Privacy Policy

Last updated: 31/07/2026

Quinta das Marias („we“, „us“, „our“) is committed to protecting your personal data. This Privacy Policy explains what personal data we collect through [www.quintadasmarias.com] (the „Website“), why we collect it, how we use it, and the rights you have over it, in accordance with the General Data Protection Regulation (EU) 2016/679 („GDPR“) and Portuguese Law 58/2019.

1. Who we are
Data Controller: Peter Eckert – Vinhos Lda NIPC: 510 930 476 Registered address: Quinta das Marias, Oliveira do Conde, Carregal do Sal, Portugal Contact email: info@quintadasmarias.com Contact phone: +351 963 858 248

If you have any questions about this policy or how we handle your data, you can contact us using the details above.

2. What personal data we collect
We collect personal data in the following situations:

When you submit an order form: name, email address, phone number, delivery address, and details of the products requested.

When you contact us: name, email address, and the content of your message.

When you subscribe to our newsletter: name and email address.

When you browse the Website: technical data such as IP address, browser type, pages visited, and time spent on the site, collected via cookies and similar technologies (see our [Cookie Policy]).

We do not collect payment card details through the Website. Payment for orders is arranged separately after your order is confirmed (for example, by bank transfer or MB Way), and any payment details you share with us at that stage are handled directly between you and us, not processed automatically by the Website.

3. Why we use your data and our legal basis
Purpose / Legal basis

• Processing and confirming your order — Steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR)
• Arranging delivery of your order — Performance of a contract (Art. 6(1)(b) GDPR)
• Issuing invoices and fiscal records — Compliance with a legal obligation (Art. 6(1)(c) GDPR)
• Responding to enquiries sent via our contact form — Legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR)
• Sending you our newsletter — Consent (Art. 6(1)(a) GDPR) — you can withdraw this at any time
• Basic website analytics — Consent, where required by our cookie banner (Art. 6(1)(a) GDPR)
• Age verification for the purchase of alcohol — Compliance with a legal obligation (Art. 6(1)(c) GDPR)

4. How long we keep your data
Order and invoicing data: kept for the minimum period required under Portuguese fiscal law (currently 10 years).

Enquiry/contact form data: kept only for as long as needed to handle your enquiry, and then deleted.

Newsletter data: kept until you unsubscribe or withdraw consent.

Analytics data: kept in line with the retention settings of the tool used, as described in our Cookie Policy.

5. Who we share your data with
We share personal data with the following categories of recipients, only to the extent necessary:

WordPress (website hosting and order form provider)

Shipping couriers (to deliver your order — name, address, and phone number only)

Our accountant / invoicing software provider (to issue certified invoices)

We do not sell your personal data to third parties.

6. International data transfers
Some of our service providers, such as WordPress, are based outside the European Economic Area (EEA), including in the United States. Where this is the case, we ensure an adequate level of protection through appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (SCCs).

7. Your rights
Under the GDPR, you have the right to:

Access the personal data we hold about you

Rectify inaccurate or incomplete data

Erase your data („right to be forgotten“), where applicable

Restrict how we process your data

Port your data to another provider in a structured, machine-readable format

Object to processing based on legitimate interest or direct marketing

To exercise any of these rights, please contact us at [email]. We will respond within 30 days, though this period may be extended by up to 60 days in complex cases, in which case we will let you know.

You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), Portugal’s data protection authority, at [www.cnpd.pt].

8. Data breaches
In the unlikely event of a personal data breach that poses a risk to your rights and freedoms, we will notify the CNPD within 72 hours of becoming aware of it, and will inform you directly where required by law.

9. Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures are reviewed periodically and updated as needed.

10. Age restriction
Our Website and the products we sell are not intended for individuals under 18 years of age. By submitting an order form, you confirm that you are at least 18 years old.

11. Cookies
Our Website uses cookies to function properly and, where you consent, to understand how visitors use the site. You can manage your preferences at any time through our cookie banner. For full details, see our [Cookie Policy].

12. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The „Last updated“ date at the top of this page shows when it was last revised.

13. Contact us
If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at:

Peter Eckert – Vinhos Lda Quinta das Marias, Oliveira do Conde, Carregal do Sal, Portugal info@quintadasmarias.com · +351 963 858 248