Privacy Policy
At Quinta da Devesa we are committed to protecting the privacy of visitors to our website and of our clients. This Privacy Policy explains how we collect, use, disclose, and protect personal data processed through the website quintadadevesa.pt (hereinafter referred to as the “Website”), and outlines the rights of data subjects under the General Data Protection Regulation (Reg. (EU) 2016/679) (“GDPR”) and Portuguese Law No. 58/2019 of 8 August.
1. Data Controller
The data controller responsible for the personal data processed via this Website is Sociedade Agrícola da Quinta da Devesa, Lda with Tax ID 501809686 and headquarters at Caminho das Devesas – Canelas, 5050-437 Peso da Régua, Portugal (“Quinta da Devesa”, “we”, “our”, “us”).
2. Personal Data We May Collect
We may collect the following types of personal data when you use our Website or contact us:
Full name
Email address
Phone number
Postal address (where applicable – e.g., for shipping or correspondence)
Browsing data (e.g., IP address, device type, operating system, pages visited, cookies, and other identifiers)
Any additional information you choose to provide (e.g., through contact forms, newsletter subscription, or online purchases)
3. Purposes and Legal Basis for Processing
Usamos os teus dados para as seguintes finalidades:
To operate and improve the Website, manage enquiries, and respond to contact requests (legal basis: performance of a contract, pre-contractual measures, or legitimate interest)
To send newsletters, promotional offers, and updates about Quinta da Devesa (legal basis: consent)
To improve our services and analyze Website traffic and user behavior (legal basis: legitimate interest)
To comply with legal and fiscal obligations (legal basis: legal obligation)
Sempre que necessário, iremos solicitar o teu consentimento explícito para determinadas finalidades (por exemplo: marketing directo). Tens o direito de retirar o consentimento a qualquer momento (sem afectar a licitude do tratamento com base prévia ao consentimento).
4. Data Sharing and Disclosure
We do not sell or rent your personal data.
However, we may share your information with:
Service providers who act as data processors or sub-processors (e.g., website hosting, email marketing, analytics) and who operate under strict confidentiality and data protection agreements;
Public authorities or legal entities, when required by law or to protect our rights and interests.
Whenever personal data is shared, we ensure that appropriate safeguards and confidentiality measures are in place.
5. International Data Transfers
If personal data is transferred outside the European Union (EU) or European Economic Area (EEA), we ensure that adequate safeguards are implemented, such as the European Commission’s Standard Contractual Clauses or other mechanisms recognized under the GDPR.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purpose for which it was collected or as required by applicable laws (e.g., accounting or taxation). After this period, personal data will be securely deleted or anonymized.
7. Your Rights
Under the GDPR, you have the following rights:
Right of access – to know what data we hold about you;
Right to rectification – to correct inaccurate or incomplete data;
Right to erasure (“right to be forgotten”), when applicable;
Right to restriction of processing;
Right to data portability, when applicable;
Right to object to processing based on legitimate interests or direct marketing;
Right to withdraw consent at any time, without affecting prior lawful processing.
To exercise these rights, please contact us via contact form on this website or by mail to our registered address.
If you believe that your personal data has been processed unlawfully, you also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD)
8. Data Security
We apply appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures are regularly reviewed and updated to ensure ongoing data protection.
9. Cookies and Similar Technologies
Our Website may use cookies or similar technologies to enhance user experience, analyze site performance, and personalize content. More details about how we use cookies can be found in our separate Cookie Policy or via the cookie banner displayed on the Website.
10. Minors
We do not knowingly collect personal data from minors under 16 years of age without parental or guardian consent. If you believe we may have collected data from a minor without proper consent, please contact us immediately so we can delete it.
11. Updates to this Privacy Policy
We may update this Privacy Policy periodically. When we do, we will post the updated version on this page and indicate the date of the last revision. We encourage you to review this page regularly to stay informed about how we handle your information.
12. Contact Us
If you have any questions, requests, or concerns regarding this Privacy Policy or how we process your data, please contact us via contact form on this website or by mail to our registered address.
Last updated: 31/10/2025