Privacy Policy

Data controller

5 Bagos Sociedade Agrícola, Lda, tax ID (NIPC) 508 566 568, Quinta da Saudade, Muxagata, 5150-333 Vila Nova de Foz Côa, Portugal. For questions about personal data or to exercise your rights: geral@palatodocoa.pt.

Data we collect

Newsletter and member registration: name and email.

Ordering profile: telephone, address, postal code and tax number, if provided.

Order request: name, email, delivery destination (and the country, if another), address, city, postal code, telephone and a required tax number. If you choose “Invoice to other details”, the name or company, the tax number and the billing address; if you say it is a gift, the message you write.

Account: a password, stored as a salted, non-reversible cryptographic hash, never in readable text.

Visit request: name, email, telephone and number of people; optionally, preferred date and message. The form sends the request to the Quinta’s mailbox and records it in the house’s customer management system, with a copy to the visitor. Booking depends on subsequent confirmation.

Trade request: name, email, telephone, company, country, type of business and message. The form sends the request to the Quinta’s mailbox, with a copy to the sender.

Payments

This site does not collect or store card details. Under the current model, payment conditions are confirmed by email after the request.

Use of data and legal basis

Newsletter and marketing communications: express, separate consent, which you may withdraw at any time.

Order processing and delivery: performance of the contract.

Invoicing and tax obligations: compliance with a legal obligation.

Trade requests: steps taken at the sender’s request prior to entering into a contract, and our legitimate interest in replying to business enquiries (GDPR, Article 6(1)(b) and (f)).

Visit requests: steps taken at the visitor’s request prior to entering into a contract (GDPR, Article 6(1)(b)).

Data retention

Invoice data is kept for the applicable legal period. Newsletter data is kept until you withdraw consent; account data, while the account exists.

The record of each visit request in the customer management system is kept only for as long as it is needed to reply to the request and organise the visit; it is then deleted. The emails of the request stay in the house’s correspondence until they are deleted.

Trade requests are not kept in the customer management system: they are sent by email and stay in the house’s correspondence until they are deleted.

Server logs

For the security of the site and to confirm that search engines can read it, the server logs each request made to the site (date and time, address requested, response and browser), with the IP address truncated and without cookies or access codes. These logs are deleted after 30 days. Legal basis: legitimate interest (GDPR, Art. 6(1)(f)).

Access to data

Data is processed in the company’s systems and by providers acting on our behalf, as processors:

Hostinger: hosting of the site and of the database of customers, requests and orders, on the same server.

Resend: sending of the emails for order requests, visit requests, trade requests, member accounts and the newsletter.

Microsoft 365: the mailboxes in which we receive order and visit requests and the messages sent to @palatodocoa.pt addresses.

Google: measurement of the site with Google Analytics, as described under “Cookies and measurement”.

The emails we send about order requests (including those of Friends and Members), visit requests, trade requests, newsletter sign-up and member accounts are also copied to a Gmail (Google) address used internally by the house, with the data they contain. Newsletter editions are not.

The internal copies of each order request, with the delivery and invoicing details, are emailed to the people at the house who handle them and to those who prepare and ship the orders, at a partner company.

The Quinta map, from OpenStreetMap, only loads if you choose “Load interactive map”; at that moment your browser connects to the OpenStreetMap servers.

We do not sell personal data. With marketing permission, we share site usage data with Meta to measure ads and create audiences on Facebook and Instagram, as described under “Cookies and measurement”.

International transfers

The server that hosts the site and the database of customers, requests and orders is in the United States. Hostinger’s data processing agreement (section 9.1) applies the EU Standard Contractual Clauses (Module Two or Three) to data transferred outside the European Economic Area, except where the transfer takes place under another recognised compliance mechanism.

Resend sends the emails from its European region (eu-west-1), but it is a United States company. Google, Microsoft and Meta belong to groups headquartered in the United States.

You may ask for information on the safeguards that apply to each transfer at geral@palatodocoa.pt.

Cookies and measurement

The site keeps in your browser what it needs to work and the choices you have made. These cookies and entries do not depend on your measurement choice:

pdc_lang (cookie, 1 year): the language you chose, Portuguese or English.

pdc_member (cookie read only by the server, 30 days): the session of a signed-in Friend or Member.

pdc_member_active (cookie, 30 days): shows whether the session belongs to an active member, to display member prices.

pdc-age18 (local storage, until you delete it): the confirmation that you are 18 or over.

pdc-consent (local storage, until you delete it): your measurement choice.

pdc-marketing-consent (local storage, until you delete it) and pdc_marketing (cookie, 1 year): your marketing choice, separate from measurement.

pdc-popup (local storage, until you delete it): the newsletter invitation has been closed.

palato_demo_cart_v2 (local storage, until you delete it): the wines and quantities in the cart, without prices or personal data.

palato_order_attempt_v1 (session storage, until you close the tab): the identifier of the order request in progress, when it was created and a fingerprint (hash) of the request, so that sending it again does not create a duplicate request. It does not keep the form or the address.

The bar offers “Accept” and “Customise”. “Accept” allows measurement and marketing; “Customise” lets you choose each purpose or save both switched off. Previous Google Analytics permission does not allow marketing.

The Meta Pixel only loads with marketing permission. It sends Meta public page visits, product views, additions to the cart and the start of checkout, including product identifiers, quantities, values and currency. Connections include the IP address, browser information and cookie identifiers. It uses _fbp to recognise the browser and _fbc, when available, to associate the visit with an ad click. Meta determines their validity; _fbp normally lasts three months.

When the Conversions API is enabled, the same events are also sent from the server to Meta, with the IP address, browser information, available _fbp and _fbc values and a random identifier to prevent duplicate counts. This integration does not send names, emails, phone numbers, tax IDs or addresses from forms. It excludes account and confirmation pages and does not treat an email request as a paid purchase.

Meta may associate this data with your account and use it for the purposes described at https://www.facebook.com/privacy/policy/ and https://www.facebook.com/policies/cookies/. The basis for sharing from the site is your consent.

To withdraw consent, open “Cookie preferences”, switch off the purpose and save. Switching off marketing stops new sends to Meta and deletes _fbp and _fbc on the site’s domain. It does not delete data already sent; you can exercise the rights below.

Google Analytics is only loaded if you accept in the cookie bar. With no choice, or if you decline, the site loads nothing from Google and sends no usage data.

If you accept, measurement covers the pages visited, the source of the visit, browser information, actions taken on the site (such as adding to the cart or downloading a technical sheet) and page loading times, and uses: _ga (cookie, 2 years), which distinguishes browsers; _ga_* (cookie, 2 years), which keeps the session state; and pdc-signup-convite (session storage), the page the newsletter invitation came from, deleted once read. The _ga cookie durations are those stated by Google.

You can change your choice under “Cookie preferences”, in the footer of every page. If you switch off measurement and save, measurement stops, the _ga and _ga_* cookies are deleted and so is the pdc-signup-convite entry.

This choice applies to the site only. The emails we send through Resend (about requests, newsletter sign-up, member accounts and newsletter editions) record whether they were opened and the clicks on their links.

Your rights

Data subjects have the right of access, rectification, erasure, restriction, portability and objection, and the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before. To exercise them, write to geral@palatodocoa.pt.

You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD).