PERSONAL DATA PROTECTION AND PRIVACY POLICY RYB - Rent your Bag

RYB ensures compliance with the obligations arising from Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and other legislation on the protection of personal data and privacy.

I. Who is the Controller of my personal data?

FÓRMULA ADEQUADA UNIPESSOAL, LDA, with registered office at Urbanização serra e mar, Lote 36 - Cabeço do Estevão, 8500-169 Mexilhoeira Grande, with the single legal person number 518085198 (hereinafter referred to as "RYB"), is the controller of your personal data for the purposes set out below.

II. For what purpose will my personal data be processed, on what legal grounds and for how long?

The processing of your personal data has the following purposes, legal grounds and retention periods:

Processing purposesFundamentals of LawfulnessRetention periods (1)
Application managementExecution of the contract, the terms of which are governed by the App's T&CsUp to 6 (six) months after the last visit to the App
Client or contract managementPre-contractual due diligence or contract executionUp to 1 (one) year after the end of the contract or, if not concluded, up to 6 (six) months after the start of the contracting process, without conclusion.
Management and Organization of HobbiesUp to 1 (one) year after the end of the competition
Direct MarketingConsentUp to 1 (one) year after collection or last contact
Legitimate interest in the contracted productUntil the termination of the contract to which the product relates
Legitimate interest in and following an interactionUp to 30 (thirty) days after interaction
Improving the Application and User ExperienceLegitimate interestUp to 1 (one) year after collection
Creation of Profiles and Automated Decisions to improve the user experienceLegitimate interestUp to 1 (one) year after collection

If the lawful basis for the processing of your personal data is consent or legitimate interest, you may withdraw your consent or object to the processing at any time, without any consequences, but without compromising the lawfulness of the processing carried out in the meantime. If you withdraw your consent or expressly object, RYB will immediately cease processing your personal data for the purpose in question, unless it is necessary to process the data in order to comply with legal and/or contractual obligations.

III. What personal data will be processed?

In the context of the above purposes, RYB will process the following categories of personal data: personal identification and contact data, citizen card data (for identity verification purposes only), contract data, data relating to means of payment and transactions, data resulting from opinion surveys, data resulting from profile analysis, authentication and access data and web browsing data.

IV. How will my personal data be processed?

Your personal data will be processed by RYB, in the context of the purposes indicated above, in accordance with internal policy and standards and using appropriate technical and organizational measures to promote their security and confidentiality, in particular with regard to the unauthorized or unlawful processing of your personal data and their accidental loss, destruction or damage. Your data may also be further processed for statistical purposes.

V. Who are the recipients of my personal data?

Your personal data may be provided to companies entrusted with the provision of services to RYB ("Processors"), which are bound to RYB by a written contract, may only process your personal data for the purposes established and are not authorized to process them, directly or indirectly, for any other purpose, for their own benefit or for that of a third party.

Your personal data may also be shared with entities with which RYB establishes partnerships, under joint responsibility agreements.

In compliance with legal and/or contractual obligations, your personal data may also be transmitted to third parties for their own purposes, namely to network operators, banks and insurance companies, judicial, administrative, supervisory or regulatory authorities, as well as entities that lawfully carry out data collection, fraud prevention and combat actions, market or statistical studies.

RYB may also transfer your personal data outside the European Economic Area if this is justified in the performance of a contract or in compliance with a legal obligation, ensuring that personal data is only transferred pursuant to an adequacy decision by the European Commission, standard contractual clauses, binding corporate rules or any other legally prescribed means appropriate to the transfer.

VI. What rights do I have over my personal data?

As the data subject, you have the right to, where applicable: (i) request access to, rectification, limitation, opposition, portability and erasure of your personal data, (ii) lodge a complaint with the competent supervisory authority - in Portugal, the National Data Protection Commission ("CNPD") - or (iii) obtain redress and/or compensation, if you consider that the processing carried out violates your rights and/or the applicable personal data protection and privacy legislation.

You can exercise your rights by emailing ryb.rentyourbag@gmail.com.

VII. Information about cookies

We advise you to read the cookies policy, available on this application and which forms an integral part of this policy, to find out more about the processing of your personal data carried out through this functionality.

VIII. Changes to the Personal Data Protection and Privacy Policy

RYB may, at any time, amend this Personal Data Protection and Privacy Policy in accordance with new legal or regulatory requirements or update it if necessary. We advise you to consult this Policy regularly to check for the most up-to-date versions.

Date last updated: 09-06-2025