information on our behalf;
• The improvement of the features and functionalities of the website.

In such cases, we require these persons to commit to use the data only for the purposes for which we provide it and in accordance with our privacy policy. Partners are legally and contractually obligated to comply with 360imprimir's privacy policy.

By registering on the Website, by registering for a promotion (e.g., a sweepstakes or contest) or a service we provide in conjunction with a third party, You agree that we may provide data (such as Your name, email address, and account activity) to such third parties, provided that they are duly authorized by You.

360imprimir provides its suppliers with the name and city/district/country of residence of 360imprimir customers who have purchased 360imprimir products from that supplier. 360imprimir may also disclose customer data (including User's name, address, telephone number, and account activity) when, in its sole discretion, it determines that such disclosure is necessary or appropriate to:

• Comply with the law;
• Comply with subpoenas, court orders, judicial orders, government investigations, or other legal proceedings;
• Enforce or enforce the terms of any of our user or license agreements;
• Investigate or respond to allegations of fraud, intellectual property infringement, or other illegal activities;
• Conduct investigations in cases of fraud or similar allegations;
• Protect the rights, property or safety of 360imprimir and our Users, or third parties;
• Protect 360imprimir operations;
• Enable 360imprimir to activate available remedies or limit damage it may incur;

You may access third party websites directly from our website. However, this privacy policy does not apply when the User accesses third party websites. 360imprimir cannot control the way third parties use the personal data you disclose to them, so you should carefully read the privacy policy of the third party website you visit before using it or disclosing your personal data to your service provider.

At 360imprimir, employees who need your data to fulfill contractual/pre-contractual and legal obligations have access to your data.

360imprimir may also process data outside of Portugal and the European Economic Area (EEA), where data protection laws may offer less protection than in Portugal and the EEA. However, it will use the security mechanisms described below.

Each time you open an account on the 360imprimir website, you are asked to choose a password to ensure the protection of your data, as well as to enter an email address.

The User is responsible for preserving the confidentiality of his/her password and User account, and is also responsible for all acts performed through the use of his/her password or User account. The User may change his/her password as many times as he/she wishes by following the instructions presented to him/her in his/her personal area.

The User agrees to:

1. Immediately notify 360imprimir of any unauthorized use of the user account, or any other breach of security;
2. Make sure you exit your user account at the end of each session.

360imprimir shall not be liable for any loss or damage arising from the User's failure to comply with this clause.

When you order or access your account information, we use commercially appropriate and generally accepted technical and organizational security measures to protect all information we collect about you.

In addition, as mentioned above, the user's 360imprimir account data is protected by a password to ensure the user's privacy and security. The User shall always take the necessary measures to protect the confidentiality of the password he/she chooses, in order to prevent unauthorized access to his/her password and his/her computer.

The User may choose not to provide 360imprimir with certain information, but this may result in the impossibility of using certain features of our website, as such information may be necessary for the User to:

1. Register as a member;
2. Participate in a contest, promotion, survey or sweepstakes;
3. Ask a question;
4. Or initiate other transactions on our website.

In addition, 360imprimir prevents unauthorized access or disclosure by using a variety of security measures, including encryption and authentication tools, to help protect and maintain the security, integrity and availability of your personal data. We highlight the following measures:

1. Physical security measures:
   1. Security of facilities: Entry to facilities (including subcontractors) is restricted to workers and, in exceptional cases, to persons duly authorized by 360imprimir.
   2. Video surveillance cameras, to ensure the physical security of workers and documents;
   3. There is a data protection policy, enshrined in 360imprimir's Code of Conduct, which applies to all its employees.
2. Logical security measures:
   1. Access to computer systems is protected by a username and password, with different levels of security and which must be modified periodically;
   2. The entire 360imprimir computer network is protected by antivirus, firewalls and monitoring of installed software;
   3. Use of SSL in the domain;
   4. Use of encryption technology in the collection or transfer of sensitive data.

360imprimir, in compliance with the provisions of the GDPR, guarantees the following rights to data subjects:

1. Right of access: right to obtain information about which of your personal data is processed, what the purposes of the processing are, what the storage periods are, among others.
2. Right of Rectification: right to request the rectification of your personal data that is inaccurate or to request the completion of personal data that is incomplete, such as address, TIN, email, telephone contacts, or others.
3. Right to be forgotten: right to obtain the erasure of your personal data, provided that there are no valid grounds for retaining it, such as in cases where 360imprimir is obliged to retain it in order to comply with a legal obligation or because judicial proceedings are being carried out.
4. Right to Portability: right to receive the data you have provided to us in a digital format of current use and automatic reading.
5. Right of limitation: right to request the limitation of the processing of your personal data in the form of: (i) suspension of the processing or (ii) limitation of the scope of the processing to certain categories of data or purposes of the processing.
6. Right to withdraw consent or the right to object: right to object to or withdraw consent at any time to the processing of data based solely on such consent, for example, in the case of data processing for marketing purposes, provided that there are no legitimate interests that prevail over your interests, rights and freedoms, for example, the defense of a right in legal proceedings.
7. Right to complain: right to lodge a complaint with the national supervisory authority, the CNPD.

If you have any questions related to this Privacy Policy, as well as about the exercise of the aforementioned rights (for example, about the type of data that is stored, or if you want to obtain a copy, request the deletion or modification of such data), you should contact us at the email address [email protected].

Once we receive the documents proving the User's identity, we will provide the data, and the User may request the deletion, rectification or alteration of all or part of the data.

Unless otherwise indicated, the current privacy policy of 360imprimir applies to all information that 360imprimir has about you and your account.