Privacy and Personal Data Policy:

O Mundo das Sobremesas – Indústria Alimentar, Lda. (hereinafter identified as Mundo das Sobremesas or company) bases its actions on respect, security, lawfulness, confidentiality and rigor in the application of measures necessary to protect personal data, in accordance with the principles applicable to it, namely those defined in the General Data Protection Regulation (GDPR), approved by Regulation (EU) No. 2016/679, of April 27, 2016, in its current wording and other legislation.

The Privacy Policy aims to clarify how O Mundo das Sobremesas – Indústria Alimentar, Lda. collects, uses, shares and protects the personal data of our customers and users, particularly when they use the services or visit the website, (http:// www.mundosobremesas.pt), which despite not implying registration, uses certain content that may imply the provision of personal data by customers and users.

Mundo das Sobremesas – Indústria Alimentar, Lda., hereinafter identified as Mundo das Sobremesas, may at any time, without prior notice and with immediate effect, change, add or revoke, partially or completely, this Privacy Policy. Any changes will be immediately made available on this page, so you are advised to visit it regularly.

1 – PERSONAL DATA

Personal Data is any information, of any nature and on any medium, relating to a directly or indirectly identified or identifiable natural person (data subject).

The holders of personal data are any Customer, user, candidate, natural person, to whom the data relates and who has used the services or products of Mundo das Sobremesas.

2 – PROCESSING OF PERSONAL DATA

1. 1. A) RESPONSIBLE FOR THE PROCESSING OF YOUR PERSONAL DATA

O Mundo das Sobremesas – Indústria Alimentar, Lda. with headquarters at Rua da Indústria, 30, 4480-146 Rio Mau, telephone number 252 657 083, is responsible for the collection and processing of your personal data.

The Data Protection Officer (DPO) can be contacted via email at rgpd@mundosobremesas.pt, or through the means available on the website.

Mundo das Desserts does not assume any responsibility when, for unrelated or unknown reasons, error, damage, dissemination or unauthorized access occurs resulting from the electronic data transmission that may occur between the company and the Data Holder.

3 – BASIS OF DATA PROCESSING

1. 1. A) – COLLECTE DE DONNÉES PERSONNELLES

Mundo das Sobremesas only collects and processes personal data with express consent, in accordance with each of the specific purposes of the processing in question, under the terms set out in the General Data Protection Regulation, and data collection may be done orally, by written or through the company's electronic and online means of communication.

The consent given may be withdrawn by them (specify the data subject) at any time.

If personal data, considered essential for the applicable purpose, is not provided by customers or users, or proves to be insufficient, incorrect or out of date, Mundo das Sobremesas will not be able to provide the contracted service(s), assuming the customers or users, full and exclusive responsibility for the insufficiency or inaccuracy of the data transmitted.

Mundo das Desserts collects your personal data through the following means:

• • Completing online contact forms to request information/quotes;

• • Contacts by email, telephone

• • Submission of applications by any means.

By making your personal data available to Mundo das Sobremesas – Indústria Alimentar, Lda., the customer, user, acknowledges and consents to their processing in accordance with this Privacy Policy and the rules and principles contained in the respective terms and conditions of the services used. To this extent, and with regard to the processing of personal data, the user must read this Privacy and Cookies Policy.

1. 1. B) PURPOSES OF PROCESSING PERSONAL DATA

• • Marketing and Sales

• • Customer Management and Service Provision

• • Gestion Comptable, Fiscale et Administrative

• • Compliance with legal obligations

• • Elaboración de perfiles basada en el historial de interacción con el cliente

• • Adaptation of the browsing experience on the Website.

El tratamiento de datos personales es necesario para la celebración, ejecución y gestión del contrato, preparación de una propuesta de servicio, para la gestión de contactos, información y pedidos, para la gestión de facturación, cobro y pago, y puede ser necesario para cumplir una obligación legal a la que está sujeta la empresa.

1. 1. C) CONSENT

Under the General Data Protection Regulation, the processing of any personal data must be legitimized on a basis that will always depend on your consent.

The client, user, expressly authorizes, freely and consciously, the company Mundo das Sobremesas – Indústria Alimentar, Lda. to collect and process their personal data for the purposes described.

1. 1. D) TYPE OF PERSONAL DATA COLLECTED

Les données personnelles collectées sont limitées à celles strictement nécessaires à la finalité du traitement, mais d'autres données nécessaires à la fourniture des produits, des données financières et des données relatives à la relation commerciale peuvent être collectées ; Correspondance commerciale ; historique des contacts avec les services d’assistance/support technique.

1. 1. E) ACCESS AND SHARING OR TRANSFER OF PERSONAL DATA

The personal data collected will be fully guaranteed with levels of confidentiality, security and protection.

Personal data may be accessed by the departments corresponding to the purpose for which the contact was established.

Mundo das Desserts may transmit your personal data to public authorities as required by law and only to the strictest extent of its obligations; or only when this proves necessary for the execution of intermediation and service provision contracts. In the case of subcontracting from third parties to pursue the purposes mentioned above, these entities are obliged to maintain secrecy and guarantee the security and confidentiality of the personal data to which, for this purpose, they have access, and must not use this data for any other purposes, or for their own benefit, nor relate them to other data they possess.

1. 1. F) ACCÈS AUX LIENS (LIENS EXTERNES)

The website may contain links to other websites and email addresses of companies not belonging to Mundo das Sobremesas. This privacy policy does not apply to these websites and email addresses. The provision of such links is made in good faith, and O Mundo das Sobremesas – Indústria Alimentar, Lda. cannot be held responsible for the collection and processing of personal data carried out on these websites, nor be held responsible for the accuracy, credibility and functionality of websites belonging to the 3rd.

1. 1. G) SECURITY MEASURES IMPLEMENTED

Mundo das Desserts guides the security of data processing with measures to implement controls on the transmission of information via computer; existence of restricted access profiles to data, based on a criterion of need, and respective control of queries; installation of Firewalls to prevent unauthorized access.

4- DEADLINES FOR PROCESSING AND STORING PERSONAL DATA

In the case of treatments based on consent, the data will be deleted as soon as the client, user, candidate withdraws consent or exercises the right to erasure.

Mundo das Desserts processes and retains your personal data for the period necessary to fulfill the purposes that motivated its collection and preservation and always in accordance with current legislation.

Therefore, O Mundo das Sobremesas processes and maintains personal data for a period of two years, or, in the case of maintaining a contractual relationship for longer periods, as long as it remains in force or periods necessary to ensure rights or duties related to the contract, or because it has legitimate interests that support it, but always for the period strictly necessary to achieve the respective purposes and in accordance with the guidelines and decisions of the CNPD.

With regard to Candidates' Personal Data, they are kept for two years, after which period the registration will be canceled and the data deleted, unless the right to erasure is exercised.

5 – DATA PROTECTION RIGHTS

Right of access- Right to obtain confirmation of which personal data are being processed and information about them, such as the purposes of processing, retention periods, among others .

Right to rectification– Right to request the rectification of your personal data that is inaccurate or to request that incomplete personal data be completed (such as address, NIF, email, telephone contacts, between others).

Right to erasure or be “forgotten”– Right to obtain the erasure of your personal data, in cases where this is legally possible and as long as there are no valid grounds for its conservation, such as cases in which data must be kept to comply with a legal obligation.

Right to portability– Right to receive the data you have provided to us in a commonly used, machine-readable digital format or to request the direct transmission of your data to another entity that becomes the new person responsible for your data personal data.

Right to object and automated individual decisions– Right to oppose or withdraw your consent, at any time, to data processing, in cases where this is legally possible (such as in the case of data processing data for marketing purposes).

Right of limitation– Right to request the limitation of the processing of your personal data, in cases where this is legally possible, in the form of:

• • Suspension of treatment

• • Limitation of the scope of processing to certain categories of data or processing purposes.

Right to complain– Right to lodge a complaint with the supervisory authority, the CNPD.

The exercise of any of the rights legally conferred, by the respective holder, must be done by means of a letter, or email message, expressly indicating which right he intends to exercise and under what terms, signed by him and accompanied by a photocopy of a identity document with the signature of the holder exercising their right, through the following means:

Entity: O Mundo dasSobremesas – Indústria Alimentar, Lda.

Address: Rua da Indústria, 30 4480-146 Rio Mau

Email: rgpd@mundosobremesas.pt

The holder of personal data may also withdraw their consent at any time, when applicable, through the channels provided for this purpose. However, the withdrawal of consent does not compromise the lawfulness of the processing carried out based on previously given consent nor the subsequent processing of the same data, based on another legal basis, such as compliance with the contract or the legal obligation to which O Mundo das Desserts – Indústria Alimentar, Lda. are subject.

For any questions about the collection and processing of data by O Mundo das Sobremesas – Indústria Alimentar, Lda., the respective owner can contact you by email at rgpd@mundosobremesas.pt.

If necessary, the holder may also lodge a complaint with the National Data Protection Commission (CNPD).