Privacy policy
- (Scope)
- This Privacy Policy applies exclusively to the collection and processing of personal data by W66, LDA. Any hyperlinks to websites external to W66, LDA are not covered by this privacy statement.
- The Privacy and Personal Data Protection Policy is intended to regulate the processing of personal data to be carried out by W66, LDA in the use of the wine66.eu website and the services available on it (hereinafter referred to as the ‘Services’).
- This Privacy Policy regulates the eventual collection and processing, in particular consent, with respect to personal data collected or provided by users on any part of the wine66.com website, as well as the exercise of their rights with respect to this data, under the terms of the General Data Protection Regulation (Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016).
- By providing their personal data, the User expressly consents to the collection and processing of such data under the terms set out in this Privacy Policy.
- This Privacy Policy is applicable to any User, regardless of whether they have registered on the website or not.
- (Data controller) W66, with registered office at Rua Andrade Corvo, 62, Braga, Portugal, registered under the unique registration number and NIPC 515853070, with a share capital of €2,500.00 (two thousand five hundred euros), is the entity responsible for the collection and processing of personal data which provides the service and which, in this context, decides which data are collected, the means of data processing and for which purposes they are used.
- (Type of personal data collected)
- In the course of its business, W66 collects and processes personal data necessary for processing orders and communicating with Customers, processing information requests and possible complaints, statistical analyses, as well as their respective use for direct marketing purposes, processing in this area data such as: name, addresses, country, telephone number, tax identification number, e-mail address, date of birth and personal interests in alcoholic beverages.
- The personal data collected is processed by computer and in strict compliance with personal data protection legislation and stored in specific databases, created for this purpose, which guarantee its security and confidentiality in accordance with accepted information technology, technical and organisational measures, in order to protect against loss, alteration, destruction, misuse in general or the data collected being used for any purpose other than that for which consent was given by the owner of the data.
- If you wish to subscribe to the newsletter or request further information from us, you will be presented with a personal data collection form.
- If you fill in any of the forms available for the purposes described above, we consider that you have given your conscious, express and unambiguous consent to the activation and further use of these forms.
- (Personal Data)
- Any information of whatever nature and whatever its medium, including sound and image, relating to an identified or identifiable natural person.
- An identifiable person is one who can be identified directly or indirectly, in particular by reference to an identification number or to one or more factors specific to his physical, physiological, mental, economic, cultural or social identity.
- As a general rule, we do not collect sensitive data. Insofar as sensitive data is provided in compliance with a legal obligation or voluntarily and on the user’s initiative, we assume the user’s explicit, free and unambiguous consent to process this information in relation to the purposes for which it was provided.
- The processing of personal data includes, in particular, recording, collection, consultation, use, adaptation, modification, modification, storage, destruction, among other operations referred to in Article 4, No. 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.
- (Purpose) The use of the data collected has the following purposes, in particular: (1) Processing online orders, requests, queries or clarifications of the holder, through the website or applications; (2) Processing requests for information on products, services, direct marketing communications, campaigns, promotions, statistical purposes and personalised content, by prior consent to that effect; (3) Creating a personal account to be used for purchasing products through the website; (4) Processing customer complaints, suggestions and claims; (5) Performing profiling and analysis on customer behaviour; (6) Keeping customers informed about the latest products, offers, opportunities, via email, post, SMS.
- (Conservation Time)
- The period of time for which data is stored and retained varies according to the purpose for which the information is processed and in accordance with applicable legal obligations and requirements, which oblige the data to be retained for a minimum period of time.
- Therefore, and insofar as there is no specific legal obligation, data shall be stored and retained only for the minimum period necessary for the purposes for which they were collected or further processed, after which they shall be deleted.
- We expressly remind you that you may at any time request the deletion of all your personal data from our databases. This request should be sent to the e-mail address rgpd@wine66.com.
- Access, updating, rectification, objection, restriction, removal and portability of personal data.
- Any request for access, updating, rectification, opposition, limitation, deletion, portability or non-subjection to automated individual decisions of personal data that may identify you, may be requested by contacting W66,LDA directly or using the contact form on the Wine66.eu website, indicating the subject ‘Alteration, Opposition, Deletion or Portability of personal data’.
- (Legislation) W66, LDA guarantees the processing of personal data in accordance with the legislation in force concerning their collection, processing, use, disclosure, storage and privacy.
- (Data not processed) W66, LDA will not process personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as the processing of genetic data, biometric data, data concerning health or data about the holder’s sex life or sexual orientation.
- (Register) By accessing or using our services and participating in marketing activities promoted by W66, LDA, the user accepts the privacy and personal data protection policy of W66, LDA, giving consent to the collection and processing for the purposes mentioned in point 5, providing them directly and explicitly. Failure to provide or partial provision of personal data by the holder may limit or prevent the provision of services, participation in events, campaigns or any other promotional and/or commercial activity or integration in selection processes.
- (Collection) Personal data may only be collected in case of: (1) the data subject purchases products online; (2) contacts W66, LDA by e-mail or telephone; (3) fills in a form; (4) agrees to participate in marketing activities and/or campaigns and to receive commercial information; (5) registers on the W66, LDA website or at any commercial event, the latter even in a non-automated form.
- (Consent to receive information) The owner of the data will give prior consent to receive commercial communications for marketing purposes, and may object at any time by written communication addressed to W66, LDA. Such commercial information may be sent by W66, LDA, via email, telephone, SMS or any other means of electronic communication, social networks, Web 2.0, any mobile content or method.
- (Transmission) In addition to the obligations set out in the applicable Data Protection Act or the safeguarding and protection of its own interests, W66, LDA will not share any personal data with third parties, except for its group companies, provided that the security and integrity conditions of the respective data are guaranteed. W66, LDA may disclose your personal data to third parties provided that, for this purpose, it has unambiguously obtained the consent of the Data Subjects or when: a) the disclosure is made in compliance with a legal obligation, a decision of the National Data Protection Commission or a court order; or b) the disclosure is made to protect vital interests of the Data Subjects or any other legitimate purpose provided for by law. W66, LDA takes appropriate measures to ensure that the entities having access to the data are reputable and offer the best guarantees in this regard, which will be duly enshrined and protected in a contract signed between W66, LDA and the third party entity(ies). In any case, W66, LDA remains responsible for the personal data collected.
- (Technical and organisational measures) W66, LDA has appropriate technical and organisational measures in place to protect the data processed, in particular against unauthorised access or any other form of illegal or unlawful processing. W66, LDA guarantees, in addition to the security measures and internal protection of its facilities, the limitation of access to personal data only to its employees for the fulfilment of the purposes of processing.
- (Access, modification and right to be forgotten) The owner of the data is granted the right of access and rectification of the data processed, and may at any time withdraw consent to the processing and request the deletion of the data by written communication addressed to W66, LDA.
- (Duration of data retention) W66, LDA will make all reasonable efforts to ensure that it retains the data subject’s data only for as long as necessary in relation to the purpose for which it was collected, or as required under any contract or applicable law, for a maximum period of five (5) years.
- (Applicability) The privacy and personal data protection policies of W66, LDA apply to the processing of personal data carried out within the framework of its business activities and the provision of services, in accordance with the principles of lawfulness, fairness and transparency.
- (Cookies) The use of cookies, web beacons, plug-ins in social networks or any other similar technology will always be communicated in advance to the user, who will have the possibility of not accepting their use.
- (Automated decisions) No commercial decisions will be made based on automated decisions, nor will any action be taken that leads to profiling.
- (Supervisory Authority) The supervisory authority is the National Data Protection Commission (CNPD), located at Rua de São Bento n.º 148-3º, 1200-821 Lisbon, Portugal.
- (Communications) Any communication related to the processing of personal data should be addressed to W66, LDA by e-mail: ATENDIMENTO@WINE66.COM.