Customer Privacy and Data Protection

1. Data Subject Consent The data subject, pursuant to and for the purposes of Article 7 and subsequent articles of the GDPR, in their capacity as the data owner, provides their free, specific, informed, and explicit consent for the Company, hereinafter referred to as the Data Controller, to collect and process the following personal data: name, tax identification number* (unless invoiced to an end consumer), date of birth* (for online orders), phone number, mobile phone number, email address, and home address. The collection and processing of these data are mandatory for the conclusion of the transaction (ordering and purchasing products and services) through the Portal and optional for marketing purposes.

2. Purpose of Data Collection and Processing This data collection and processing have specific, explicit, and legitimate objectives, including the following purposes: concluding and executing the contract for the supply of goods and services, marketing and communication, invoice issuance, as well as the pursuit of the legitimate interests of the data controller (business operation and fulfillment of legal and contractual obligations). The legality of this processing is based on Article 6, Paragraph 1, items a), b), c), and f) of the GDPR.

3. Data Security and Storage All collected data are stored securely and confidentially. This data collection and processing is conducted lawfully, legally, and transparently. The data will be retained for the legally determined period. The Data Controller is the Company's Management, located at the store in Torres Novas, at the following address: Largo do Comércio 3B, Torres Novas 2350-213, phone number +351 925 009 051, and email address geral@templarsarena.

4. No Automated Decision-Making The data will not be subject to automated individual decision-making, nor will profiling be conducted for order processing or similar purposes. The data will not be processed by machines without human intervention. Personal data provided or processed will not be shared with third parties, neither nationally nor within the European Union, nor outside the EU.

5. Data Subject Rights The data subject has the right to request access, rectification, modification, or deletion of their personal data, as well as to withdraw consent—partially or fully, immediately or at a later time—without justification, except for legally required data retention. Requests must be submitted in writing to the Data Controller using the contact information provided above.

6. Right to File Complaints The data subject has the right to file a complaint with the supervisory authority if they believe there has been any unlawful data collection or processing. In Portugal, the supervisory authority is the CNPD (www.cnpd.pt).

7-12. Cookies Policy The document outlines the role of cookies in website functionality, their usage for improving user experience, and security practices. It explains that cookies do not extract files or unauthorized information, remain stored in the browser, and facilitate navigation. It also states that cookies are essential for optimized browsing and that disabling them is only possible through the browser settings. Third-party analytics tools, such as Google Analytics, may also use cookies.

13-14. Common Rules The latest version of this Privacy Policy was approved on May 10, 2025. The Company reserves the right to modify, delete, or add rules at any time without prior notice, to adapt to changes in the Portal, Online Store, or new functionalities. The terms of this Privacy Policy are fully accepted by all Parties without any reservation.

Lisbon, May 22, 2025.