Privacy policy

Privacy Policy


This Privacy Policy describes how we process users’ personal data, in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.

1. Data Controller

Users’ personal data is processed by the following entities, depending on the brand with which the user interacts:
Dune Bleue - Importação e Exportação de Artigos Têxteis Lda – NIPC 507 343 093, headquartered at Rua dos Pavilhões 3, 4760-443, Cavalões, Vila Nova de Famalicão, Braga, Portugal.

 

2. Data Collected and Purposes

We collect and process the following personal data, depending on the user’s interaction with our websites and services:
• Name, email, phone number, address, date of birth, tax identification number (NIF);
• Browsing and interaction data (cookies, IP address);
• Order and payment information.

Processing purposes:

• Customer account registration and management;
• Order processing and delivery;
• Invoicing and compliance with legal obligations;
• Promotional communications (with consent);
• Behaviour analysis to improve services and provide personalised offers;
• Fraud prevention and security.

 

3. Legal Basis for Processing

The processing of personal data is carried out based on the following lawful grounds:
• Consent of the data subject (e.g., newsletter subscription);
• Performance of a contract (e.g., order delivery);
• Compliance with a legal obligation (e.g., tax obligations);
• Legitimate interest (e.g., fraud prevention, service improvement).

 

4. Data Retention

Personal data is retained for the period necessary for the purposes for which it was collected:
• Account data: up to 5 years after last interaction;
• Transaction data: 10 years (legal tax requirement);
• Marketing data: until consent is withdrawn.

 

5. Subcontractors and Subprocessors

We use third-party entities to provide services, such as:
• Shipping carriers (e.g., CTT);
• Payment service providers (e.g., PayPal);
• Marketing and web hosting platforms (e.g., Google Ads).

All entities are contractually bound to process data solely for the specified purposes and to ensure confidentiality and security.

 

6. International Data Transfers

In some cases, data may be transferred outside the European Economic Area. When this occurs, we ensure that transfers are made only to countries with an adequacy decision from the European Commission or through the use of EU-approved Standard Contractual Clauses.

 

7. Data Subject Rights

Users have the right to:
• Access their personal data;
• Request rectification or erasure;
• Restrict or object to processing;
• Request data portability;
• Withdraw consent at any time;
• Lodge a complaint with the Portuguese Data Protection Authority (CNPD).

Requests may be submitted using the contact details indicated in the following section.

 

8. Data Protection Officer (DPO)

You may contact our Data Protection Officer regarding any matter related to your data privacy at: dpo@youneedsocks.com.

 

9. Automated Decision-Making and Profiling

We do not carry out decisions based solely on automated processing that produce legal or similar significant effects. Whenever segmentation mechanisms are used for marketing purposes, human oversight is ensured.

 

10. Cookies

We use cookies to improve navigation, analyse traffic, and personalise content. Users may manage their cookie preferences in their browser settings or via the consent tool available on the website.

 

11. Policy Updates

We reserve the right to amend this Policy at any time. The updated version will always be available on the brands’ websites. We recommend regular consultation.