The controller responsible for personal data collected through the website is BLACKSPIDER, LDA., Tax ID (NIF) 507116917, registered office at R. Armindo da Costa Azevedo Junior, 129, 4785-099 Trofa, Portugal, contact customerservice@cristinabarros.com.
Scope and applicable law
The processing of personal data is governed by Regulation (EU) 2016/679 (GDPR), which applies to all data processing carried out by BLACKSPIDER, LDA. in the context of its activities, regardless of the data subject's country of residence, since the controller is established in Portugal.
The competent supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD), Portugal's national data protection authority, at www.cnpd.pt.
Data subjects in the United Kingdom
For data subjects resident in the United Kingdom, the UK GDPR and the Data Protection Act 2018 also apply, and the competent supervisory authority is the Information Commissioner's Office (ICO), at www.ico.org.uk.
Data subjects in the United States of America
The GDPR also applies to the processing of personal data of customers resident in the United States of America, since the processing is carried out in the context of the activities of BLACKSPIDER, LDA.'s establishment in Portugal.
Data collected and purposes
- Identification and contact data (name, address, e-mail, phone number), for order processing and delivery;
- Payment data, processed by certified payment service providers;
- Browsing data, to improve the website experience and for analytics and marketing purposes, under the Cookie Policy;
- Customer account data, where applicable.
Sharing and international data transfers
Data may be shared with payment service providers, carriers (UPS, DPD, NACEX) and analytics and marketing tools. Where personal data is transferred outside the European Economic Area, including to the United States of America, this will always be accompanied by the appropriate safeguards required by the GDPR, in particular standard contractual clauses approved by the European Commission.
Data subject rights
Data subjects may exercise their rights of access, rectification, erasure, restriction, portability and objection, and may withdraw consent at any time, by contacting customerservice@cristinabarros.com. They also have the right to lodge a complaint with the competent supervisory authority indicated above, depending on their country of residence.
Data retention
Personal data is retained for as long as necessary for the purposes for which it was collected, including compliance with applicable legal, tax and accounting obligations.
Last updated: 31.08.2026