Vibromera Staging
Privacy Policy
Last updated: May 2026
Vibromera (Nikolai Shelkovenko, NIF PT314539760) is the data controller for personal data collected through vibromera.com. We are committed to protecting your privacy in accordance with the General Data Protection Regulation (GDPR) and Portuguese data protection law (Lei n.o 58/2019).
1. Data We Collect
When you place an order:
- Name, email address, phone number
- Billing and shipping address
- Payment information (processed by Stripe or PayPal — we do not store card numbers)
- Order history
When you visit our website:
- IP address, browser type, device information
- Pages visited, referral source, time on site
- Cookies (see Section 6)
When you contact us:
- Name, email, phone number
- Content of your message
When you register as a Marketplace partner:
- Company name, address, VAT number
- Contact person details
- Service descriptions and portfolio
2. How We Use Your Data
| Purpose | Legal Basis |
|---|---|
| Processing and fulfilling orders | Contract performance |
| Sending order confirmations, invoices, and shipping updates | Contract performance |
| Providing technical support | Legitimate interest |
| Marketplace partner directory | Contract performance |
| Website analytics and improvement | Legitimate interest |
| Marketing communications (only with consent) | Consent |
| Fraud prevention | Legitimate interest |
| Legal compliance (tax, accounting) | Legal obligation |
3. Data Sharing
We share your data only with:
- Payment processors: Stripe, PayPal — to process payments
- Shipping carriers: DHL, UPS, EMS — to deliver your order
- Cloudflare: CDN and security services
- Tax authorities: as required by Portuguese and EU tax law
We do not sell personal data to third parties. We do not transfer data outside the EU/EEA except where necessary for shipping to your delivery address, in which case appropriate safeguards (Standard Contractual Clauses) are in place.
4. Data Retention
- Order data: 10 years (Portuguese tax law requirement)
- Account data: until you request deletion
- Marketing consent records: until withdrawn
- Website analytics: 26 months
- Support correspondence: 3 years after last contact
5. Your Rights
Under GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate data
- Erase your data ("right to be forgotten")
- Restrict processing
- Data portability — receive your data in a structured format
- Object to processing based on legitimate interest
- Withdraw consent at any time for marketing communications
To exercise any of these rights, email [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt
6. Cookies
We use cookies for:
- Essential cookies: session management, shopping cart, security — always active
- Analytics cookies: understanding how visitors use our site — only with your consent
- Marketing cookies: not used
You can manage cookie preferences through your browser settings or our cookie banner.
7. Security
We protect your data using:
- TLS/SSL encryption for all data in transit
- Cloudflare WAF and DDoS protection
- Access controls and audit logging on our servers
- PCI-DSS compliant payment processing via Stripe and PayPal
8. Changes
We may update this policy from time to time. The current version is always available at vibromera.com/privacy/. Material changes will be communicated via email to registered customers.
9. Contact
Data Controller: Nikolai Shelkovenko
R. Nova da Madorninha 152, 4460-376 Sra. da Hora, Porto, Portugal
Email: [email protected]