DATA PROTECTION AND PRIVACY COMMITMENT
The Algarve Wine Commission complies with all applicable community and national legal standards regarding data protection, privacy, and information security.
The Algarve Wine Commission is in the process of implementing a Personal Data Protection System and an Information Security System to ensure compliance with regulatory requirements and to demonstrate institutional responsibility regarding data protection and information security. This includes implementing all necessary technical and organizational measures to comply with the general legal framework of the Law implementing the General Data Protection Regulation (Law 58/2019 of August 8), as well as compliance with the legal framework of the General Data Protection Regulation, Regulation EU 679/2016 of April 27.
For any clarification, additional information, or to exercise rights in this regard, please contact the Data Protection Officer of the Algarve Wine Commission via email at qualidade@vinhosdoalgarve.pt
DEFINITIONS
“Personal Data”
“Personal Data” refers to information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier. Personal identifiers may include, for example, a name, an identification number, location data, electronic identifiers, or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.
“Processing of Personal Data”
“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or otherwise making available, alignment or combination, restriction, erasure, or destruction.
“Cookies”
“Cookies” are small text files with relevant information that devices used for access (computers, mobile phones, or portable mobile devices) load through the internet browser when an online site is visited by the Customer or User.
DATA CONTROLLER
The Algarve Wine Commission, headquartered at Estrada Nacional 125 – Bemparece, 8400-429 Lagoa, Tax Identification Number 5035058594, hereinafter referred to as the Algarve Wine Commission, is the entity responsible for online sites and computer applications, hereinafter referred to as channels or applications, through which Users, Service Recipients, or Customers have remote access to the services of the Algarve Wine Commission that are presented or provided at any time through them. The entity is considered responsible for the processing of personal data.
The use of channels or applications by any User, Service Recipient, or Customer may involve the processing of personal data operations, the protection, privacy, and security of which by the Algarve Wine Commission, as the entity responsible for processing, is ensured, in accordance with the terms of this Data Protection Policy.
DATA CONTROLLER CONTACTS
For contact with the Data Protection Officer of the Algarve Wine Commission, please send an email to qualidade@vinhosdoalgarve.pt or to each of the specific addresses identified on the online sites, describing the subject of the request and providing an email address, a telephone contact, or a mailing address.
For any other purpose, the following general contacts of the Algarve Wine Commission may be used:
– Postal Address: Algarve Wine Commission, headquartered at Estrada Nacional 125 – Bemparece, 8400-429 Lagoa
– General Email: cva@vinhosdoalgarve.pt
– General Phone: +351 282 341 393
COLLECTION AND PROCESSING OF PERSONAL DATA
The Algarve Wine Commission processes personal data strictly necessary for providing information and operating its channels, according to the uses made by Users, Service Recipients, or Customers, whether provided for the purpose of registering requests or obtaining information, for the purpose of joining those channels, or resulting from the use of services provided by the Algarve Wine Commission through them, such as access, consultations, instructions, transactions, and other records related to their use.
In particular, the use or activation of certain channel features may involve the processing of various direct or indirect personal identifiers, such as name, address, contacts, device addresses, or geographical location, whenever there is express consent from the User, Service Recipient, or Customer.
In all cases, Users, Service Recipients, or Customers will always be informed of the need for such data access for the use of the features of the channels in question.
The personal data collected by the Algarve Wine Commission is processed electronically, in certain cases automatically, including file processing or profile setting, and within the scope of pre-contractual, contractual, or post-contractual relationship management with Users, Service Recipients, or Customers, in accordance with current national and community standards.
CATEGORIES OF PERSONAL DATA PROCESSED AND DATA SUBJECTS
The categories or types of personal data subject to processing are generally as follows:
– identification data;
– contact data;
– professional data;
– billing data;
– traffic and access control data.
In different establishments of the Data Controller, biometric data may also be processed, processed through video surveillance systems that are installed.
The detailed list of categories of personal data and data subject categories appears in the Data Processing Information Sheets.
LEGAL PRINCIPLES
All data processing operations comply with fundamental legal principles in the field of data protection and privacy, particularly regarding their circulation, lawfulness, loyalty, transparency, purpose, minimization, conservation, accuracy, integrity, and confidentiality, with the Algarve Wine Commission available to demonstrate its responsibility to the data subject or any other third party with a legitimate interest in this matter.
LEGITIMACY GROUNDS
All data processing operations carried out by the Algarve Wine Commission have a legitimacy ground, namely, either because the data subject has given consent to the processing of their personal data for one or more specific purposes, or because the processing is necessary for the execution of a contract in which the data subject is a party or for pre-contractual measures at the request of the data subject, or because the processing is necessary to fulfill a legal obligation to which the data controller is subject, or for the purpose of public interest, or because the processing is considered necessary for the pursuit of legitimate interests pursued by the Algarve Wine Commission or by third parties.
PURPOSE OF PROCESSING
All personal data processed in the context of the channels of the Algarve Wine Commission are exclusively intended for providing information to Users, managing the personal information of Service Recipients considered necessary for relationship management or communication purposes, as well as providing services to Customers, and, in general, for managing the pre-contractual, contractual, or post-contractual relationship with Users, Service Recipients, or Customers.
The collected personal data may also eventually be processed for statistical purposes, for dissemination of information or promotional activities, and for communication actions, namely to promote the dissemination of new features or new services, through direct communication, whether by mail, email, messages, or phone calls, or any other electronic communication service.
Provided that prior information and express authorization for these latter purposes are ensured, Users, Service Recipients, or Customers may, at any time, exercise their right to withdraw consent or their right to object to the use of their personal data for other purposes that go beyond the management of the relationship with the Data Controller, namely for the pursuit of legitimate interests, for sending informative communications, or for promotional activities.
Data Processing Information Sheets
In accordance with the principles of loyalty and transparency, and to ensure compliance with the duty to provide information, the Algarve Wine Commission directly delivers or publicly provides all data subjects with information sheets regarding the data processing operations carried out, depending on the method of personal data collection. These sheets are accessible for consultation at any public service unit or with the Data Protection Officer.
Data Retention Periods
Personal data will be retained only for the period necessary for the purposes that prompted its collection or subsequent processing. Compliance with all applicable legal norms regarding archiving is ensured, with the specific retention period specified in each Data Processing Information Sheet.
Use of Cookies
The Algarve Wine Commission may occasionally use two main categories of cookies: cookies within online sites and cookies within direct electronic communication channels. Users or Clients can always disable them in either category.
On its online sites, the Algarve Wine Commission uses cookies to enhance Users’ and Clients’ browsing experience, increasing response speed and efficiency, as well as eliminating the need to repeatedly enter the same information.
Cookies help online sites recognize Users’ and Clients’ devices upon their next visit and are sometimes essential for their operation. The cookies used by the Algarve Wine Commission do not collect personal information but retain only generic information such as access form or geographic location, among others.
**Types of Cookies:**
(i) Essential Cookies – necessary for accessing specific areas of online channels, allowing navigation and use of applications, including secure site areas through user registration.
(ii) Functionality Cookies – remember user preferences for online site navigation, eliminating the need for reconfiguration each visit.
(iii) Analytical Cookies – used to analyze how users interact with online sites, identifying articles or services of interest, monitoring site performance, and determining popular pages or effective linking methods between pages.
**Cookie Validity:**
(i) Permanent Cookies – stored on devices used to access channels (computers, mobile phones, etc.), within the internet browsing application (browser), directing navigation based on user interests.
(ii) Session Cookies – temporary cookies available until the browsing session ends, managing sessions, identifying issues, and providing a better browsing experience.
Users or Clients can disable some or all cookies at any time, although this may limit access to some site functionalities.
In direct electronic communication channels, the Algarve Wine Commission may also use cookies in various communications for statistical purposes, enabling tracking of opened communications and verifying clicks on links or ads.
Communication of Data to Other Entities
The provision of information or services by the Algarve Wine Commission to Users or Clients through channels may involve subcontracting to third-party entities, possibly located outside the European Union. In such cases, only subcontracted entities providing sufficient guarantees of compliance with applicable technical and organizational measures will be used.
Data Recipients
Except for legal obligations, contract execution, or pursuit of legitimate interests, personal data of Users or Clients will not be disclosed to third parties other than subcontracted entities or legitimate recipients, nor will it be communicated for purposes other than those mentioned above.
International Data Transfers
Any transfer of personal data to a third country or international organization will only be carried out in compliance with legal obligations or ensuring compliance with applicable EU and national legal standards.
Security Measures
Considering advanced techniques, implementation costs, and the nature, scope, context, and purposes of processing, the Algarve Wine Commission and its subcontracted entities apply appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
Exercise of Data Subjects‘ Rights
Users or Clients may exercise their data protection and privacy rights at any time, including the rights of access, rectification, erasure, portability, limitation, or objection to processing, in accordance with applicable regulations.
Complaints or Suggestions
Users or Clients have the right to lodge complaints, either by registering them in the Complaints Book or by submitting them to regulatory authorities, such as the National Data Protection Commission.
Suggestions can also be made by emailing the Data Protection Officer at qualidade@vinhosdoalgarve.pt
Incident Reporting
The Algarve Wine Commission has implemented an incident management system concerning data protection, privacy, and information security. Users or Clients experiencing any data breach can contact the Data Protection Officer or use the general contact information of the Algarve Wine Commission.
Changes to Data Protection Policy
The Algarve Wine Commission may make changes deemed appropriate or necessary to this Data Protection Policy at any time, ensuring publication through various channels to ensure transparency and inform Users or Clients.
Express Consent and Acceptance
The Data Protection and Privacy Policy terms complement those in the General Terms of Use of the Algarve Wine Commission’s channels. By providing personal data, Users or Clients explicitly authorize its processing according to the rules defined in each applicable channel or data collection instrument.
Special Data Protection Policies
To ensure adequacy to different data processing operations and categories of data subjects, the Algarve Wine Commission may develop special Data Protection Policies, such as those for Workplace Context, Job Application Management, and Supplier Employees. These policies are directly available to respective data subject categories upon request to the Data Protection Officer.
Data Protection Officer
For exercising data protection and privacy rights or for any matters related to data protection, privacy, and information security, Users or Clients can contact the Data Protection Officer at qualidade@vinhosdoalgarve.pt, providing the subject of the request and indicating contact details for response.
