Your privacy is important to us. The collection and processing of personal data has been designed to comply with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

This Privacy Policy explains:

• What personal information is collected and processed and why;
• How we use this information;
• The options we offer, including how to access and delete information.

Monte da Aferrada may, unilaterally and at any time, alter, modify, add to or rectify this Privacy Policy, without the need for any prior notice, subsequently notifying its users.

1. Data Controller

The data controller is [Name of Data Controller]. You can contact the data controller from 9am to 6pm on working days with any questions about data protection, either by email at [Email of Data Controller] or by telephone at [Telephone Number of Data Controller].

2. Legal Basis for the Collection and Processing of Personal Data

By accessing and using the Monte da Aferrada website, its content and/or our services, the user freely and expressly accepts and consents, by means of an unequivocal positive act, to their personal data, requested or optionally provided by them, being collected and processed by Monte da Aferrada under the terms set out herein. Use of the Monte da Aferrada website presupposes that Users are aware of and accept the terms and conditions of this Privacy Policy.

3. Purpose of Personal Data Processing

3.1 Purposes essential to the functioning of economic activity:

• Invoicing (Name, Address, Tax ID, Email)
• Payment and Delivery (Delivery address, Telephone contacts, Email)
• Customer Service (First Name, Telephone Contacts, Email, Delivery Address) All these purposes are considered legitimate interests for the proper fulfilment of the contracted service.

3.2 Marketing:

• Email: Used to communicate promotional actions. For this purpose, your free, informed and informed consent is collected when you register or when editing the authorisations given.

4. Duration of Personal Data Retention

We keep personal data in accordance with the retention period imposed by the regulations in force. We retain your personal data used for marketing until you cancel the authorisation or ask us to delete it, in accordance with the legislation in force.

5. Transfer of Data to Third Parties

Monte da Aferrada does not collect or process any personal data or information obtained through the site for the purpose of enabling it to be exploited in any way by third parties. These are communicated with partner organisations, in particular:

• Accounting firm and invoicing software for the processing required by law.
• Operators under a service contract or transport companies subcontracted by Monte da Aferrada to fulfil the Delivery Operation.

Data can also be handed over to national authorities in the context of monitoring or combating fraud.

6. Existence of Automated Decisions

When you use the Monte da Aferrada website, information related to your visit is automatically collected (including IP address, pageviews and interactions).

7. Security of the Processing of Your Personal Data

Despite our best endeavours, we would like to warn you that the Internet may not be a safe place for communication. Information transmitted via the Internet may be intercepted by third parties. Therefore, we cannot guarantee the security and authenticity of information sent to us via the Internet. By using this website and entering information, you expressly accept that you are doing so in accordance with your express wishes and assuming the corresponding risk.

8. Right of Access, Rectification, Cancellation and Objection (ARCO) of Personal Data

Under the terms of the General Data Protection Regulation, the data subject has the right to request access to personal data concerning them from the data controller, as well as their rectification or erasure. The data subject also has the right to demand, in certain circumstances, the restriction of the processing of personal data, as well as the right to object to processing and the right to data portability.

The data subject also has the right to withdraw their consent to the processing of their data at any time, without jeopardising the lawfulness of the processing carried out on the basis of the consent previously given. You can exercise these rights of access, rectification, erasure, restriction of processing, objection to processing, portability or withdrawal of consent by writing to Monte da Aferrada at the following address: [Monte da Aferrada address].

9. Right to lodge a complaint with a supervisory authority under the GDPR

The data subject has the right to lodge a complaint with the competent supervisory authority, in this case the National Data Protection Commission.

10. Data Protection Department (DPO)

Monte da Aferrada has a Data Protection Office (DPO), in accordance with current legislation. You can contact the DPO at any time with any questions about personal data protection by writing to the following address: [Monte da Aferrada address].

Cookies

What they are Small text files sent to your computer or mobile device when you visit websites. Cookies help websites store and retrieve information about your browsing habits in order to personalise browsing according to your preferences.

What it's for: To help determine the usefulness, interest and number of uses of your websites, enabling faster and more efficient browsing by eliminating the need to repeatedly enter the same information.

Regulations: Companies in Europe must obtain explicit consent for the use of cookies and provide clear opt-outs to users. It is now forbidden to make access to a website conditional on accepting the use of tracking cookies.

Types of Cookies

Session cookies: These are temporary cookies that remain in the browser's cookie file until the browser leaves the web page, so there is no record of them on the user's hard drive. The information collected by these cookies is used to analyse website traffic patterns, which allows us to improve the content and usability of the website.

Analysis cookies: These are the data which, if properly processed by the owners of the website, make it possible to quantify the number of users and carry out the measurement and statistical analysis of how users use the website. They analyse your browsing, with the aim of improving the supply of products and services that we make available.

Advertising cookies: They are those which, if properly handled by us or by third parties, allow us to manage the offer of advertising space on the site more efficiently, being able to analyse your browsing habits and show you advertising related to your browsing profile.

Own cookies: Used for in-store booking to keep the shop selected by the user.

Session cookies:

• They associate what you choose with your shopping basket;
• They store category information to show pages more quickly;
• They indicate whether you are currently logged in;
• They indicate the session IDs on the server;
• They save the last products viewed;
• They store information about research;
• They indicate whether the user authorises the use of cookies.

Third-party cookies:

• Used to distinguish users and sessions;
• Used to determine new visits, sessions;
• They store the traffic source to explain how the user arrives at our site;
• Used to identify users and prevent fraudulent use of user data and protect user data from third parties;
• Used to personalise advertising on Publisher networks;
• Used to allow the site to remember browsing preferences, language, region, etc.

Other cookies:

• Web and video analytics
• Used to determine which server shows the information to the user;
• Used to track active sessions;
• Used to determine whether cookies are active;
• Used to measure user response time;
• Used to identify how many times a user has visited us, what products they have bought and at what price;
• They let you know if it's your first visit to the site or not.