Privacy Policy

Data controller

5 Bagos — Sociedade Agrícola, Lda., company number 508 566 568, Quinta da Saudade, 5150-333 Muxagata, Vila Nova de Foz Côa. For questions about personal data or to exercise your rights: geral@palatodocoa.pt.

Data we collect

Newsletter and member registration: name and email.

Ordering profile: telephone, address, postal code and tax number, if provided.

Account: a password, stored as a salted, non-reversible cryptographic hash, never in readable text.

Visit request: name, email and number of people; optionally, telephone, preferred date and message. The form sends the request to the Quinta’s mailbox, with a copy to the visitor. Booking depends on subsequent confirmation.

Payments

This site does not collect or store card details. Under the current model, payment conditions are confirmed by email after the request.

Use of data and legal basis

Newsletter and marketing communications: express, separate consent, which you may withdraw at any time.

Order processing and delivery: performance of the contract.

Invoicing and tax obligations: compliance with a legal obligation.

Data retention

Invoice data is kept for the applicable legal period. Newsletter data is kept until you withdraw consent; account data, while the account exists.

Access to data

Data is processed in the company’s systems. The email provider acts as a processor. We do not sell or share personal data with third parties for marketing.

Cookies and measurement

The site uses cookies and local storage to save preferences and support its operation. Your measurement choice, age confirmation and cart contents are kept in the browser’s local storage.

We use Google Analytics in consent mode. Before you make a choice, and also if you decline, usage signals are sent to Google without reading or writing measurement cookies. These signals may include the page visited, time, source of the visit and browser information. Measurement cookies are not used to recognise your browser between visits in this state.

If you accept, Google Analytics uses cookies such as _ga and _ga_* to recognise your browser between visits. To choose again, clear the data stored by this site, including cookies and local storage, in your browser settings. The choice appears again when you return.

TO BE CONFIRMED by legal counsel: the basis for sending signals without cookies before a choice and after refusal.

Your rights

Data subjects have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before. To exercise them, write to geral@palatodocoa.pt.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).