### 1. Data controller
**APA Logic — Unipessoal, Lda.**, Tax No. 519 418 271, registered office at Av. da Cal, Lote 125, 1.º Andar, Vila Boa, 4750-787 Barcelos, is the controller of personal data collected via www.walft.com.
Privacy contact: [email protected].
### 2. Data we collect
– **Identification and contact:** name, e-mail, phone.
– **Delivery and billing:** address, country, tax number (optional).
– **Payment data:** processed directly by Stripe and PayPal; we do not store full card details.
– **Order data:** items, amounts and history.
– **Usage data:** IP address, device type, cookies and Site usage data.
### 3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|—|—|
| Processing and delivering orders | Performance of the contract |
| Invoicing and tax/accounting obligations | Legal obligation |
| Customer support and returns | Performance of the contract |
| Marketing/newsletter communications | Consent |
| Security, fraud prevention, analytics and Site improvement | Legitimate interest / Consent (cookies) |
### 4. Recipients and processors
To provide the service we share data, as needed, with: payment processors (**Stripe** and **PayPal**), carriers and logistics operators (varying by destination), Site hosting provider, e-mail platform, and analytics/marketing tools (**Google** and **Meta**). All are bound by confidentiality and data-protection obligations.
### 5. International transfers
As we operate worldwide and use providers that may be located outside the European Economic Area (including Stripe, PayPal, Google and Meta), some data may be transferred to third countries. In such cases we ensure appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or adequacy decisions.
### 6. Retention
We keep data only as long as needed for each purpose: order and invoicing data for the legal period (up to 10 years for tax purposes); marketing data until consent is withdrawn.
### 7. Your rights
You may at any time exercise your rights of **access, rectification, erasure, restriction, portability and objection**, and withdraw consent, by contacting [email protected]. You also have the right to lodge a complaint with the supervisory authority: **Comissão Nacional de Proteção de Dados (CNPD)** — www.cnpd.pt.
### 8. Cookies
The Site uses cookies essential to its operation and, subject to consent, analytics and marketing cookies, notably from **Google (Google Analytics)** and **Meta (Meta Pixel)**, for audience measurement and advertising optimisation. You can accept, reject or manage preferences via the cookie banner and your browser settings.
### 9. Security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration.
### 10. Minors
The Site is not directed at children under 16 and does not knowingly collect their data without parental consent.
### 11. Changes
This Policy may be updated. The version published on the Site applies.