1. Controller
Francisco Lince Azeites Unip. Lda., with registered office at Alcácer do Sal, Portugal, is the controller for processing carried out through the website unless a different controller is expressly identified for a particular service.
Privacy contact: azeitemanoslince@sapo.pt.
2. Data processed
- Identity and contact details: name, company, email, telephone, tax/VAT number and addresses.
- Account and authentication information: identifier, role, permissions, session token and access logs.
- Commercial data: customer segment, authorised products, prices, proposals, orders, deliveries, invoices, payments and correspondence.
- Information supplied in forms, contact requests, complaints and attachments.
- Technical data: IP address, date and time, browser, device, requested pages, errors and security events.
- Language, cookie preferences and consent records.
3. Purposes and legal bases
- Responding to enquiries and preparing offers: pre-contractual steps and legitimate interests in managing business contacts.
- Creating and managing accounts, orders, deliveries and invoices: performance of a contract.
- Meeting tax, accounting, food safety, traceability and consumer-law duties: legal obligation.
- Protecting accounts, preventing fraud and defending legal rights: legitimate interest or legal obligation as appropriate.
- Loading maps, external videos, audience measurement or marketing tools: prior consent where required.
- Sending electronic marketing: consent or another valid basis, with an opt-out in each communication.
4. Required information
Fields marked as required are needed to process the request or perform the contract. Without them, it may be impossible to create an account, reply, place an order, deliver goods or issue a tax document.
5. Recipients and processors
Data is available only to authorised staff and, where necessary, to hosting, database, storage, email, payment, transport, accounting, support, security and professional advisers. Each provider receives only the information required and is bound by confidentiality and data-protection duties.
Information may be disclosed to public authorities where required by law or to establish, exercise or defend legal claims.
6. International transfers
Some providers may process information outside the European Economic Area. Recognised safeguards are then used, such as an adequacy decision or standard contractual clauses, together with supplementary measures where needed. The actual provider list must be maintained in the internal processing record.
7. Retention
- Enquiries without a contract: for the time needed to respond and follow up, then deletion or limited evidential archiving.
- Accounts and commercial relationships: during the active relationship and for the period needed for warranties, complaints and limitation periods.
- Orders, invoices, payments and traceability: for applicable tax, accounting, commercial and food-safety retention periods.
- Security logs: only for the period required for incident detection, audit and legal defence.
- Consent and objections: for as long as necessary to demonstrate and honour the choice.
- Cookies: for the periods described in the cookie policy.
8. Individual rights
You may request access, rectification, erasure, restriction, portability or object to processing, and withdraw consent at any time without affecting earlier processing. Rights depend on the legal basis and applicable retention obligations.
A request must allow us to verify the requester’s identity and will be handled within the statutory period. A complaint may be filed with Portugal’s Comissão Nacional de Proteção de Dados (CNPD) or the competent authority where you live.
9. Security and children
Risk-appropriate technical and organisational measures are used, including access controls, authentication, updates, backups and monitoring. No system is infallible; relevant personal-data breaches will be assessed and notified as required.
The website and commercial area are not directed at children. Personal data about a child should not be supplied without an appropriate legal basis and authorisation.
10. Changes
This policy may be updated to reflect legal, technical or business changes. The version and date appear above. Fresh consent will be requested where a material change requires it.