Quinta da Vacaria 1616 - Vinhos, SA (hereinafter “QV”), with headquarters located at Quinta da Vacaria, 5050-364 Vilarinho dos Freires, Peso da Régua, Portugal and NIPC 50035988, owns the domain quintadavacaria.pt, where is hosted its online store (hereinafter “Website”).
This Privacy Policy was updated on June 22, 2022, and will be periodically reviewed so that it covers the way your personal data is managed.
QV is committed to protecting the privacy, confidentiality, integrity and security of the Personal Data of its customers and Website users. This obligation is extended to all its employees and partners who deal with them. The application of the principles listed in this document does not preclude the use of additional information security measures to protect your Personal Data. By using the services/products of the Website, you confirm that you are of legal age and that you accept all the considerations described in this policy including any changes that may be made at the time of periodic review of this policy. QV is committed to reviewing the Privacy Policy as often as necessary in order to comply with the laws and regulations aimed at the best practices of privacy (General Data Protection Regulation). If you have any doubts or questions about the way we manage your Personal Data, please contact us (see Available Contacts).
The Privacy Policy is intended to describe the procedures for collecting, using, processing and storing the information you provide to us when you use the Website or any of its associated subdomains, and to describe the practices adopted for such purpose.
During the consultation or use of Website services/products, if you are asked for data and information through which we can uniquely identify you, it will be managed in accordance with this privacy policy.
Personal Data is considered to be any information, which alone or in combination, can be used to identify directly or indirectly an individual, regardless of the nature and support of the information, including sound and image of the person.
An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identification number or to other factors specific to his or her physical, physiological, mental, economic, cultural or social identity.
The personal data processing operations we carry out are an essential tool for your satisfaction and for QV's activity and are performed in accordance with applicable law and best practices.
Your personal data will not be reused for other purposes that are not previously identified or that have no connection with those purposes for which they were initially collected.
The personal data we process has specific bases, depending on the purposes for which they are intended, and will be kept for the time necessary for the respective purposes, as listed in this Privacy Policy The personal data collected are only those necessary and appropriate for the purposes indicated. The following table shows the purposes of processing and data collected for these purposes, the respective grounds and the periods or criteria for storing data: For the adaptation, improvement and modification of the services, namely by identifying usage trends, or, to determine the effectiveness of promotional campaigns.
| Purpose | Foundation | Collected Data | Redention Period |
| To proceed with your customer registration in the reserved area of the WEBSITE. | Pre-contractual Diligences. | Customer data (first name, last name, TIN); shipping address and billing address (phone, address, house number, floor, zip code, city, country). | For as long as you are registered as a customer and want to use the respective website services and up to 1 year after the last access. |
| To process and track your purchases. | Pre-contractual due diligence and contract execution. | Customer data (first name, last name, TIN); shipping address and billing address (phone, address, house number, floor, zip code, city, country), order forms, payment data. | For the period necessary to execute the contract, without prejudice to the applicable legal deadlines. |
| So that we can send you newsletters or other publications that you have requested and/or that may be of interest to you, such as special offers or updates to the website. | Consent for that specific purpose. | Name and email. | 2 years. |
| For website management operations. | Name | Description | Duration |
| Origin | Consent for that specific purpose (cookies); Legitimate interests pursued by QV. | Cookie data. | 2 years. |
| For business purposes, such as data analysis, audits. | Consent for that specific purpose (cookies); Legitimate interests pursued by QV. | Cookie data. | 2 years. |
| For fraud prevention and information systems security. | Legitimate interests pursued by QV. | Endereço IP; Dados de cookies. | For as long as you are registered as a customer and wish to use the respective website services and until your session is terminated. |
| For the adaptation, improvement and modification of services, namely by identifying usage trends, or, to determine the effectiveness of promotional campaigns. | Consent for that specific purpose (cookies); Legitimate interests pursued by QV. | Cookie data. | 2 years. |
If the law provides for a specific or mandatory period, the data will be kept for that period. In all other cases, personal data will be kept at most for the times indicated above, periods that QV considers as sufficient for the fulfillment of the purposes. Upon expiration of the retention period, all personal data collected will be deleted.
We will collect your personal data through the forms on the website, but also through the website and the communication it makes with your equipment and the e-mail messages you send us.
Your personal data is collected through your equipment as follows:
QV is committed to processing your data in accordance with the law and in a legitimate way.
QV will not sell, rent or share your personal data with third parties except in the cases clearly identified in this Privacy Policy (see Point 9 to understand how).
QV's services are not directed to minors, and no personal data of minors is intentionally processed.
Cookies are small information files that help identify your browser and can store information such as user settings and preferences.
QV will store cookies on your device to personalize and make the navigation as easy as possible, but also, for troubleshooting, statistics, quality assurance, and to monitor the security of the system.
With the exception of cookies specifically required for the performance of the website, the storage of other cookies will always depend on the User's acceptance and consent, and this consent may be withdrawn at any time through specific browser tools.
To find out more about the cookies we use, please see our Cookie Policy.
Your personal data is kept secure through the adoption of various security measures, of technical and organizational nature, which ensure that only those Employees who must access it, in accordance with the need for access and rules created for this purpose, have access to personal data.
To protect your personal data we only use data center providers that provide us with adequate and documented security measures, in particular, guarantees that your personal data is stored on servers that are kept in controlled environments with limited access.
When you visit and access our website, cryptographic protocols such as Secure Sockets Layer (SSL) or Transport Layer Security (TLS) are used, ensuring confidentiality and integrity of communications. As well, your password is stored using a one-way hash, i.e. it cannot be retrieved (or disclosed) by anyone, including QV. All Personal Data is stored on secure and protected servers in controlled facilities.
Os dados pessoais são mantidos em servidores internos e por fornecedores nos seus servidores, nomeadamente, são mantidos junto à “WebTuga”, marca registada da Dream Fusion – IT Services, Lda,, com NIPC PT 508469058 e sede na Rua João Paulo II, nº 165 Loja AC 4750-177 Arcozelo, Barcelos, a qual nos oferece as garantias de segurança adequadas à proteção dos dados pessoais contra a sua difusão, perda, uso indevido, alteração, tratamento ou acesso não autorizado bem como, contra qualquer outra forma de tratamento ilícito.
We also ensure that our employees and third parties who may access your Personal Data are subject to strict contractual confidentiality obligations and may be held liable if they fail to meet such obligations.
We regularly review our Personal Data collection, storage and processing practices, including physical security measures, to protect any unauthorized access and use of our resources and your Personal Data.
We will always have the measures and controls in place to protect your Personal Data, but Internet use is not completely secure and, for this reason, we will not be able to guarantee the security or integrity of any information that is shared from users or to users over the Internet.
Although we take the care and precautions we deem appropriate to protect the Personal Data you provide and collect from us, you should be aware that no security system is impenetrable. Therefore, you should take certain precautions, such as, for example, you should keep your password secret and not disclose it to anyone else; if you believe that your password has been misused, you should notify us immediately; you should also take care to log out and log in each time you close your browser.
In case of detection of privacy violations of your Personal Data, we commit to notify them to you and to the supervisory authority in Portugal (CNPD), complying with all legal and regulatory requirements.
Before we explain how you can exercise your rights, you should know what they are. Thus, the law gives you the right to ask us to exercise the following rights:
You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the Comissão Nacional de Proteção de Dados, at www.cnpd.pt)
To exercise the above rights you should contact QV through the following email, geral@quintadavacaria.pt.
If you request us to delete some or all of your personal data, some of the services you have requested may not be provided to you, and QV will retain only the personal data necessary to comply with its legal obligations
QV may use third parties to provide certain services, such as maintenance, technical support, marketing, invoicing or payment management, and they may have access to some of your Personal Data, including the data necessary for the contracted purposes.
QV ensures that entities that have access to data are credible and offer high guarantees of protection, never being transmitted beyond what is necessary to provide the service contracted, remaining, however, QV as responsible for personal data provided.
For the purposes of delivery and transport of goods, QV uses the services of Torrestir S.A. Regarding the management and monitoring of information systems, QV uses the services of PT4. For making and managing payments, QV uses Altice Pay, S.A. Also for sending newsletters, QV uses the services of E-GOI.
QV may also communicate your data to the following entities:
QV may also transmit data to third parties in the scope of investigations, inquiries and judicial and/or administrative processes or of a similar nature, provided that this is duly ordered by a court order to that effect.
If data transfers may occur to third countries outside the European Union, QV will comply with legal rules, particularly with regard to the suitability of the destination country in relation to the protection of personal data and requirements, which are applicable to such transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of safety and protection.
If data transfers may occur to third countries outside the European Union, QV will comply with legal rules, particularly with regard to the suitability of the destination country in relation to the protection of personal data and requirements, which are applicable to such transfers, and personal data will not be transferred to jurisdictions that do not offer guarantees of safety and protection.
The website is not directed to minors under 18 years old, so we request that these minors do not provide us with personal data through the website, application, social networks and social media or emails
We consider it the responsibility of legal representatives (e.g. Parents) to monitor the use of our services/products by their children/ minors.
If a legal representative has reason to believe that a minor has provided us with Personal Data, he or she should contact us immediately to ensure that the Personal Data is removed.
QV appreciates that you do not send or disclose to us any sensitive personal data, i.e. information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, health data or data concerning a natural person's sex life or sexual orientation.
Should you still send or make such categories of personal data known to us, it will be deleted immediately.
QV reserves the right to adjust or change this Privacy Policy, at any time, and such changes will be posted.
If you have any questions or concerns regarding this Privacy Policy, please contact us in writing at geral@quintadavacaria.pt.