Privacy Policy – AR

Last updated: 11/2025

1. Privacy Policy
AR company thanks you for your interest in our company and our products. This Privacy Policy sets out the terms under which the company AR, VAT number 268520364, with headquarters at Rua da Graciosa, 4705-474 Braga, Portugal, processes personal data of users and customers, in accordance with Regulation (EU) 2016/679 (GDPR) and Law no. 58/2019.

2. AR respects your privacy
The protection of your privacy during the processing of personal data, as well as the security of business data, is important to AR. Personal data obtained during your relationship with us are treated confidentially and in accordance with legal provisions, and are limited to the data strictly necessary for fulfilling the purpose.

3. Controller
AR is responsible for this processing. Exceptions are described in this data protection policy. Our contact details are:

The company does not have a Data Protection Officer (DPO), and is not legally obliged to appoint one, under the terms of article 37 of the GDPR.
All questions regarding data protection should be addressed to the email indicated above.

4. Collection, processing and use of personal data

4.1 The personal data we collect through our relationship may be the following, depending on the characteristics of that relationship:
• Personal data: Name, address and contact (phone number and e-mail)

4.2 Principles
Personal data is information about a living person, identified or identifiable. Also constituted as personal data is the set of distinct information that can lead to the identification of a person.
We collect, process and use personal data only when there is a legal basis for doing so or when the data subject has given us their consent to the processing or use of such personal data.

4.3 Purpose of processing and legal bases
The purpose of this processing is the provision of products. The legal basis for the processing of personal data is the fulfilment of the established contract and your consent regarding direct marketing.

4.4 Your personal data will only be transferred to other controllers when:
• It is necessary for the fulfilment of a contract,
• AR or the other responsible party have a legitimate interest in the transfer, in which case this will be indicated in this privacy policy,
• You have consented or,
• We are obliged to do so by legal provision or court order.

4.5 Service providers
AR may contract external service companies for tasks such as sales and marketing services, contract management, payment management, programming, data retention and telephone line services.
These service companies are carefully selected, paying special attention to the protection of the personal data they retain.
The service companies comply with the obligations of article 28 of the GDPR and respect confidentiality and comply with their legal obligations.

So that you can receive your product and notifications relating to your orders, we transmit your e- mail address and phone number, within the scope of contract execution, to:

This company processes the data as controller.

4.6 Duration of personal data storage and retention periods
As a rule, your data will be stored whenever necessary for the fulfilment of the purpose for which it was obtained, for the fulfilment of the contract, when we have a legitimate interest in retaining it (for example, after fulfilling our contractual obligations, we may continue to have a justified interest in marketing) or when we have to keep it to comply with certain legal obligations (for example, due to commercial and tax laws, there are certain documents, such as contracts or invoices, that we are obliged to keep during the period established by law).

5. Security
Our employees and external suppliers who provide us with services, follow documented instructions from AR and comply with the obligations of article 28 of the GDPR.

6. User or data subject rights
Please use the data in the "Contact" section to exercise your rights. Please ensure that we are able to identify you clearly.

· Right to information and access: you have the right to obtain information about the processing of your data. For this, you can exercise your right to information regarding the personal information about you that we process.
· Right to erasure and rectification: You have the right to obtain the rectification, without undue delay, of inaccurate personal data that we process and, taking into account the purpose of the processing, you also have the right to have incomplete personal data completed.
Likewise, you can demand the erasure of your personal data, provided that the necessary legal requirements are met and there is no legal obligation for us to keep them.
Whenever access to this data is not required, you may request its restriction. (see below).

· Restriction of processing: You may demand from us, whenever the established legal requirements are met, that we restrict the processing of your data.
· Right to object to the processing of personal data: You have the right to object to the processing of your personal data at any time. In this case, we will stop processing your data, unless there are legal provisions to the contrary or if we can demonstrate compelling legitimate grounds for protection that override your rights.
· Objection to the processing of your personal data for the sending of commercial information: you can object at any time to the processing of your personal data for marketing purposes (for direct advertising purposes). Please note that, for organisational reasons, an interference may occur between the withdrawal of your consent and the use of your data within the scope of a campaign already underway.
· Objection to the processing of your data when it is based on a legitimate interest: furthermore, you have the right to object at any time to our processing of your data based on a legitimate interest. In this case, your personal data will no longer be processed, unless there are legal provisions that require the processing of the data or if we can demonstrate compelling legitimate grounds for protection that override your rights.

6.1 Withdrawal of consent
Whenever you have consented to the processing of your data, you may withdraw that consent at any time. The legality of the processing of your data until the withdrawal of consent will not be affected.

6.2 Right to lodge complaints with supervisory authorities
You have the right to lodge complaints with the competent authorities. For this, you can contact the competent data protection authorities in your city or region, or the data protection authorities competent for Bosch, that is:

7. Notice of change to data protection measures
We reserve the right to change our security and data protection measures whenever necessary due to technical developments. In these cases, we will also adapt, as appropriate, our data protection policies. Therefore, please note the updates to the privacy policy.

8. Contact
AR
Email: info@arofficialbrand.com

Last updated: 11/2025