This Privacy Policy aims to inform the users of the Portugal by Wine platform about the general privacy rules and the terms of processing of their personal data, in strict compliance with the General Data Protection Regulation (GDPR - Regulation EU 2016/679) and current national legislation.
By using our platform, the user accepts the practices described in this document. Portugal by Wine reserves the right to update this policy periodically, so we advise regular consultation.
1. Data Controller
The entity responsible for the collection and processing of personal data provided on the platform is Portugal by Wine. For any questions related to data protection, the user may contact us directly via email at:
[email protected].
2. What data do we collect and for what purposes?
General navigation on the platform can be done anonymously. However, to provide our services, data collection is required at specific moments:
Account Registration and Booking Process:
Data collected: Name, tax identification number (VAT/NIF), address, telephone, email, and country of origin.
Purpose: This data is strictly necessary for the execution of the service contract (processing, confirming, and managing the booking, issuing invoices, and sending the respective vouchers and notifications).
Payments:
Data collected: Credit card or bank account details.
Purpose: Processing the booking payment. Note: Portugal by Wine does not store your credit card details on its servers. All financial processing is done externally, encrypted, and securely through certified financial entities (such as Stripe and PayPal). For refund purposes, the IBAN may be requested.
Communications and Tailor-Made Requests:
Data collected: Travel preferences, dietary restrictions, and the history of messages exchanged via Live Chat or the Message Center.
Purpose: Designing tailor-made experiences, responding to support requests, and facilitating communication with partners.
Reviews and Marketing (Newsletter):
Data collected: Email address and submitted reviews.
Purpose: Sending post-booking satisfaction surveys and, if the user explicitly consents, sending newsletters with news and promotions. Unsubscribing (opt-out) can be done at any time through the link provided in all emails.
3. Automatically Collected Data and Cookies
To improve the browsing experience, the platform automatically collects non-directly identifiable technical information, such as the IP address, browser type, operating system, time spent on the site, and visited pages.
Cookie Policy:
Portugal by Wine uses "Cookies" (small text files stored on the user's device) to retain browsing preferences and optimize the platform's functionality. Cookies do not store personal data. The user may, at any time, configure their browser to refuse Cookies, although this action may limit the operation of some site features.
4. Data Sharing with Third Parties
Portugal by Wine guarantees that users' personal data is never sold to third parties. Data sharing only occurs in situations strictly necessary for the execution of the service:
Partners (Service Providers): By making a booking, the user's essential data (name, contacts, and special requests) is shared with the partner winery or tour operator, solely and exclusively to ensure the correct execution and safety of the booked activity.
Technological Providers: Entities that provide web hosting, payment processing (Stripe, PayPal), and Live Chat platforms, acting under strict security protocols and in compliance with the GDPR.
5. Data Security and Retention
Portugal by Wine implements technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. All data is processed and transmitted using advanced SSL (Secure Socket Layer) encryption technology, and our servers are protected by firewall systems.
Retention Period: Personal data will only be kept for the period necessary for the purposes for which it was collected or to comply with legal obligations (such as invoicing). In the case of user accounts, the data will be retained for a period of 5 (five) years after the last account access (last login), being deleted or anonymized after that period.
6. User Rights (Data Subject)
Under current legislation, the user retains full control over their data and is guaranteed the following rights:
Right of Access and Rectification: Accessing your personal data and requesting its update or correction (which can also be done autonomously in your user account);
Right to Erasure ("Right to be Forgotten"): Requesting the deletion of your data, provided there are no contrary legal obligations (e.g., invoicing deadlines);
Right to Restriction and Objection: Objecting to the use of data for marketing purposes (Newsletter);
Right to Complain: If you believe that Portugal by Wine has not processed your data in compliance with the law, you have the right to file a complaint with the competent supervisory authority in Portugal: the National Data Protection Commission (CNPD).
To exercise any of these rights or request further clarification, please contact us via email at [email protected].