OUR PRIVACY POLICY
Mouchão e Cavaca Dourada, S.A. (hereinafter referred to as “Mouchão”) is committed to protecting the privacy of all its customers and website users, and has drawn up this privacy policy to prove its commitment to and respect for personal data, having also adopted the practices deemed appropriate regarding security techniques and personal data protection (the “Privacy Policy”), as further described below.
In this regard, please read the Privacy Policy carefully, as accessing the website and providing your personal data (in any capacity whatsoever) implies your express prior knowledge and acceptance of the conditions set forth herein, i.e. by providing your personal data for the purposes of this website you are consenting to its collection and processing in accordance with the rules set forth herein.
Mouchão hereby clarifies that merely browsing or accessing the website does not necessarily imply the collection of your personal data or cookies. However, please note that because the website also uses cookies, a Cookie Policy is in force which should be consulted. Cookie Policy
1. PERSONAL DATA
Personal data means any information, of any nature and regardless of its format, relating to an identified or identifiable natural person.
Please note that an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
Subject to the purpose specified below, the following personal data may be collected through this website: (i) name, (ii) contact details (telephone and e-mail), (iii) address and (iv) details relating to means of payment (together referred to as “Personal Data”).
2. PERSONAL DATA CONTROLLER
The entity responsible for collecting and processing Personal Data for the purposes specified below is Mouchão e Cavaca Dourada, S.A., with sole registration and taxpayer number 506 179 559 and registered office at Herdade do Mouchão, 7470-158 Casa Branca.
In case you consider that any information contained in this Privacy Policy is not clear and transparent, or for any other reason that you may deem relevant, you may contact us via the following e-mail address: info@mouchao.pt
3. PURPOSES FOR THE PROCESSING OF PERSONAL DATA
The collection and processing of Personal Data on the website is intended for: (i) a better use of the website, (ii) sending, upon a request from the user, proposals for services and/or quotes (as well as information regarding Mouchão products) and (ii) managing the purchase of Mouchão products (i.e., performance of a contract) (together referred to as “Purposes”). Therefore, the sending/submission of Personal Data corresponding to each of the Purposes and/or the sending of documents constitutes an explicit prior consent to the processing of the Personal Data provided.
In case the user has given their explicit prior consent to the processing of their Personal Data (which consent may be withdrawn at any time – see paragraph 5 below), Mouchão shall process the Personal Data to the extent and for as long as necessary to fulfil the Purposes.
Mouchão neither requests nor encourages in any way the sending of personal data relating to philosophical or political beliefs, party or trade union membership, religious faith, private life and racial or ethnic origin, as well as the processing of data relating to health and sex life, including genetic data, and therefore if you provide these data to Mouchão, the latter may not be held liable for their processing under the Privacy Policy.
Without prejudice to other forms of contact with Mouchão, failure by the user to provide Personal Data will prevent Mouchão from sending offers and/or quotes, other information, or processing product purchases, as applicable.
4. STORAGE OF PERSONAL DATA
The period during which Personal Data is retained and stored varies according to the Purposes.
Accordingly, Personal Data processed for the use of the website will only be stored during the use thereof.
Personal Data processed for the purpose of sending service offers and/or quotes or information regarding new Mouchão products and/or services will be stored for six months after the last contact with the Personal Data subject. However, longer periods may apply where and to the extent required, in particular where necessary to safeguard Mouchão’s rights; Personal Data processed in connection with the purchase of products will be stored for as long as permitted by law (to allow Mouchão to perform the contract, including complaint periods).
5. RIGHT OF ACCESS, RECTIFICATION, ERASURE, RESTRICTION OF PROCESSING AND RIGHT TO PERSONAL DATA PORTABILITY.
The user is entitled at all times to the right to access their Personal Data, as well as to their rectification, erasure, portability, restriction and/or to object to the processing – thus, the user may exercise any of these rights by writing to Mouchão, using the address of the registered office or through the following e-mail address: info@mouchao.pt.
However, Mouchão clarifies that providing Personal Data constitutes an essential requirement for purchasing products.
Notwithstanding the above, the user shall always be entitled to lodge any complaints they intend with the relevant authorities.
6. SECURITY IN THE PROCESSING OF PERSONAL DATA
Personal Data will be processed and stored by electronic means and in paper format.
Mouchão is committed to ensuring the security and protection of any Personal Data sent by users through the website, having adopted the appropriate technical and organisational measures, including without limitation: (i) protection with the use of passwords; (ii) use of digital certifications; (iii) restrictions on the physical entry to the locations of the servers storing the Personal Data; (iv) firewalls; (v) encryption software for payment details; (vi) dedicated Cloud infrastructure in a national Datacenter with ISO/IEC 27001:2013 and ISO/IEC 20000:2011 certification in the area of security and management of information systems; (vii) ISO 9001:2015 and ISO 14001:2015 in environmental management and responsibility; (viii) redundant power systems; (ix) redundant generator power and redundant UPSs; (x) remote access via an SSL – AES256SHA secure VPN; and (xi) encrypted backups to Microsoft datacenter – North Europe. Mouchão informs that the abovementioned security measures are reviewed and updated according to needs and the state of the art in these matters.
If, for any reason, a breach of security occurs leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Personal Data, Mouchão will notify the relevant authorities without undue delay and, whenever possible, within 72 hours of taking notice thereof, in accordance with the applicable laws. Furthermore, Mouchão shall notify any breach of Personal Data to the respective Personal Data subject, according to the applicable laws.
Without prejudice to the security measures adopted by Mouchão, considering that Mouchão cannot guarantee their total effectiveness (nor be held liable for it), users are warned that they should adopt additional security measures, such as ensuring that they have an active firewall and up-to-date anti-virus and anti-spyware software.
7. COMMUNICATION OF PERSONAL DATA TO THIRD PARTIES
In the course of its activities, Mouchão may resort to third parties for the provision of certain services (namely, companies of the group to which it belongs, the company providing remote electronic payment services and the entity transporting the products, in the case of the purpose of purchasing products). Such third parties may be located inside or outside the European Union. The provision of these services may imply access from time to time by these entities to the personal data of the users (namely for the purposes of delivering products to perform a contract).
In this case, Mouchão adopts the appropriate measures to ensure that the entities with access to the Personal Data are reputable and offer strong guarantees in this regard, as duly set out and safeguarded under a written contract between Mouchão and such third party(ies).
Therefore, any entity subcontracted by Mouchão will process the Personal Data of the users for and on behalf of Mouchão, under the obligation to adopt the necessary technical and organisational measures to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access and against any other form of unlawful processing.
In any case, Mouchão shall remain liable for the processing of Personal Data.
Whenever necessary in the context of Mouchão’s contracting of third parties, Personal Data may be transferred to locations outside the European Union, under such terms and conditions as permitted under the applicable law.
8. CHANGES TO THE PRIVACY POLICY
Mouchão reserves the right to make any adjustments or changes to this Privacy Policy from time to time, which shall be duly published on this website. The version currently in force is published on the website.