Responsible for Treatment
The Garantia das Quintas is a company dedicated to the trade and production of wines, and the organization of activities related to wine tourism. For the pursuit of its activity, it is necessary to collect and process personal data of its customers, workers or third parties that are related to it, assuming in that capacity the role of Responsible for Data Processing with all the obligations that this position implies.
We know the importance that personal data has for its holders and that is why we make it available so that, in an easy and free way, you can exercise all your rights through the following mail: rgpd@ajpinto.pt
Identity and Mission
The Garantia das Quintas has as its main focus the satisfaction of its customers, from whom they need to collect personal data. At the same time, it also collects and processes employee data. And despite the fact that data processing is complementary to its activity, it guarantees that it will do so in strict compliance with what follows from the GDPR and the law.
We consider the privacy of our customers, workers and others an essential asset and to which we will give the greatest protection.
Personal data
Personal Data is all information, regardless of its nature or support, relating to a perfectly identified or identifiable natural person. Any person who can be identified directly or indirectly by means of an identifier is considered identifiable, namely, name, identification number, location data, electronic identifier or other specific elements of physical, physiological, genetic, mental, economic identity, cultural or social that allow the identification of that natural person.
What categories of personal data do we process?
In the management of our activity and so that we can provide our best services, we process the identification data (name, sex, civil and tax identification number, nationality, date of birth, other personal data), your data contact details (address, telephone contact, e-mail address). Regarding our employees, we collect the same type of data mentioned above, to which we add data related to their marital status, household and educational qualifications, social security identification number.
Collection and Processing of Personal Data
The sole purpose of collecting and processing data from our customers and employees is to provide the services that constitute our mission and to conclude employment contracts. Access to personal data is done directly, indirectly or even by direct contact with customers and employees.
What is the basis and purpose of the processing of personal data?
The purposes of processing your personal data are the management of the contract (work and service provision) and the provision of the best service and compliance with legal and contractual obligations.
As for the legal foundations for the processing of personal data, they are identified as (1) Consent (regarding authorization to capture and disseminate the image), (2) Execution of contract or pre-contractual steps (when the processing of personal data necessary for the execution, execution and management of the employment contract or service provision), (3) Compliance with legal obligation (when the processing of personal data is necessary to fulfill a legal obligation to which the Foundation is subject, such as the communication of data to police, judicial, fiscal or regulatory entities, or (4) Pursuit of our legitimate interest (when the processing of personal data corresponds to a legitimate interest in the Garantia das Quintas), and may also have as a cause (5) the safeguarding the vital interests of customers or employees.
The data will be processed and kept according to the purposes and for the minimum legal period necessary.
Liability of Subcontracted Entities
Your data may be processed by entities subcontracted by the Garantia das Quintas, with those entities being provided with only the data necessary to perform the required service.
We guide all our activities and extend the following data processing rules to Third Parties and Subcontractors:
• personal data will be processed in compliance with the legal data processing regime, this privacy policy and with the guarantee of legal, fair and transparent treatment;
• the data collected are merely instrumental to our activity, intended to pursue a specific, specific and legitimate purpose, without further processing incompatible with these purposes;
• we respect the principle of data minimization, collecting only data considered adequate, relevant and necessary for the purposes of collection and processing;
• in compliance with the principle of accuracy, we will keep your data accurate and updated whenever necessary, with all measures necessary to guarantee its integrity being adopted and made available to its holder;
• we assume the principle of preserving your data in such a way that it is possible to identify you only during the period necessary for the purposes for which the data is processed;
• we will treat your data in accordance with the principle of security – protecting your data from possible illegal and unauthorized treatment, preventing any loss, its destruction or unforeseen damage, adopting all technical and organizational measures suitable for data processing that guarantees the security, integrity and confidentiality of data;
• whenever you are asked for consent to the processing of data, we will provide you with the necessary information regarding the purposes of the processing and remain faithful to these purposes.
Holder Rights
The holders of personal data have the following rights, which they can exercise easily and free of charge:
Right of Access – right to obtain confirmation of what your personal data are processed and information about them.
Right to view or obtain a copy, for example of invoices or written agreements.
Right of Rectification – right to request the rectification of your personal data that are inaccurate or to request that incomplete personal data be completed.
Right to erase data or “right to be forgotten” – right to have your personal data erased, as long as there are no valid grounds for its conservation, such as the cases in which the Garantia das Quintas must preserve the data to fulfill a legal obligation or require the exercise of a right.
Right to Portability – the right to receive the data you have provided to us in a digital format in common use and automatic reading.
Right to Withdraw Consent – when the data processing is based on the Client’s agreement, the Client has the right to withdraw his consent at any time. The withdrawal of consent does not compromise the legality of the treatment carried out based on the consent previously given.
Right of Opposition – in cases where the data processing is carried out for the purposes of the legitimate interests of the Farm Guarantee, or the processing is carried out for the purposes of direct marketing or profiling based on your personal preferences or interests, you can also, at any time oppose the processing of personal data.
Processing Limitation Right – the right to request the limitation of the processing of your personal data, in the form of (1) suspension of treatment or (2) limitation of the scope of treatment to certain categories of data or processing purposes.
Right to File a Complaint – the right to file a complaint with the supervisory authority, the National Data Protection Commission, in addition to being able to do so directly under the Garantia das Quintas, if you consider that your data is not being subject to legitimate treatment.
The exercise of rights is free of charge, unless it is a manifestly unfounded or excessive request, in which case a fee may be charged. You should send your written communication to the e-mail address: rgpd@ajpinto.pt
Technical and organizational guarantees for the protection of personal data
To guarantee the security of the data of users, workers and other owners, as well as the maximum confidentiality, the Garantia das Quintas treats all personal data in an absolutely confidential manner, in accordance with its internal security and confidentiality policies and procedures, which they are updated periodically according to needs, as well as the legally provided terms and conditions.
Depending on the nature, scope, context and purposes of the data processing, as well as the risks arising from the treatment for the rights and freedoms of its holders, we apply both when defining the means of treatment and when processing them, the technical and organizational measures necessary and adequate for data protection.
The Garantia das Quintas is also committed to ensuring that, by default, only the data that is necessary for each specific purpose of treatment is processed and that these data are not made available without human intervention to an undetermined number of people.
Applicable Laws and Venue
The Privacy Policy, as well as the collection, processing or transmission of Customer and Employee Data, are governed by the provisions of Regulation (EU) 2016/679, of the European Parliament and of the Council, of 27 April 2016 and by legislation and regulations applicable in Portugal. Any disputes arising from the validity, interpretation or enforcement of the Privacy Policy, or which are related to the collection, processing or transmission of Customer data, must be submitted exclusively to the jurisdiction of the judicial courts of the Porto District, without prejudice to the legal rules applicable imperatives.
