PRIVACY POLICY

Data Protection Information

(Version 1.0 dated 06/02/2026)

Sole trader Viktoriia Zhukovskaia, with office at Rua Jose Almada Negreiros 193, 4400-191 Vila Nova de Gaia, holder of Tax Identification Number (NIF): 315989599 (hereinafter “Annamaxx Shop”), processes personal data collected through the use of its platform and, consequently, all information relating to an identified or identifiable natural person (“Data Subject(s)”).

An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifiers, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

This Privacy Policy contains information regarding the processing of personal data of users of the following platform provided by Annamaxx Shop:

Website: www.annamaxx.com (hereinafter the “Website”)

Annamaxx Shop ensures that personal data are processed in accordance with applicable personal data protection legislation, determining the purposes and means appropriate to the scale of its activity. In accordance with such legislation, Annamaxx Shop endeavours to process personal data in compliance with all applicable principles, namely:

i) lawfulness, fairness, and transparency;
ii) purpose limitation;
iii) data minimisation;
iv) accuracy;
v) storage limitation; and
vi) integrity and confidentiality.

1. Who is responsible for data processing?

Where Annamaxx Shop determines the purposes and means of processing personal data within the scope of its activities, it shall be regarded as the data controller, ensuring compliance with data protection legislation.

2. What are the purposes and legal grounds for processing personal data?

Annamaxx Shop processes users’ personal data for the following purposes:

Fundamentals of law-abiding	What do they consist of?
Legitimate Interests	Annamaxx Shop, other data controllers, or third parties may process personal data provided that such processing does not override your interests or fundamental rights and freedoms. The following data are collected on the basis of legitimate interest: IP address, date and time of access, and browser used, for advertising purposes.
Protection of Vital Interests of the Data Subject	Annamaxx Shop may process personal data in order to protect your vital interests, particularly where such processing is necessary to safeguard your life.
Compliance with a Legal Obligation	Annamaxx Shop may process personal data in order to ensure and guarantee compliance with legal obligations to which it is subject under the laws of a Member State and/or the European Union.
Pre-contractual Due Diligence or Performance of a Contract	Annamaxx Shop may process personal data where such processing is necessary, inter alia, for the performance of a service agreement and/or supply of products to which it is a party as employee, customer and/or supplier, or in order to take steps at the request of the data subject prior to entering into a contract. This includes payment details, email addresses, tax identification number, date of birth, and telephone number.
Consent	Annamaxx Shop may process personal data where the data subject has given consent to such processing by means of a freely given, specific, informed, and unambiguous indication of their wishes, thereby confirming acceptance, either by statement (written or oral) or by a clear affirmative action (such as selecting the relevant option), that their personal data will be processed. This includes data processing for marketing purposes, direct sales, commercial communications, and newsletters.

Taking the foregoing into account, the collection of personal data on the above legal bases shall be carried out mainly for purposes related to achieving Annamaxx Shop’s commercial objectives, as well as for the performance of its contractual and legal obligations. Consequently, refusal to provide personal data will result in the impossibility of achieving the purposes for which such personal data are processed.

2.1 Additional purposes of data processing: marketing (distribution of promotional materials, direct sales, and commercial communications)

With the User’s voluntary and informed consent, certain personal data (first name, last name, email address, postal address, landline and mobile telephone numbers) may also be processed by Annamaxx Shop for marketing purposes (direct sales, distribution of advertising materials, and commercial communications), or in order to allow Annamaxx Shop to contact the User by email to propose the purchase of products and/or services offered by Annamaxx Shop and/or third parties, as well as to present offers, promotions, or commercial opportunities.

• This also includes the provision of personalised advertising in accordance with the profile and preferences expressed by the customer when using the Annamaxx Shop Website.

Consent for data processing for such purposes is provided voluntarily and is not mandatory. Where consent has been granted, the User may withdraw it at any time by notifying Annamaxx Shop using the methods described in this Policy. The User may also exercise the right to object to receiving commercial communications (by email) by clicking the dedicated unsubscribe link included in all marketing emails.

In the event of withdrawal of consent, Annamaxx Shop may send the User a confirmation email acknowledging the effective withdrawal.

In this Privacy Policy, Annamaxx Shop informs you that, after exercising your right to object to commercial communications, you may continue to receive marketing messages for technical reasons (for example, marketing communications prepared shortly before your objection was submitted). If you continue to receive marketing messages more than 72 hours after exercising your right to object, Annamaxx Shop kindly asks you to inform us immediately using the contact details provided in this Privacy Policy.

3. What data are processed on the Website?

For the purposes indicated above, Annamaxx Shop processes the following personal data:

Purpose	Personal Data
Commercial and Marketing Activities	Personal identification data, contact details.
Newsletter Distribution	Personal identification data, purchase data, data relating to use of Annamaxx Shop online services, information collected through the loyalty programme linked to the user account.
Authentication and Account Creation	Personal identification data, contact details, customer account data, delivery addresses, order number and details, IBAN, user identifier.
Contract Performance	Delivery and billing address, email address, tax identification number, date of birth, and telephone contact details.
Website Management	Personal identification data, contact details, authentication and access data and/or browsing data, access IP address, date and time of access, billing address.

4. What are the rights of the data subject?

In accordance with current or future data protection legislation, Annamaxx Shop informs that data subjects have the right to access, rectification, restriction, portability, erasure, and the right to object to the processing of personal data under certain circumstances, which may be exercised in accordance with this section of the Data Protection and Privacy Policy.

Rights	What do they consist of?
Right to Lodge a Complaint	The data subject has the right to lodge a complaint with the competent supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), if they consider that the processing of personal data infringes their rights and/or applicable data protection legislation. For further information, please visit: www.cnpd.pt
Right to Object	The data subject has the right to object at any time to certain types of processing on grounds relating to their particular situation, where processing is carried out for the legitimate interests of Annamaxx Shop or third parties. Annamaxx Shop may continue processing where it demonstrates compelling legitimate grounds that override the interests, rights, and freedoms of the data subject, or where the data are necessary for the establishment, exercise, or defence of legal claims.
Right to Data Portability	The data subject has the right to receive and reuse certain personal data for their own purposes across different organisations. This right applies only to personal data provided by the data subject to Annamaxx Shop, processed on the basis of consent, and processed by automated means.
Right to Restriction of Processing	The data subject has the right to “block” or prevent further use of their data while Annamaxx Shop considers a request for rectification or, alternatively, erasure. Where processing is restricted, Annamaxx Shop may continue to store the data but may not further process them. In any case, Annamaxx Shop maintains a list of data subjects who have requested restriction in order to ensure compliance with such limitation.
Right to Erasure	This right is also known as the “right to be forgotten” and, in simple terms, allows the data subject to request deletion of their data where Annamaxx Shop has no compelling reason to continue using them or where their use is unlawful. This is not an absolute right, as exceptions apply (for example, where the data are required for the establishment, exercise, or defence of legal claims).
Right to Rectification	Where the data subject’s personal data are inaccurate or incomplete (for example, an incorrect name or address), the data subject may request Annamaxx Shop to take reasonable steps to correct such data.
Right of Access	The data subject has the right to obtain confirmation as to whether Annamaxx Shop processes personal data relating to them and, where that is the case, to access such data and certain information (similar to that provided in this Privacy Policy) regarding how such data are processed. This right allows you to know and verify that your data are being used in accordance with data protection legislation. Annamaxx Shop may refuse to provide the requested information where doing so would require disclosure of another person’s personal data or would adversely affect another person’s rights.
Right to Information	The data subject has the right to receive clear, transparent, and easily understandable information about how Annamaxx Shop uses their personal data and what their rights are. For this reason, Annamaxx Shop provides all such information in this Data Protection and Privacy Policy.

The User may exercise, at any time and in writing, the rights established under data protection legislation and other applicable laws by contacting the Data Protection Officer of Annamaxx Shop.