{"id":14915,"date":"2026-02-03T15:41:24","date_gmt":"2026-02-03T15:41:24","guid":{"rendered":"https:\/\/giocup.pt\/privacy-policy\/"},"modified":"2026-04-30T15:47:05","modified_gmt":"2026-04-30T14:47:05","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/giocup.pt\/en\/privacy-policy\/","title":{"rendered":"PRIVACY POLICY"},"content":{"rendered":"\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

PRIVACY POLICY<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
1.INTRODUCTION<\/h5>

This Privacy Policy (the \u201cPolicy\u201d) provides an overview of how Turtle Petals, Lda (GIOCUP\u00ae brand) (\u201cTurtle Petals\u201d, \u201cwe\u201d, \u201cour\u201d), as the data controller, collects, uses and shares your personal data in connection with the website www.giocup.pt (the \u201cWebsite\u201d) and the sale of our products (the \u201cProducts\u201d). This Policy also explains how you can exercise your rights under Regulation (EU) 2016\/679 (\u201cGeneral Data Protection Regulation\u201d or \u201cGDPR\u201d) and other applicable national legislation. For the purposes of this Policy, \u201cGIOCUP\u00ae\u201d refers to the brand and the Website; Turtle Petals, Lda is the legally responsible entity. This Policy supplements our Terms and Conditions and our Cookies Policy. <\/p>

2. DATA CONTROLLER<\/h5>

Turtle Petals, Lda, legal entity no. 516 034 790, with registered office at Zona Industrial da Jardoeira, Rua 1, Lt 316, N3, 2440-001 Batalha, Portugal, is the entity responsible for determining the purposes and means of processing personal data in connection with the Website and the Services:
\u30fb Data protection and rights requests (GDPR): support@giocup.pt<\/a>
\u30fbGeneral contacts: +351 925 853 551<\/a> | giocup@giocup.pt<\/a><\/p>

3. PERSONAL DATA<\/h5>

3.1. For the purposes of the GDPR, personal data means any information of any nature and regardless of format (including sound and image) relating to an identified or identifiable natural person (the \u201cdata subject\u201d). An identifiable person is one who can be identified, directly or indirectly, in particular by reference to identifiers such as a name, an identification number, location data, electronic identifiers (e.g., IP address, cookies, or other online identifiers), or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity. <\/p>

3.2. In the context of the Website and GIOCUP\u00ae Products, no special categories of data within the meaning of Article 9 of the GDPR are collected (for example, data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, biometric data, data concerning health, sex life or sexual orientation). If, in specific circumstances and on an exceptional basis, it is necessary to process special categories of data, this will only take place on an appropriate legal basis (including, where required, explicit consent) and subject to the adoption of enhanced technical and organisational measures. In such cases, the data subject will be informed in advance in a clear and transparent manner. <\/p>

4. COLLECTION OF PERSONAL DATA<\/h5>

Your data is collected directly when you use the Website to purchase Products (checkout), when you contact us for support, when you complete forms (e.g., withdrawal form), and when you subscribe to the newsletter
(where applicable). We process only the data that is strictly necessary, voluntarily provided, as well as data generated through the use of the website www.giocup.pt, for the purposes identified below.
Depending on the method of collection, the following data may be collected and processed, at most:
\u30fbFirst and last name
\u30fb Email address
\u30fbAge\/date of birth
\u30fb Phone number
\u30fbBilling and shipping address (postal code, city, country)
\u30fb Order and transaction data (Product, price, taxes, shipping, and status)
\u30fbPayment information processed by the PSP – payment service provider (EU PAGO)
\u30fb Cookies and usage data (online identifiers, IP address, technical logs, device\/browser type, referral source, date\/time, CMP preferences) <\/p>

5. PURPOSES OF PROCESSING<\/h5>

The personal data described above is processed by Turtle Petals for specific, explicit, and legitimate purposes, namely:
\u30fb Contractual relationship and account management (where applicable)
o Creation and administration of profiles, authentication, support, and transactional communications.
\u30fbSale of Products (e-commerce)
o Checkout and order processing, payment confirmation and settlement with the PSP (EU PAGO), shipping and tracking with carriers, issuance of invoices\/receipts, and proof of performance.
\u30fbAfter-sales (returns and warranty)
o Management of the right of withdrawal and exchanges where applicable, statutory conformity warranty, and complaint handling.
\u30fb Compliance with legal obligations
o Tax\/accounting obligations and retention; responses to administrative and judicial authorities; consumer information obligations.
\u30fb security and abuse\/fraud prevention
o Monitoring of access and Website integrity; fraud prevention; document verification of the integrity of the hygiene seal for purposes of the withdrawal regime.

\u30fbImprovement and optimization
o Aggregated\/de-identified usage analysis (with analytics cookies only where consented) to improve functionality and user experience.
\u30fbMarketing and communications (optional)
o Sending newsletters and promotional campaigns, in accordance with the data subject\u00b4s preferences and consent, where required.
Where possible, we apply data minimization, pseudonymization, and, where appropriate, anonymization techniques to reduce the impact on your privacy.
\u30fbEvidence and complience
o Retention, for an appropriate evidentiary period, of records related to the exercise of rights (e.g., marketing opt-in\/opt-out and cookie consent logs) and, where strictly necessary, minimal documentary evidence linked to withdrawal requests and hygiene-seal integrity verification (e.g., photographic records of packaging), solely for the purpose of demonstrating legal and contractual compliance.
<\/p>

6.LEGAL BASES FOR PROCESSING<\/h5>

We process your personal data based on the following legal bases under the GDPR:
\u30fb Performance of a contract (Art. 6(1)(b))
o Processing of orders, payments, shipments, and related support.

\u30fb Compliance with a legal obligation (Art. 6(1)(c))
o Tax\/accounting duties; responses to authorities\/regulators; statutory retention periods.

\u30fb Legitimate interests (Art. 6(1)(f))
o Website security and integrity; fraud prevention; service and UX improvement; evidence management (e.g., seal verification); and retention of strictly necessary records to demonstrate compliance (e.g., consent logs for audit and proof purposes).
Note: You may object, where applicable, on grounds relating to your particular situation.
\u30fb Consent (Art. 6(1)(a))
o Marketing communications (newsletter) and non-essential cookies (analytics\/marketing).
Note: You may withdraw your consent at any time, without this affecting the lawfulness of any processing carried out prior to such withdrawal. For compliance purposes, GIOCUP\u00ae retains records of your consent and its withdrawal for an appropriate period. <\/p>

7. SHARING OF DATA WITH THIRD PARTIES<\/h5>

7.1. We may share data with third parties strictly necessary for the provision of the Services, including:
\u30fb Payment service provider (PSP): EU PAGO (payment processing)
\u30fb Logistics operators\/carriers: e.g., CTT, DHL, GLS, among others
\u30fbTechnology infrastructure \/ e-commerce platform and hosting (e.g., Shopify, WooCommerce, among others)
\u30fb Email marketing \/ CRM platform (where applicable)
\u30fbAnalytics\/ads providers (only with consent, in accordance with the Cookie Policy and CMP settings)<\/p>

7.2. Data may be shared with judicial, tax, or regulatory authorities where legally required.<\/p>

7.3. Relationships with processors are governed by contracts in accordance with Article 28 of the GDPR, ensuring:
\u30fb Documented instructions and compliance therewith;
\u30fbConfidentiality and appropriate technical and organizational measures;
\u30fb Security, data minimization, and limited retention.<\/p>

8. DATA TRANSFERS TO THIRD COUNTRIES<\/h5>

8.1. We process and store data primarily within the European Economic Area (EEA). However, in connection with the Website operations and the sale of Products to countries outside the EEA (e.g.,the United States), and the use of certain technical platforms (e.g., e-commerce, analytics, or marketing solutions), transfers of data to third countries may occur. <\/p>

8.2. Where a transfer is necessary (e.g., a technical provider with servers outside the EEA), we ensure that such transfer is based on an adequacy decision of the a European Commission or, in its absence, on appropriate safeguards provided by law, including the execution of Standard Contractual Clauses and, where necessary, supplementary measures, to ensure a level of protection essentially equivalent to that of the European Union.<\/p>

8.3. Where transfers result from technical integrations (e.g., e-commerce platforms, analytics, advertising pixels, email marketing\/CRM), the current list of providers and purposes is available on the CMP panel. You may request additional information on international transfers and applicable safeguards via email. <\/p>

9. PROCESSING PRINCIPLES AND SECURITY<\/h5>

In its capacity as data controller, Turtle Petals ensures that:
\u30fb Processing is carried out only for specific purposes or purposes compatible with the original ones.
\u30fb Only the minimum data that is necessary and sufficient for each purpose is collected and retained.
\u30fb No data is transmitted for commercial or advertising purposes without an appropriate legal basis (e.g., consent).
\u30fb Security measures proportionate to risk are implemented, including access controls, activity logs, encryption in transit where applicable, backups, retention policies, and incident response procedures, with notification to the CNPD and data subjects where legally required.
\u30fb Databases are maintained with access strictly limited to employees and processors who require it for the intended purposes and who are bound by confidentiality obligations.<\/p>

10. DATA RETENTION PERIODS<\/h5>

10.1. We retain your personal data only for the period necessary to fulfill the purposes for which it was collected, in accordance with the GDPR principles of data minimization and storage limitation.<\/p>

10.2. Once the contractual relationship has ended, or when the data is no longer required for the purposes for which it was collected, it will no longer be processed for commercial purposes and will be securely deleted or anonymised, unless its retention is required to comply with legal obligations, for the purposes of exercising or defending rights in administrative or legal proceedings, or for audit and compliance purposes.
Translated with DeepL.com (free version)<\/p>

10.3. Retention periods vary depending on the data category, processing purpose, and applicable legal requirements. As a general rule, order and invoicing data is retained for the applicable statutory tax period (generally 10 years); support\/warranty data is retained for the duration necessary to resolve the case and for a limited additional evidentiary period; marketing data based on consent is processed until opt-out, with consent\/withdrawal evidence retained for an appropriate evidentiary period; cookie data is retained in accordance with the Cookie Policy and CMP settings. <\/p>

10.4. Where we engage processors, we contractually ensure consistent retention criteria and deletion or return of data upon completion of the contracted purposes. With regard to minimal documentary evidence related to hygiene-seal verification or the exercise of the right of withdrawal, records are strictly limited, retained only for the time necessary to demonstrate compliance, and securely deleted thereafter. <\/p>

11. DATA SUBJECT RIGHTS<\/h5>

Under applicable law, you have the following rights:
A) Information: the right to be informed about processing purposes, recipients, retention periods, rights and conditions for their exercise, and mandatory data requirements.<\/p>

B) Access: the right to obtain confirmation of processing and access to your data, as well as available information on its source.<\/p>

C) Rectification: the right to request correction of inaccurate data or completion of incomplete data.<\/p>

D) Erasure: the right to request deletion of data when it is no longer necessary for the relevante purposes, when is withdrwan (where applicable), or when you object to processing under the law, without prejudice to mandatory retention periods.<\/p>

E) Objection: the right to object at any time to processing for direct marketing purposes and to processing based on legitimate interests, on grounds relating to your particular situation.<\/p>

F) Portability: the right to receive personal data in a structured, commonly used, machine-readable format and to transmit it to another controller, where processing is based on consent or contract and carried out by automated means.<\/p>

G) Restriction of processing: the right to request restriction where: (a) data accuracy is contested; (b) processing is unlawful and erasure is opposed; (c) data is no longer needed but required for legal claims; (d) an objection has been lodged and verification of overriding interests is pending. <\/p>

H) Automated decisions and profiling: the right not to be subject to decisions based solely on automated processing producing legal or similarly significant effects, and to request human intervention, express your point of view, and contest the decision, where applicable.<\/p>

I) Complaint: the right to lodge a complaint with the CNPD (www.cnpd.pt), without prejudice to any other administrative or judicial remedy.
To exercise your rights, please contact: support@giocup.pt (we may request proof of identity for your security).<\/p>

12. COOKIES AND SIMILAR TECHNOLOGIES<\/h5>

The Website uses cookies and similar technologies to ensure essential functionality and, where consented, for analytics and, where applicable, marketing purposes. Strictly necessary cookies are used based on our legitimate interest; non-essential cookies (e.g., analytics and marketing) are used only with your consent, collected and managed through our consent management platform (CMP), with \u201cAccept,\u201d \u201cReject,\u201d and \u201cConfigure\u201d options and a permanent \u201cManage Cookies\u201d link in the footer. For detailed information on cookie categories, purposes, vendors, and durations, please consult our Cookie Policy. <\/p>

13. CHANGES TO THIS PRIVACY POLICY<\/h5>

Turtle Petals reserves the right to update this Privacy Policy to reflect legal, technical, or functional changes, as well as to incorporate best practices. The updated version will always be available on the Website www.giocup.pt. In the event of materially relevant changes, Turtle Petals will ensure appropriate communication to users (e.g., via the Website or by email), where required. <\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

PRIVACY POLICY 1.INTRODUCTION This Privacy Policy (the \u201cPolicy\u201d) provides an overview of how Turtle Petals, Lda (GIOCUP\u00ae brand) (\u201cTurtle Petals\u201d, \u201cwe\u201d, \u201cour\u201d), as the data controller, collects, uses and shares your personal data in connection with the website www.giocup.pt (the \u201cWebsite\u201d) and the sale of our products (the \u201cProducts\u201d). This Policy also explains how you […]<\/p>\n","protected":false},"author":5,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-14915","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/pages\/14915","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/comments?post=14915"}],"version-history":[{"count":4,"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/pages\/14915\/revisions"}],"predecessor-version":[{"id":16031,"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/pages\/14915\/revisions\/16031"}],"wp:attachment":[{"href":"https:\/\/giocup.pt\/en\/wp-json\/wp\/v2\/media?parent=14915"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}