Privacy Policy
This Policy aims to inform Customers/Users about the general rules for the processing of personal data, which are collected and processed in strict compliance with the legislation on the protection of personal data in force – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”).
Susana Tavares & Tomoko Suga, Lda., with tax number 513 553 479, is committed to protecting the personal data of its customers and users of its landing page, website and/or online shop. To this end, it has drafted this Privacy Policy with the purpose of demonstrating its commitment to and respect for the rules governing the privacy and protection of personal data that we collect and process in accordance with the GDPR.
Susana Tavares & Tomoko Suga, Lda. adheres to best practices in the field of security and protection of personal data and has implemented the necessary technical and organisational measures to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent and limited to the authorised purposes. Hereafter, it shall be referred to as Feitoria do Cacao.
WHAT IS PERSONAL DATA AND WHAT DATA DO WE COLLECT?
Personal data is any information, of any nature and regardless of its format, including sound and image, relating to an identified or identifiable natural person, such as name, address, email address, etc.
A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to a name, an identification number, location data, electronic identifiers, or one or more elements specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
In the course of its activities, Feitoria do Cacao processes the personal data necessary for the provision of services and/or supply of products, such as name, address, telephone number and email address, as detailed information provided to the data subjects.
Without prejudice to the compliance with legal rules regarding the retention and transmission of data for the purposes of investigation, detection or prosecution of serious crimes, as well as other processing to which Feitoria do Cacao is legally bound, the data provided will be processed only to the extent necessary to provide the respective services.
Traffic, geographic location and profiling data may also be processed for marketing purposes or for the promotion of Feitoria do Cacao products or services, provided that the data subject has given their consent.
Feitoria do Cacao collects personal data via telephone, in writing or through its website, ensuring that the prior consent of the data subject is obtained whenever required.
Personal data collected may be processed electronically, either automatically or manually, and in all cases strict compliance with data protection laws is ensured. The data will be stored in specific databases created for this purpose and under no circumstances will they be used for purposes other than those for which they were collected or for which consent was granted.
RIGHTS OF THE DATA SUBJECT
As a data subject whose personal data is processed, you have the following rights regarding your personal data, in accordance with Articles 15 and following of the GDPR:
Right of access
You have the right to obtain confirmation from Feitoria do Cacao as to whether or not your personal data is being processed and, if so, to access your personal data.
Right to rectification
You have the right to obtain from Feitoria do Cacao the rectification of inaccurate or incomplete personal data concerning you.
Right to erasure (“right to be forgotten”)
You have the right to request the deletion of your personal data where one of the following grounds applies:
– The personal data are no longer necessary for the purpose for which they were collected or processed;
– You withdraw your consent and there is no other legal basis for processing.
This right cannot be exercised when the data must be retained in order to comply with a legal obligation.
Right to object
You may object to the processing of your personal data whenever the processing is carried out for direct marketing purposes.
Right to withdraw consent
You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out based on previously given consent.
Right to data portability
Where technically feasible, you may request the transfer of your data to another data controller. The data will be stored only for the purpose of exercising or defending legal claims.
If you wish to exercise these rights, or for any additional matters relating to data protection, you must contact the controller using the contact details below. Proof of identity will always be required.
If you consider that your rights have not been properly safeguarded, you may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados – CNPD).
More information is available at: https://www.cnpd.pt/
WHO IS RESPONSIBLE FOR PROCESSING YOUR DATA?
The entity responsible for processing your personal data is Feitoria do Cacao, which determines the purposes and means of processing.
For this purpose, if the data subject needs to contact the data controller, they may do so using the following contact details:
– dpo@feitoriadocacao.pt
– Feitoria do Cacao, Estrada Nacional 335, Rua Direita, Armazém Lote Nº5, Salgueiro, 3810-195 Aveiro, Portugal
WHO IS THE DATA PROTECTION OFFICER (DPO)?
The Data Protection Officer ensures, among other responsibilities, that data processing activities comply with applicable legislation. The DPO also verifies compliance with this Data Protection Policy, defines clear rules for the processing of personal data and ensures that everyone who entrusts their data to Feitoria do Cacao understands how it processes them and what rights they have.
Data subjects may contact the DPO for matters relating to the processing of personal data using the following details:
– dpo@feitoriadocacao.pt
– Susana Tavares – Estrada Nacional 335, Rua Direita, Armazém Lote Nº5, Salgueiro, 3810-195 Aveiro, Portugal
FOR WHAT PURPOSES DO WE PROCESS PERSONAL DATA AND WHAT ARE THE LEGAL GROUNDS?
We use your personal data to provide you with access to our website as a user, to generate usage statistics, to improve and develop our website, to provide services, to respond to your requests and messages, to send our newsletter (if you have subscribed to it), and to analyse aggregated data for business purposes.
In compliance with Article 6 of the GDPR, your data will be collected and processed in the following situations:
– You have given consent for one or more specific purposes;
– Processing is necessary for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract;
– Processing is necessary for compliance with a legal obligation;
– Processing is necessary to protect your vital interests or those of another natural person;
– Processing is necessary for the purposes of legitimate interests pursued by Feitoria do Cacao or by third parties, except where such interests are overridden by your rights and freedoms, particularly where the data subject is a child.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
The length of time personal data is stored depends on the purpose for which it is processed.
There are legal requirements that mandate minimum retention periods. In the absence of a specific legal requirement, data will be stored only for the period necessary to fulfil the purposes for which they were collected or subsequently processed, in accordance with the law.
WHEN DO WE SHARE YOUR DATA WITH THIRD PARTIES OR TRANSFER IT INTERNATIONALLY?
Feitoria do Cacao may use third parties to provide certain services. In some cases, these services may require access to personal data. When this occurs, Feitoria do Cacao ensures that these entities are reputable and offer the highest guarantees of compliance with data protection rules. These obligations are contractually established.
Any subcontracted entity will process the personal data of our Customers/Users on behalf of Feitoria do Cacao and must adopt the necessary technical and organisational measures to protect the data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, and any other unlawful form of processing.
In all cases, Feitoria do Cacao remains responsible for the personal data provided.
The provision of certain services may require the international transfer of your data, including outside Portugal, outside the European Union, or to International Organisations.
In such cases, Feitoria do Cacao will comply strictly with legal requirements, particularly regarding the adequacy of the destination country’s data protection regime and the contractual safeguards necessary to ensure compliance with applicable law.
