DATA CONTROLLER

The entity responsible for processing on this website is DO-JOA Lda, a limited liability company located at rua do carriçal nº 18, registered at the Commercial Registry Office under the unique registration and corporate person number 513 166 653, with contact email adega@casadojoa.com and phone 916172751.

DATA PROTECTION OFFICER CONTACT

Should you need, you can contact via email adega@casadojoa.com

COLLECTED AND PROCESSED DATA

The personal data collected in the contact form are: name, surname, email, and mobile phone. DO-JOA Lda respects the privacy of all users of its website and is committed to protecting the personal information that each user decides to share. Some sections and/or functionalities of this website can be navigated without disclosing any personal information by the user.

DO-JOA Lda processes personal data based on the following principles:

• The processing of personal data is carried out in a lawful, fair, and transparent manner;
  
  
• The collection is carried out only for properly determined, explicit, and legitimate purposes in accordance with applicable legislation;
  
  
• The collected data are limited to what is strictly necessary and for the time necessary for the purposes for which they are processed;
  
  
• Only employees, collaborators, and partners of DO-JOA Lda whose functions so require have access to the processed personal data;
  
  
• Personal data are treated confidentially.
  
  

SECURITY MEASURES

When it is necessary to collect personal information to provide services/products, or when each user decides to provide some of their personal data, the use of that information and those data will be made in compliance with applicable legislation on personal data protection – Law 67/98 of October 26, Data Protection Law – in order to ensure the confidentiality and security of the personal data provided. The entity responsible for the collection and processing of personal data is DO-JOA Lda.

The data shared by users will be subject to computer processing and will be included in the database(s) of companies in a simple participation relationship or domain by DO-JOA Lda.

SUBCONTRACTED ENTITIES BY DO-JOA Lda

In the context of customer data management, the collected personal data may be transmitted to third parties, which are insurance companies and entities related to them for the provision of services to the customer, with the sole and exclusive purpose of the full realization and execution of the services or products purchased by the user holder of the collected personal data.

PURPOSES OF PROCESSING PERSONAL DATA

The collected personal data may be transmitted for direct marketing purposes, namely through the use of automatic calling devices, facsimile devices, or electronic mail (newsletters; Opinion surveys aimed at improving service delivery) including SMS by commercial societies directly or indirectly participated by DO-JOA Lda.

In terms of the provisions of article 13-A of Law 41/2004 of August 18, amended by Law 46/2012 of August 29, if you wish to authorize the processing and use of your personal data for direct marketing purposes as previously described by DO-JOA Lda or another commercial society directly or indirectly participated by DO-JOA Lda.

The provision of personal data is optional and will always be guaranteed, in accordance with the law, the right of access, rectification, and cancellation of any data provided, which right can be exercised personally or in writing directly to the address on the homepage of the website.

RIGHTS OF PERSONAL DATA HOLDERS

DO-JOA Lda ensures that the data holder can exercise the rights conferred to them by the data protection legislation, namely:

• Right of access to personal data (the personal data holder can obtain confirmation as to whether or not their personal data are being processed and access information about them)- Right of rectification (the personal data holder can request their rectification or that they be completed);
  
  
• Right to erasure (the data holder can request that their personal data be erased in certain situations: (i) if the personal data are no longer necessary for the purpose which motivated their collection or processing (ii) if the holder withdraws the consent on which the data processing is based and there is no other legal ground for the processing (iii) if the holder objects to the processing and there are no overriding legitimate grounds for the processing (iv) if the personal data have been unlawfully processed (v) if the personal data have to be erased for compliance with a legal obligation or (vi) if the personal data have been collected in the context of the offer of services/products of the information society);
  
  
• Right to restriction of processing (the personal data holder has the right to request the limitation of their processing when (i) they contest the accuracy of the data and for a period enabling the accuracyto be verified (ii) the processing is unlawful (iii) the data are no longer needed for processing, but are required for the establishment, exercise, or defense of legal claims, or (iv) the data subject has objected to processing pending the verification whether the legitimate grounds of the controller override those of the data subject);
  
  
• Right to data portability (when processing is based on consent or on a contract and is carried out by automated means, the data subject shall have the right to receive their personal data in a structured, commonly used and machine-readable format, and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, as long as it is technically feasible);
  
  
• Right to object (the data subject shall have the right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them which is based on the legitimate interests pursued by the controller or by a third party, or when the processing is for purposes other than those for which the personal data were collected);
  
  
• Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her;
  
  
• Right to withdraw consent (the data subject shall have the right to withdraw their consent at any time);
  
  
• Right to lodge a complaint with the National Data Protection Commission (regarding any issues related to the processing of their personal data).
  
  

If you wish to exercise any of the mentioned rights or have questions related to the privacy and protection of personal data by DO-JOA Lda, you can do so via letter (address: rua do carriçal nº 18 5300-721) or email (adega@casadojoa.com).