Data Protection and Privacy Policy




The privacy policy described below gives you an overview of how Atrás da Montra - Equipamentos para Espaços Comerciais, Unipessoal, Lda., hereinafter referred to as Atrás da Montra, treats your personal data and your rights in this regard, in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council - General Data Protection Regulation ("GDPR") and other applicable legislation on privacy and data protection. The specific personal data that will be processed and how it will be used depends to a large extent on the services requested by you and agreed with you.

This privacy policy applies to the personal data of our online store Users, Customers and Suppliers, where these are natural persons.

Each time you use our online store you are subject to the application of this Privacy and Cookies Policy in force at any given time, so we suggest that you read these policies carefully to check that you agree with their terms.

From time to time, we may change this Privacy Policy. If you want to keep up to date, please visit this page, as any changes will be posted here.

For the purposes of the applicable legislation on data protection, the company responsible for the processing of your personal data is Atrás da Montra - Equipamentos para Espaços Comerciais, Unipessoal, Lda. with the tax identification number 507 578 295.

Our online store may contain, occasionally, links, banners or other hypertext links to websites and services of other companies, which have their own privacy policies, and / or services provided by third parties installed on your device that may allow access to information contained therein. We recommend that our Users carefully read the privacy policies of such third parties before submitting any personal data to those websites. Atrás da Montra has no control over the content of those websites and is therefore not responsible for the content of the privacy policies of such third parties nor for the treatment that is given to your personal data by them.



General Data Protection Regulation (GDPR)  - General Data Protection Regulation (GDPR) - a European Union legal instrument that aims to harmonize European data protection laws. It has an effective date of application on May 25, 2018 and any references to it should be interpreted accordingly to include any legislation amending, concretizing or aiming to implement it.


Personal Data - any information relating to a natural person that can directly identify him or makes him identifiable, directly or indirectly, in particular by reference to an identifier.


Customers - customers and others to whom Atrás da Montra provides services or goods in the course of its business.


Suppliers - refers to partners, consultants, merchants (including sole traders) and independent contractors or any other entity that provides goods or services to Atrás da Montra. In some circumstances, Atrás da Montra will subcontract the services it provides to Customers to third party suppliers who perform the services on behalf of Atrás da Montra, who are also covered by this definition and this Privacy Policy.


Staff - includes employees, as well as possible interns involved directly in the activity of Atrás da Montra


Users of the online store - any person who accesses our online store, browses through it and creates his or her user account.


Atrás da Montra - whenever we talk about Atrás da Montra, we refer to the entity responsible for the treatment of the website users' personal data.


Delete - we will permanently delete your personal data as soon as the retention period ends or when we receive a valid request from you to do so and provided that there are no legitimate interests that justify keeping your personal data.


Atrás da Montra collects various types of personal data depending on the different purposes, as explained below. In any case, we emphasize that we do not knowingly collect personal information from persons under the age of 18. If we learn that we have unintentionally collected personal information from children under the age of 18, we will take steps to delete the information as soon as possible, unless we are required by applicable law to retain it.


Customer Data - We only collect data necessary for the preparation, performance and execution of any contract entered into between you and Atrás da Montra, and to respond to any subsequent claims relating to it. We usually only need to have your contact details (such as name, telephone number, email address, address and zip code) to enable us to ensure that our relationship runs smoothly. We also hold information relating to your online engagement, which we use to ensure that the marketing communications we send to you are relevant and timely, as consented to by you. If for any reason we need any additional personal data, it will be requested in a timely manner.


Supplier Data - We only collect data necessary for the preparation, performance and execution of any contract entered into between the Supplier and Atrás da Montra, and to respond to and manage any claims relating to the same. We will collect the data of contact persons, including those of your company, such as names, telephone numbers and email addresses. We will also collect bank details so that we can pay your invoices.


Online Store Users - We only collect the data necessary to ensure a good experience when using the online store and to allow you to take advantage of all the features and capabilities provided by it, as well as to help us manage the services we provide. This includes information such as how you use our online store, how often you access it, your browser type, your IP address, the location from which you view our online store, the language you choose to view our online store, and the times when our online store is most popular as well as other information best described in our cookie policy below.

Please note that the above list of categories of personal data that we may collect is not exhaustive.

In addition to the above, registration via social media (implies the use of your social media credentials such as your Facebook, Google+, Twitter and linkedin user login information to create your Behind the Storefront account and log in with it) also allows us to collect personal data: when you use the social media login option, Behind the Storefront will only use public profile information that is necessary to create your Behind the Storefront account. Atrás da Montra will not process any irrelevant information for this purpose that it receives from social media. Once the account is created, you will have the opportunity to complete it with any information you wish to share with us that will allow us to improve the experience when you interact with us. Any additional information you provide will only be used for the purposes outlined in this privacy policy.



Within the scope of our business relationship, you will have to provide the personal data that is necessary to establish and create this relationship and to comply with the pre-contractual and contractual obligations and steps arising from it, as well as those that we are legally obliged to collect. Without such data we will generally have to refuse to enter into or perform the contract or we will not be able to maintain the contract and will have to terminate it.

If you do not provide us with the necessary information and documentation, we will not be able to establish or continue the business relationship you have requested or to fulfill your requests to us.



We may collect personal data in several ways.

Personal information that we receive directly from you if you contact us proactively, usually by phone or e-mail; and/or if we contact you by phone or e-mail or through business development activities more generally.

There are a variety of ways that you can share your information with us. It all depends on what suits you. These might include:

  •          Entering your information into the Atrás da Montra online store via the various forms as part of the registration or contact process; or
  •          Interacting with us through a social media channel, such as Facebook or Twitter or other;
  •          Subscribe to our newsletter.

Personal data we receive from other sources, typically through commercial due diligence or other market information, including lists of participants in relevant events. We also receive personal data from other sources, for example if you "like" our Facebook page or "follow" us on Google+, Linkedin or Twitter, we will receive personal information from those sites.

To the extent that you access our online store or read or click on an email from us, where appropriate and in accordance with local laws and requirements, we may also collect your data through you or automatically. When you visit our online store there is certain information that we may collect automatically, whether or not you choose to use our services. This includes your IP address, the date, time and frequency that you access our online store and how you browse its content, all as set out in the cookie policy below.

We collect your data automatically through cookies in accordance with your browser's cookie settings. If you are also a customer of Atrás da Montra, we may use data about your use of our online store to improve other aspects of our communications with you or the services we provide to you.




Supply of products and services

Atrás da Montra may use your personal data when this is necessary to perform the contract concluded between you and Atrás da Montra, as well as to identify you. We may also use your Personal Data to prevent and investigate possible misuse of your Personal Data.


Marketing Activities

We may, from time to time, send you information which we feel may be of interest to you. In particular, we may use your data for the purposes listed below, where appropriate, namely:

  •          to allow us to carry out commercial or marketing activities, in particular to promote actions to publicize new features or new products and services;
  •          to send you information about reports, promotions, offers, events, and networking;
  •          to provide you with information about certain discounts and offers to which you are entitled because of your relationship with Atrás da Montra;        
  •          allow us to send you newsletters, which may contain information about promotional campaigns, information about events, discounts, promotions and offers, invitations, reminders about your reservations, actions to publicize new features, new products or services and to send you information about participation in contests and sweepstakes, in accordance with the thematic preferences you have indicated, by email;
  •          to provide you with information about personalized and exclusive offers for products and services identified based on your personal preferences and behavior, as well as from the use of products, services and navigation on the sites.

When you have provided us with your electronic contact details in connection with the sale of a product or service, we may use them for marketing our own or similar products and services. However, you may, free of charge, if you do not agree with our marketing approach, refuse to send such communications either when they are collected or when each message opts out. For sending any other type of electronic communication, we will ask for your express prior consent. We need your consent for some aspects of these activities that are not covered by our legitimate interests (in particular, the collection of data through cookies and the provision of direct marketing to you through digital channels).

If you do not agree with our marketing approach, you have the right to withdraw your consent at any time. All of our marketing is based on what we think will best serve our Customers, but we are aware that we will not always get it right. We may use your data to serve you advertisements from Atrás da Montra and other content on other sites such as Facebook. If you do not want us to use your data in this way, please turn off the "Advertising Cookies" option (see our Cookie Policy).


Other Purposes

We may further use your personal data to:

  •          To store (and update as necessary) your information in our database so that we may contact you in relation to contracts you wish to enter into/agree to with us;
  •          To provide you with services or to obtain support and services from you;
  •          To comply with certain legal obligations;
  •          To help us target appropriate marketing campaigns, where Atrás da Montra may make automated decisions, including profiling;
  •          In rare circumstances, to assist us in asserting, exercising or defending a right; and

We may also use your personal data if we consider it necessary to do so in order to protect our legitimate interests.



Atrás da Montra may use your personal data to communicate with you, namely to send you news related to our products or services, or to assist you in aspects related to customer support, namely to respond and process your requests through the customer service channels, as well as to monitor the quality of our service.

In this case your full name, email address and phone number will be collected.

The subscription to the Newsletter Atrás da Montra may involve the use of personal data in order to proceed to a personalized advertising of our products and services available to the user through email, push notifications through any other electronic means or third parties.

You can cancel the Newsletter registration at any time by following the information that we provide in each communication.

Atrás da Montra may use data that has been identified based on your personal and behavioral preferences, which we collect from your interactions with us, either through the online store, support line, as well as from the use of products, to send you personalized offers.

In case you consider that such processing may generate some kind of emotional repercussion, you may exercise your right to access and/or object, as well as voluntarily exclude yourself without justification.

We inform you that you may limit this purpose by exercising the right to object by writing an e-mail to any of the contacts indicated under "How to contact us".


Where appropriate and in accordance with local laws and requirements, we may share your personal data in various ways and for various reasons with the following categories of persons:

  •          In the course of an investigation, complaint or procedure, to the Tax Authorities, Audit Authorities, the Administration, Public Bodies, the Court, Foreigners and Border Services ("SEF") and Security Forces, who are responsible for the matter and the areas or departments of Atrás da Montra that cooperate in the collection of information and communication of facts to the competent authority;
  •           Third party service providers who perform functions on our behalf (including external consultants, business partners and professional advisors such as lawyers, auditors and accountants, recruitment firms, technical support functions and IT consultants who perform testing and development work on our company's technology systems);
  •          Third party providers of computer services and datacenter storage services that use the most innovative information security techniques, where we have an appropriate handling agreement (or similar protections);
  •          Marketing platforms and technology providers;
  •          In the event of the acquisition or disposal of businesses or assets, we may share your personal data with prospective acquirers of those businesses or assets, subject to prior consent;
  •          In the case of payments, credit and other payment service providers, as well as payment technology service providers to whom data is transmitted to effect the transaction, and who may be obliged by the law of the state in which they operate, or by agreements entered into by them, to facilitate information on transactions to authorities or official bodies of other countries, located both within and outside the European Union, in the fight against terrorist financing, serious forms of organized crime and prevention of money laundering.

Our online store provides you, under certain circumstances, with social plugins from various social networks. If you decide to interact with a social network such as Facebook, Twitter, Google+ or linkedin (for example through account registration), your activity in our online store will be available to the respective social network. If you are logged into one of these social networks during your visit to our online store, or if you are interacting through one of the aforementioned social plugins, the social network may include this information in your profile on that social network, depending on your privacy settings. If you wish to avoid this kind of data transfer, please log out of your social network account before entering our online store or change your privacy settings whenever possible. We encourage you to read the privacy policies of the social networks you use for detailed information about the collection and transfer of personal information so that you know your rights and what privacy settings appropriate to your profile you should select.


We are committed to taking all reasonable and appropriate measures to protect the personal information we possess from misuse, accidental or unlawful alteration, loss and unauthorized disclosure or access. To this end Atrás da Montra uses the most innovative information security techniques, rules and other procedures in order to ensure the protection of your personal data, as well as to prevent unauthorized access to data, improper use, disclosure, loss or destruction.

If you suspect any misuse, loss or unauthorized access to your personal information, please inform us immediately.


We only store your personal data for as long as is necessary to achieve the purpose for which we collected it, to respond to your needs, your requests to us, or to comply with our contractual and legal obligations.

To determine the period for which we keep your data, we use the criteria listed below. If several criteria apply simultaneously, we will retain your personal data in accordance with the criterion that results in your personal data being retained for the longest period of time.

a)    When you purchase products and services, we will retain your personal data for the duration of our business relationship, including any claims that may arise, as well as for a period of ten 10 years following the termination of such relationship, without prejudice to the compliance with legal obligations of the controller;

b)    When you contact us to ask questions, request information and clarifications, we will keep your personal data for the period of time necessary to resolve your question/provide you with the information and/or clarifications requested;

c)    When you create a customer account, i.e. when you register with our online store, we will retain your data until you ask us to delete it or after a period of inactivity of two 2 years;

d)    Where you have given consent to send direct marketing, we will retain your personal data for as long as the purpose for which it was collected remains unchanged or until you unsubscribe or ask us to delete it;

e)    With regard to the use of cookies, we will keep them for as long as necessary to achieve the purposes inherent to them, as detailed in the Cookies Policy;

f)     For the period of time prescribed by applicable law; or

g)    Until the specific purpose applicable to certain data ceases to exist.


We may also retain some of your personal data to the extent necessary to comply with our legal obligations and to administer or enforce our rights, including through recourse to judicial or administrative remedies.

In any of these situations, if a judicial or administrative procedure is pending, the data will be kept for the duration of the procedure and up to six months after the final decision.

Once the aforementioned retention periods have expired, the personal data will be eliminated and/or deleted in an absolutely secure manner.


One of the main objectives of the GDPR is to protect and clarify the rights of EU citizens and individuals in the EU with regard to data privacy. This means that you have a number of rights with respect to your data, even if you have given it to us yourself. These are described in more detail below.

We will endeavor to deal with your request without undue delay and, in any event, within one month (subject to any extensions permitted by law). Please note that we may keep a record of your communications to help us resolve any issues raised by you.

Right to object -  this right allows you to object to our processing of your personal data on grounds relating to your particular situation where your personal data is processed for one of the following reasons:

                       I.       our legitimate interests;

                     II.        to enable us to perform a task in the public interest or to exercise official authority; and

                   III.         to send you direct marketing materials.

If you exercise the right to object, we will stop the processing of the data to which you object, unless:

  •          we can demonstrate that we have compelling legitimate grounds for the processing that override your interests; or
  •          we are processing your data to assert, exercise or defend a right.


Right to withdraw consent -  Where we have obtained your consent to process your personal data for certain activities (for example, for marketing purposes), you may withdraw this consent at any time and we will no longer carry out the specific activity to which you have previously consented, unless we consider that there is an alternative reason to justify our continued processing of your data for this purpose, in which case we will inform you of this condition.


Data Subject Access Requests - You may ask us at any time to confirm the information we have about you, as well as to request additional information about the purposes of the processing, the period for which we keep your data, the existence of automated decisions, the recipients to whom the data is disclosed, among other information provided for in Article 15 of the RGPD. We may ask you to verify your identity and further information about your request. If we grant you access to information we hold about you, we will not charge you for such access unless your request is "manifestly unfounded or excessive". If you ask us for additional copies of this information, we may charge you a reasonable administrative fee, where legally permissible. Where legally permissible, we may deny your request. If we deny your request, you will always be informed of the reasons for doing so.


Right to Forget/Erasure - In certain circumstances, you have the right to request that we delete your personal data. Normally, the exercise of this right must meet one of the following criteria:

a)    the data is no longer necessary for the purpose for which we originally collected and/or processed it;

b)    where you have withdrawn your consent for us to process your data and there is no other valid reason for us to continue processing it;

c)    where you object to the processing and there are no overriding legitimate interests to justify it;

d)    the data has been unlawfully processed (i.e. in a way that does not comply with the GDPR); or

e)    it is necessary for the data to be erased in order to comply with our legal obligations as a data controller.

This right, however, does not apply, and therefore Atrás da Montra may continue to process your data legitimately where necessary:

a)    to exercise the right of freedom of expression and information;

b)    to comply with legal obligations or to perform a task of public interest or the exercise of official authority;

c)    for reasons of public health in the interest of the public; or

d)    for the exercise or defense of a right.

Upon complying with a valid request for erasure of data, we will take all reasonable practical steps to erase your personal data.        


Right to restrict processing - In certain circumstances, you have the right to restrict our processing of your personal data. This means that we may only continue to store your data and may not carry out any further processing activities with it until

      i.        one of the circumstances listed below is resolved;

     ii.        we have obtained your consent; or

    iii.        further processing is necessary for the establishment, exercise or defence of a right, the protection of the rights of another person or for reasons of substantial public interest of the EU or a Member State.

The circumstances in which you are entitled to request that the restriction of the processing of your personal data are:

a)    in the event that you contest the accuracy of the personal data we process about you. In this case, our processing of your personal data will be restricted for the period during which the accuracy of the data is verified;

b)    in the event that you object to the processing of your personal data for our legitimate interests. In this situation, you may request that the data be restricted while we verify our grounds for processing your personal data;

c)    if our processing of your data is unlawful, but you would prefer us to restrict our processing of your data rather than erasing it; and

d)    if we no longer need to process your personal data but need the data for the establishment, exercise or defense of a right.

If we have shared your personal data with third parties, they will be notified of the restricted processing, unless this is impossible or involves a disproportionate effort. We will, of course, notify you before lifting any restriction on the processing of your personal data.


Right of rectification - You have the right to request that we rectify any inaccurate or incomplete personal data we hold about you. If we have shared such personal data with third parties, they will be notified of the rectification, unless this is impossible or involves a disproportionate effort. Where appropriate, we will also disclose to you to which third parties we disclosed the inaccurate or incomplete personal data. In cases where we believe it is reasonable not to comply with your request, we will explain the reasons for our decision. It is important that the personal information we hold about you is accurate and up to date. Please let us know if there are any changes to your personal information during the period that we retain your data.

Right to data portability - If you wish, you have the right to transfer your personal data between controllers. In effect, this means that you can transfer your data from your Atrás da Montra account to another online platform. To enable you to do so, we will provide you with your data in a commonly used password-protected machine-readable format so that you can transfer the data to another online platform. Alternatively, we may transfer the data directly for you. This right to data portability applies to: (i) personal data that we process automatically (i.e. without any human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or to fulfil a contract.


Right to lodge a complaint with a supervisory authority - You also have the right to lodge a complaint with your local supervisory authority, which in Portugal, that is the National Commission for Data Protection. You can contact it in the following ways:

Telephone: (+351) 21 392 84 00

Privacy Line: (+351) 21 393 00 39

Email: [email protected]

Online requests for information:

Online submission of complaints:

Address: Rua de São Bento, nº 148-3º | 1200-821 Lisboa

Fax: (+351) 21 397 68 32


If you wish to exercise any of these rights or withdraw your consent for the processing of your personal data (if consent is our legal basis for processing your personal data), please contact us. Please note that we may keep a record of your communications to help us resolve any issues you raise with us.



If you wish to exercise any of the above rights, suspect misuse, loss or unauthorized access, or have any comments or suggestions regarding this Privacy Policy, you may contact us at the following addresses:

Phone: (+351) 21 392 84 00

Email: [email protected]

Address: Loja n.º 1, Zona Industrial, Arruamento R | 3850 – 184 Albergaria-a-Velha, Portugal

How can you contact us to update your marketing preferences? You can do so by emailing us at our general emails, or by clicking the unsubscribe link in any marketing email we send you.


Warranties and Disclaimers


The user guarantees that the personal data provided to Atrás da Montra is correct and accurate and undertakes to notify any changes or modifications to the same and assumes sole responsibility for losses and damages caused by erroneous, inaccurate or incomplete communication of data. The user is expressly warned that by disclosing personal data in public means of Behind the Storefront as Facebook, Google +, Twitter and linkedin, this information can be seen and used by third parties. The Behind the Store does not read any personal communication posted on the websites of its customers.



The Atrás da Montra website is optimized for viewing in Google Chrome, Safari, Mozilla Firefox, Microsoft Internet Explorer, Microsoft Edge.


What is a cookie?

A "cookie" is a file of information that is stored on your computer's hard drive that records your navigation of a site so that when you visit that site again, it can present you with personalized options based on the information stored about your last visit. We may also use cookies in our online store to analyze traffic and for advertising and marketing purposes, which do not harm your system.

If you want to check or change the type of cookies you accept, you can do so in your browser settings.


How do we use cookies?

We use cookies to do two things to track your use of our online store. This allows us to understand how you use the store and to track any patterns that arise individually or from larger groups, which will help us to develop and improve our store and services in response to what our visitors want and need; and

These cookies are:

Session cookies - These are only stored on your computer during your web session and are automatically deleted when you close your browser - they usually store an anonymous session ID allowing you to browse a website without having to log in to each page, but do not collect any information from your computer; or

Persistent cookies - These are stored as a file on your computer and remain when you close your web browser. The cookie can be read by the web store that created it when you visit that web store again. We use persistent cookies such as Google Analytics, Facebook and Mailchimp.

Strictly necessary cookies - These are essential to allow you to use the online store effectively, they cannot be disabled. Without these cookies, the services available to you in the online store cannot be provided. These cookies do not collect information about you that can be used for marketing.

Performance cookies - These cookies allow us to monitor and improve the performance of our online store. For example, they allow us to count visits, identify traffic sources, and see which parts of the online store are most popular.

Functionality cookies - These allow our online store to remember the choices you make (such as your username, language, or the region you are in) and provide enhanced functionality. For example, we may provide you with pertinent news or updates on our online store. These cookies may also be used to remember changes you make to text size, font, and other parts of web pages that you can customize. They may also be used to provide services that you have requested, such as viewing a video. The information these cookies collect is usually anonymized.

Personalization cookies - These cookies are persistent (for as long as you are registered with us) and mean that when you log in or return to the online store you may see ads similar to those you have previously browsed.







Prestashop e PHPSESSID

Prestashop Requirements

Cookie generated by applications based on the PHP language. It is a general-purpose identifier used to keep user session variables. It's usually a randomly generated number, the way it's used can be site-specific, but a good example is keeping a user's login status between pages.

20 days


Google Tag Manager

The _gcl_au cookie is created by Google Tag Manager and is used to support marketing campaigns, in particular to measure conversions.

Access shared with third parties (google)

90 days


Google Analytics

The _ga cookie assigns and stores information relating to a unique user identifier. This identifier represents the user visiting the website where it has been set. Through this cookie, Google Analytics is able to recognise unique browser and device combinations.

Access shared with third parties (google)

2 years



This cookie specifies how long our site is accessible to a visitor who has successfully completed a previous Captcha or JavaScript challenge.

30 minutes


Under Law No. 41/2004 of 18 August, the storage of information and the ability to access information stored in the terminal equipment of a user (including through cookies) are only made by Atrás da Montra if the user has given its prior express consent to the installation of cookies on your equipment, so we ask you, prior to using the online store, to accept this Privacy Policy and Cookies.


How can I prevent the use of Cookies on the websites?

You have the right to withdraw your consent to the use of cookies by Atrás da Montra at any time by deleting the cookies stored on your computer through the configuration options of your Internet browser.

You can consult this information for major Internet browsers at the following addresses:

Chrome -

Explorer -

Firefox -

Safari -

Finally, if you wish to have greater control over the installation of cookies, you can install programs or add-ons to your browser, known as "do not track" tools, which will allow you to choose the cookies you wish to allow.

In case of blocking or not authorizing the use of cookies, no cookie will be stored on your equipment, but the proper functioning of our online store is not guaranteed, and therefore the customer can not derive maximum benefit from the content provided, and with each new access to the online store, you will always be asked for permission to use cookies.




We may sometimes need to process personal data and, where appropriate and in accordance with local laws and requirements, sensitive personal data in connection with the exercise or defense of rights. Article 9(2)(f) of the GDPR allows such processing when it is "necessary for the establishment, exercise or defence of legal claims or when courts are acting in their judicial role".

This may arise, for example, where we need to obtain legal advice in relation to legal proceedings or where we are required by law to retain or disclose certain information as part of a legal process.



Atrás da Montra may occasionally change this statement and its Privacy Policy to reflect company image and customer feedback. We encourage our customers to periodically review our Privacy Policy to stay up to date on how Atrás da Montra is protecting your information, and we will inform you when there are material changes in our Privacy Policy.


Atrás da Montra welcomes your comments regarding this Privacy Policy. If you believe that Atrás da Montra has not adhered to this Statement, please contact us. We will try to evaluate your suggestion and respond to you as soon as possible.