Privacy Policy

The protection of your personal data is a priority for RAILINOX – ACESSÓRIOS, UNIPESSOAL, LDA. In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation – GDPR), we are pleased to present our Privacy Policy. This document informs you of the rules regarding the processing of your personal data, the rights you are entitled to, and how you can manage your consents directly and easily.

The provisions in this Privacy Policy complement the data protection and processing rules set out in the General Terms and Conditions of the www.railinox.pt store, which govern the offering of our products and are publicly available on the website, and accepted by the Customer.

This Privacy Policy applies exclusively to the collection and processing of personal data carried out by RAILINOX – ACESSÓRIOS, UNIPESSOAL, LDA.

Who We Are?

Your data will be processed by RAILINOX – ACESSÓRIOS, UNIPESSOAL, LDA., a private limited company headquartered at Travessa dos Petigais, 185 – 2400-835 Barosa, Portugal, registered under VAT number 508951348 (hereinafter referred to as “RAILINOX”).

RAILINOX is responsible for the processing of your personal data within the meaning of the GDPR.

What is Personal Data?

Personal data is any information, of any kind and regardless of its format, including sound and images, relating to an identified or identifiable natural person.

A person is considered identifiable if they can be identified directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, electronic identifiers, or one or more factors specific to their physical, physiological, genetic, mental, economic, cultural, or social identity.

What Types of Personal Data Do We Collect?

RAILINOX collects and processes personal data necessary for the sale and delivery of goods purchased by the Customer, namely: name, address, telephone number, email address, payment information, Internet Protocol (IP) address, and tax identification number.

Why Do We Process Your Information?

Your personal data may be collected and processed by RAILINOX for the following purposes:

• Legal compliance: to fulfil obligations such as invoicing for purchased goods.

• Contractual obligations: to manage logistics and delivery of purchased goods.

• Contact management and complaints handling.

• Marketing communications: including newsletters and promotional materials.

Failure to provide personal data for legal or contractual purposes may prevent RAILINOX from fulfilling obligations and may result in the inability to conclude the sales contract. RAILINOX will inform you of any mandatory data requirements.

Legal Basis for Processing

Processing of your personal data is based on:

• Execution of the sales contract and compliance with legal obligations (GDPR Article 6(1)(b) and (c))

• Legitimate interests pursued by RAILINOX or the Customer (for contact management and complaints handling, GDPR Article 6(1)(f))

• Consent provided for marketing communications (GDPR Article 6(1)(a))

How Long Do We Retain Your Information?

Personal data is retained only for the minimum period necessary for the purposes for which it was collected. Key retention periods include:

• Transaction management: 10 years (legal requirement)

• Customer management in loyalty programs: 3 years

• Marketing: 2 years (plus current year) from last interaction

• Website or platform users: 1 year (plus current year) after last access

• Home deliveries: 2 years

• Warranties and after-sales support: 2 years or the warranty period if longer

• Records and proof of distance contracts: 6 months after contract expiry

• Service management: 2 years from last service

Who May Receive Your Personal Data?

RAILINOX may share personal data with:

• Affiliated organisations or companies that follow an equivalent data protection policy

• Public authorities as legally required, including DGCI – Portuguese Tax Authority

• Subcontractors providing technical or administrative services under contract, such as hosting providers, email, and marketing service providers

• Competent authorities when legally required, including judicial entities or supervisory authorities

Is Your Data Transferred Outside the European Union?

Your personal data will not normally be transferred outside the European Union.

In exceptional cases, RAILINOX may transfer personal data outside the EU for data hosting, storage, technical subcontracting, backup, recovery, or service development. Transfers are only made to countries providing adequate data protection under GDPR.

Your Rights

Under GDPR, you may request at any time:

• Access: confirm whether your data is processed and access your personal data

• Rectification: correct inaccurate personal data without undue delay

• Erasure: request deletion of personal data when no longer necessary, consent is withdrawn, or processing is unlawful

• Restriction: limit processing under specific conditions

• Objection: object to processing based on legitimate interests

• Data portability: receive and transfer personal data in a structured, commonly used, machine-readable format when processing is based on consent or contract

Excessive or manifestly unfounded requests may be subject to a reasonable administrative fee or refusal. You may also withdraw consent for processing based on consent without affecting prior lawful processing, and you may file a complaint with the National Data Protection Commission.

Marketing Communications

With your consent, RAILINOX may contact you regarding new products or services via phone, email, mail, SMS, MMS, or other electronic communications. You can object at any time by contacting geral@railinox.pt or through your account area on the website.

Security and Confidentiality

RAILINOX implements appropriate technical and organisational measures to ensure the security of your personal data. However, transmission over the Internet is not completely secure, and absolute security cannot be guaranteed.

Your information is kept confidential and is never sold, distributed, or commercially shared with third parties. RAILINOX is committed to maintaining confidentiality in accordance with this Privacy Policy and applicable law.

Questions and Exercising Your Rights

For questions or to exercise your rights, contact geral@railinox.pt
Address: Zona Industrial da Barosa – Travessa dos Petigais, 185, 2400-835 Barosa – Leiria, Portugal

Please note that RAILINOX may update this Privacy Policy occasionally, so we recommend reviewing it periodically.

Last updated: 12 January 2026