{"id":2237,"date":"2020-12-31T13:00:28","date_gmt":"2020-12-31T13:00:28","guid":{"rendered":"https:\/\/sovina.pt\/?page_id=2237"},"modified":"2021-01-04T11:15:15","modified_gmt":"2021-01-04T11:15:15","slug":"privacy-policy","status":"publish","type":"page","link":"https:\/\/sovina.qua.esporao.veks.net\/en\/privacy-policy\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"\n

Who are<\/strong> <\/strong>we<\/strong> <\/p>\n\n\n\n

Sovina, Lda. (“Sovina”) is a commercial company based at Rua Manuel Pinto de Azevedo, no. 65, Armaz\u00e9m 4 e 5, 4100-321 Porto, Portugal, registered in the competent Commercial Registry Office under the sole registration number and legal person 508979951, which has as its social object the manufacture and marketing of beer, and also the commercialization of brewing equipment. <\/p>\n\n\n\n

Espor\u00e3o, S.A. (“Espor\u00e3o”) is a commercial enterprise based at Herdade do Espor\u00e3o, 7200-229, Reguengos de Monsaraz, Portugal, registered at the competent Commercial Registry Office under the sole registration number and legal person 500116377. <\/p>\n\n\n\n

The Personal Data Protection Act (hereinafter “LPDP”) and the General Data Protection Regulation (Regulation (EU) 2016\/679 of the European Parliament and the Council of 27 April 2016, onwards “GDPR”) ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data. <\/p>\n\n\n\n

This privacy and data protection policy (“Privacy Policy”) concerns the processing of personal data performed by Sovina and collected through the website: <\/p>\n\n\n\n

\u2022 <\/strong>www.sovina.qua.esporao.veks.net<\/strong><\/a> <\/p>\n\n\n\n

and the processing of personal data collected through the website: <\/p>\n\n\n\n

\u2022 <\/strong>www.cervejartesanal.com<\/strong><\/a>.<\/strong> <\/p>\n\n\n\n

From now on, both websites together referred to as “Platform”: <\/p>\n\n\n\n

Both Sovina and ESPOR\u00c3O are committed to protecting the personal data (“Personal Data”) of their customers and users, hereinafter referred to as “Users” or individually as “User”, made available on the Platform, adopting a policy subject to high privacy standards and which is strict in maintaining the confidentiality, loyalty and integrity of personal data. <\/p>\n\n\n\n

In this context, they have developed the Privacy Policy, which aims, inter alia,<\/em> <\/em>to make known to its Users the situations in which they process Personal Data, namely how and why they are collected, to whom they disclose, how they protect their privacy when they visit or use the services made available on the Platform, as well as their rights in relation to the processing of Personal Data performed. <\/p>\n\n\n\n

The collection and processing of Personal Data made by Sovina and ESPOR\u00c3O comply with the provisions of the legislation for the protection of personal data in force, in particular with the GDPR and LPDP. <\/p>\n\n\n\n

What is Personal Data?<\/strong> <\/p>\n\n\n\n

Personal Data means any information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. A person who can be identified directly or indirectly, in particular by reference to an identification number or other specific elements of his physical, physiological, psychological, economic, cultural or social identity, shall be considered identifiable. <\/p>\n\n\n\n

Other important settings:<\/strong> <\/p>\n\n\n\n

Supervisory Authority<\/strong> \u2013 an independent public authority established by a Member State of the European Union, with responsibility for monitoring the application of the GDPR, in order to defend the fundamental rights and freedoms of natural persons in relation to processing and facilitating the free movement of data within the European Union. In Portugal, the supervisory authority is the National Data Protection Commission (“CNPD”). <\/p>\n\n\n\n

Consent <\/strong>\u2013 expression of will, free, specific, informed and explicit, by which the data subject accepts, by means of an unequivocal positive statement or act, that the Personal Data concerning him is processed for a certain purpose. <\/p>\n\n\n\n

Data protection officer<\/em><\/strong> (“DPO”)<\/strong> \u2013 a person or entity appointed to ensure, in an organization, the conformity of the processing of personal data with the GDPR, ensuring efficient communication with the holders of personal data and cooperation with the supervisory authorities concerned. <\/p>\n\n\n\n

Controller \u2013 Natural<\/strong> or legal person, public authority, agency or other body that, individually or in conjunction with others, determines the purposes and means of processing Personal Data. <\/p>\n\n\n\n

LP<\/strong>DP<\/strong> \u2013<\/strong> Law No. 58\/2019 of 8 August, the safe implementation, in the national legal order, of Regulation (EU) 2016\/679 of Parliament and the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data <\/p>\n\n\n\n

GDPR \u2013 <\/strong>General Data Protection Regulation (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data. <\/p>\n\n\n\n

Processor <\/strong>\u2013 natural or legal person, public authority, agency or other body that processes personal data on behest sovina as controller. <\/p>\n\n\n\n

Personal Data Holder<\/strong> \u2013 identified or identifiable natural person to whom the Personal Data collected on the Platform relates, i.e. the Users of the Platform. <\/p>\n\n\n\n

Processing(s) \u2013 operation or set of operations carried out on<\/strong> personal data or on sets of personal data, by automated or non-automated means, such as collection, registration, organization, structuring, retention, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of making available, comparison or interconnection, limitation, payment, or destruction. <\/p>\n\n\n\n

Third party \u2013 natural or legal person, public authority, <\/strong>service<\/strong> or body other <\/strong>than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data. <\/p>\n\n\n\n

Who is the Controller of Personal Data?<\/strong> <\/p>\n\n\n\n

Sovina is the Controller of your Personal Data collected through the website www.sovina.qua.esporao.veks.net;<\/strong> <\/p>\n\n\n\n

ESPOR\u00c3O is the Controller of your Personal Data collected through the website www.cervejartesanal.com.<\/strong><\/a> <\/p>\n\n\n\n

Both, as responsible for the processing, reserve the right to subcontract other entities to carry out this Treatment on their behalf and on their behalf. <\/p>\n\n\n\n

It is reported that Sovina and ESPOR\u00c3O are not obliged to appoint a Data Protection Officer under the GDPR. <\/p>\n\n\n\n

What types of Personal Data are collected, what are the purposes and their legal grounds?<\/strong> <\/p>\n\n\n\n

Under the GDPR and LPDP, the collection of Personal Data can only be made if there is a legal basis for its Processing. <\/p>\n\n\n\n

Accordingly, Sovina only processes the following categories of Personal Data, collected through the website (www.sovina.qua.esporao.veks.net<\/a>), as well as for the purposes, and with the grounds of legitimacy, identified below: <\/p>\n\n\n\n

Data Category<\/strong> <\/td>Purpose<\/strong> <\/td>Legitimacy<\/strong> <\/td><\/tr>
Identification data: name and email contact and information required for registration for a given event. <\/td>When you register for a particular event\/workshop\/competition or when you request information through the various channels (email, telephone and platform) about events\/workshops. <\/td>Sovina’s legitimate interest in responding to the demonstration of will in the sharing of a particular event\/workshop\/competition and\/or obtaining information about it and\/or pre-contractual due diligence for registration in certain events\/workshops\/hobbies. <\/td><\/tr>
Contact details (email), Identification data (name) and information regarding the request for information or about the complaint made. <\/td>Making a complaint or preparation of requests for information(<\/em>e.g., <\/em> about a product, about the status of the order, etc.). <\/td>Sovina’s legitimate interest in responding to complaints made. <\/td><\/tr>
Contact details (email). <\/td>Subscription to newsletters and other information materials. <\/td>Consent* <\/td><\/tr>
Contact details (email). <\/td>Sending commercial information (direct marketing), namely about promotions in Sovina’s products and services, as well as commercial proposals. <\/td>Consent* <\/td><\/tr>
Identification data: gender; name; identification document; number of taxpayers. Contact details: email address; phone\/mobile phone; fax; address; Demographics: nationality. <\/td>Respond to requests for information in legal proceedings or requests from administrative authorities or other third parties to detect and prevent fraud. <\/td>Legal obligations <\/td><\/tr>
Identification data: gender; name; identification document; number of taxpayers. Data regarding your tastes and preferences of the products and services provided by Sovina. <\/td>Satisfaction surveys <\/td>Sovina’s legitimate interest in obtaining the consumer’s perspective on its products and better power the quality of them. <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

On the other hand, ESPOR\u00c3O only processes the following categories of Personal Data collected through the website (www.cervejartesanal.com),as well as for the purposes, and with the grounds of legitimacy, identified below: <\/p>\n\n\n\n

Identification data: gender; name; identification document; number of taxpayers. Contact details: email address; phone\/mobile phone; fax; Address. Demographic data: nationality; Online interaction data: password. <\/td>Registration and login to the website to order products and\/or to obtain information about the online store. <\/td>Legitimate interest of ESPOR\u00c3O in providing information about the products and\/or pre-contractual steps in the case of an order request. <\/td><\/tr>
Data relating to the order(s) placed on a given product(s\/service(s): Bank details, name; identification document; number of taxpayers. Contact details: email address; phone\/mobile phone; fax; Address. Demographics: nationality. Online interaction data: password (encrypted information that allows the system to recognize the User’s password). <\/td>Product\/service order request on the website. <\/td>Pre-contractual due diligence <\/td><\/tr>
Online interaction data: password and email and data related to product acquisition. <\/td>Improvements in the products and services of ESPOR\u00c3O. <\/td>Legitimate interest of ESPOR\u00c3O in keeping the created accounts secure. <\/td><\/tr>
Identification data: gender; name; identification document; number of taxpayers. Contact details: email address; phone\/mobile phone; fax; address; Demographics: nationality. <\/td> <\/td> <\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n

* The collection form has a field for the User to expressly indicate his\/her Consent. If the User chooses to provide his\/her Personal Data for such purposes, the Consent provided may be withdrawn at any time, without jeopardizing the processing previously performed. <\/p>\n\n\n\n

Data automatically collected by the Platform: <\/p>\n\n\n\n

Browsing the Platform involves only the collection of the internet protocol address (“IP”). <\/p>\n\n\n\n

The domain server for the Platform records and stores the information that is normally recorded by definition by the server, that is, the IP by which the User had access to the Internet, the date and duration of access to the Platform, the internet address of the website that brought him directly to the Platform and the indication that the User was or did not indicate that he was of the age necessary to consume alcoholic beverages. <\/p>\n\n\n\n

This information will be used to measure the number of visits to the different areas of the Platform, to determine whether Users are of legal age to consume alcoholic beverages and to help make it more useful to Users. For more information, go to Sovina’s Cookie Policy here<\/a>.<\/p>\n\n\n\n

Under what circumstances do we communicate Users’ Personal Data?<\/strong> <\/p>\n\n\n\n

Sovina and ESPOR\u00c3O use other entities for the provision of certain services. If this provision of services may imply access by these entities to users’ personal data. This will be the case for suppliers or service providers of Sovina or ESPOR\u00c3O (e.g., entities<\/em> providing support services such as consulting professionals).   <\/p>\n\n\n\n

In such cases, Sovina and ESPOR\u00c3O  ensure through contracts and clauses for Personal Data Processing that any Subcontracting entity that processes the Personal Data on behalf of and on its behalf offers guarantees for the execution of appropriate technical and organizational measures, so that the Processing meets the requirements required by the GDPR and LPDP  or other law applicable to the matter, ensuring the confidentiality and security of the data, including compliance with the rights of the Personal Data Subjects. <\/p>\n\n\n\n

Sovina and ESPOR\u00c3O  may also transmit Users’ Personal Data to third parties, where they deem such communications of data as necessary or appropriate (i) in the light of applicable law, (ii) in compliance with legal obligations\/court orders, (iii) to respond to requests from public or governmental authorities and other administrative authorities, (iv) when it appears necessary to comply with a legal, regulatory or other obligation, as well as (v) ensure the security of Personal Data Subjects, or otherwise prevent fraudulent conduct. <\/p>\n\n\n\n

As a rule, User Personal Data is not transferred to third countries (outside the European Union) and is kept on servers located within the European Union. However, where Subcontractors transfer data to third countries, Sovina and ESPOR\u00c3O will implement the necessary and appropriate measures in the light of applicable law to ensure the protection of personal data subject to such transfer, strictly complying with the legal provisions of the GDPR and LPDP or other applicable legislation relating to such transfers. <\/p>\n\n\n\n

What is the retention period of Personal Data?<\/strong> <\/p>\n\n\n\n

The period of time during which personal data is stored and stored varies according to the purpose for which it is used, the rule being the retention of them only for the period necessary for each purpose. There are, however, legal obligations(<\/em>e.g.,<\/em>  tax) that may require the retention of Personal Data for a longer period of time and, in this case, the data will be kept only for the period necessary to comply with the legal obligation imposed. <\/p>\n\n\n\n

The Personal Data collected are processed in strict compliance with applicable legislation, being stored in specific databases, created for this purpose. Such data are stored in a format that allows the identification of the Personal Data Holders. <\/p>\n\n\n\n

If the Processing is based on consent, Sovina retains your Personal Data in accordance with the Consent given and\/or until such Consent is revoked. <\/p>\n\n\n\n

What are your rights as a Personal Data Subject?<\/strong> <\/p>\n\n\n\n

Sovina and ESPOR\u00c3O guarantee users, as Personal Data Subjects and at any time, the right of access, rectification, the tualization, limitation and payment of their Personal Data, the right to object and the withdrawal of consent, without compromising the lawfulness of the processing carried out under this Consent, as well as the right to the portability of the data: <\/p>\n\n\n\n