1. Data controller
The controller of personal data collected through vinhosemmedo.pt is Vinho Sem Medo. Contact: admin@vinhosemmedo.pt.
2. Data we collect
We collect the following data:
- Partner wineries: name, email, phone, address, VAT number, banking details (IBAN via Stripe), information about listed wines
- Buyers: name, email, delivery address, order history
- Site visitors: browsing data (technical and analytical cookies, with consent)
3. Purposes of processing
- Management of membership contracts with partner wineries
- Processing and managing orders
- Communication with wineries and buyers about orders, memberships and support
- Newsletter sending (only with explicit consent)
- Compliance with legal and tax obligations
4. Legal basis
Data processing is carried out on the basis of contractual performance (Art. 6(1)(b) GDPR), consent (Art. 6(1)(a)), where applicable, and compliance with legal obligations (Art. 6(1)(c)).
5. Data sharing
Data is not sold to third parties. We share data only with:
- Stripe — for payment processing (subject to Stripe's privacy policy)
- Website hosting and technical infrastructure services
- Competent authorities, when legally required
6. Data retention
Partner winery data is retained for the duration of the membership and for a minimum of 5 years after its end, for tax compliance purposes. Buyer data is retained for 3 years after the last order, unless a different legal obligation applies.
7. Rights of data subjects
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your data ("right to be forgotten"), within legal limits
- Object to processing or request its restriction
- Data portability
- Lodge a complaint with the CNPD (National Data Protection Commission)
To exercise these rights, contact: admin@vinhosemmedo.pt.
8. Cookies
The site uses technical cookies necessary for operation and, with your consent, analytical cookies to understand site usage. You can manage your cookie preferences at any time through the cookie banner.