1. Data Controller

ProfilePro is a service of Wonderstores, headquartered in Portugal.

Address: Rua Oscar da Silva, 2101, 4450-000 Leça da Palmeira, Portugal
Email: services@wonderstores.pt
Phone: +351 96 045 40 51

2. Data we collect

Through our website, namely the contact form, we collect the following data:

• Name
• Email address
• Message content (may contain personal data the user chooses to share)
• IP address (automatically collected for security purposes)
• Date and time of submission

3. Purposes of processing

The collected data is exclusively used to:

• Respond to messages and information requests sent through the contact form
• Provide customer support and clarify questions about our services
• Improve the quality of our customer service
• Ensure website security (through IP logging)

Note: Data provided through the form is NOT used for direct marketing, newsletters or any other purpose beyond responding to the user's request.

4. Legal basis

The processing of your data has the following legal basis:

• Consent of the data subject: By filling out and submitting the contact form, the user expresses their willingness to be contacted and provides their data for that specific purpose (Article 6(1)(a) of GDPR).
• Legitimate interest: The logging of IP addresses for website security constitutes a legitimate interest of the data controller (Article 6(1)(f) of GDPR).

5. Data sharing with third parties

ProfilePro does not sell, rent or share your personal data with third parties for marketing purposes.

However, we use third-party services that process data on our behalf (subcontractors):

• Netlify Forms: Processes contact forms. Data is stored on Netlify's servers (USA) and is governed by Netlify's Privacy Policy.
• Plesk / Hosting Server: Server logs (including IP addresses) are processed by the hosting infrastructure. These logs are kept for 30 days and automatically anonymized.

6. Data retention

• Contact forms: Data is kept for the period necessary to respond to the message and provide the requested support, and is subsequently deleted, unless it is necessary to retain it for compliance with legal obligations.
• Server logs: IP addresses are kept for 30 days, being automatically anonymized after that period through Plesk settings.

7. Your rights

Under the GDPR, the user has the right to:

• Access their personal data
• Rectify inaccurate or incomplete data
• Request erasure of their data ("right to be forgotten")
• Restrict the processing of their data
• Object to the processing of their data
• Request data portability
• Withdraw consent at any time (without affecting the lawfulness of processing carried out prior to such withdrawal)

To exercise these rights, please contact us at services@wonderstores.pt.

8. Data security

We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction or alteration. Our website uses HTTPS (SSL) to encrypt communication between your browser and our servers.

9. Changes to this policy

ProfilePro reserves the right to change this Privacy Policy at any time. Changes take effect immediately upon posting on the website. We recommend that you check this page regularly.

10. Contact and complaints

If you have questions about this Privacy Policy or about the processing of your data, please contact us at:

Email: services@wonderstores.pt

If you believe that your rights have not been respected, you have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
www.cnpd.pt

Note: For users in other countries, you may also contact your local data protection authority.