Privacy Policy
To ensure the highest level of security for your personal data and to process it fairly and transparently in accordance with applicable law, we inform you below about how your data is collected, used, and protected, as well as what rights you have.
The Administrator (Data Controller) of your personal data is:
ENI Eris Spakov
Rua Professor João Oliveira Coelho 22, 1º Esq
3080-604 Figueira da Foz, Portugal
NIF: 333990161
Email: ceo@toparts.pt
Phone: +351 920415530
You can contact us:
- In writing, by sending correspondence to our registered address,
- By email at ceo@toparts.pt,
- By phone at +351 920415530,
- Through the contact form available in the “Contact” section of the website.
We only process data that you voluntarily provide to us when creating an account, placing an order, sending a message via the contact form, inquiring about product availability, or subscribing to our newsletter. The personal data you provide, such as your name, address, phone number, and email, is necessary for us to conclude and properly execute the contract with you.
Your personal data is processed for the following purposes:
- To perform a contract with you (Article 6(1)(b) GDPR), including:
- Creating and managing your customer account, providing technical support,
- Providing electronic services, processing orders and payments,
- Handling complaints and returns,
- Responding to messages sent through the contact form.
- Based on your consent (Article 6(1)(a) GDPR), including:
- Sending newsletters and marketing updates,
- Storing cookie data,
- Sending commercial or promotional information.
- For legitimate interests pursued by the company (Article 6(1)(f) GDPR), including:
- Debt collection, pursuing or defending legal claims,
- Organizing loyalty programs or contests,
- Direct marketing of our own products and services,
- Archival, statistical, and analytical purposes.
- To comply with legal obligations (Article 6(1)(c) GDPR), including tax and accounting requirements under Portuguese law.
Your data is securely stored and protected. To perform the contract, we may share certain data with trusted service providers — for example, entities handling payments, logistics, and deliveries. Data may also be shared with public authorities only when required by law (e.g., police, courts, or regulatory bodies).
Your rights under the GDPR:
- Withdraw consent at any time,
- Access your personal data,
- Request rectification or correction of data,
- Request deletion of data (“right to be forgotten”) — except where retention is required by law (e.g., tax or accounting regulations),
- Restrict processing,
- Request data portability,
- Lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority for data protection, if you believe your data is being processed unlawfully.
Your personal data will be retained for the following periods:
- As long as you have an account in the online store,
- For the duration of the contract and its fulfillment,
- After contract completion, for the time necessary to pursue or defend legal claims and to comply with statutory obligations (especially those related to tax, accounting, and archival regulations).
If data processing is based on your consent, processing will continue until you withdraw it.
We do not transfer your personal data outside the European Union or the European Economic Area (EEA).