Dear User

At Cave Lusa Unipessoal Lda., we recognize the importance of processing your personal data, which is why we have adopted the appropriate technical and organizational measures to ensure a high level of security in the operations of processing this data. Thus, we inform you of our Privacy Policy, informing you about your rights and the way in which we collect and use your personal data.

We assume responsibility for processing your personal data in an integral and confidential manner.

PLEASE READ THESE TERMS AND CONDITIONS CAREFULLY. YOUR ACCESS TO THE WEBSITE AND/OR YOUR USE OF THE CONTENT CONSTITUTES YOUR ACCEPTANCE OF THESE TERMS AND CONDITIONS.

  1. ACCESS AND ACCEPTANCE
    1.1. Only individuals who are of legal age to purchase and consume alcoholic beverages in their country of residence should access the Website.
    1.2. Access and use of the Website, as well as access to text content, comments, messages, information, photographs, videos, services, and other content provided on the Website (“Content”), imply acceptance, without reservations, conditions, or modifications, of these terms and conditions of use (“Conditions”).
    1.3. Unless otherwise indicated, all Content and web pages available on the Website belong to or have been licensed to Cave Lusa.
    1.4. Cave Lusa reserves the right to amend, add or delete, in whole or in part, these Conditions and to establish new terms of use. Such amendments or additions to the Conditions will take effect after being disclosed on the Website.
    1.5. You can read the updated version of the Conditions at any time by clicking on “Privacy Policy.”
  2. USE OF CONTENT
    2.1. You may use the Content displayed or disclosed on the Website solely for personal purposes via the Internet, under the terms set out in these Conditions.
    2.2. Any modification, copying, distribution, transmission, broadcasting, publication, licensing, reproduction (including on websites), or creation of content or works based on or incorporating the Content, as well as any use other than what is provided for in the previous clause, is strictly prohibited.
    2.3. Cave Lusa may, at any time and at its sole discretion, amend, suspend, or discontinue any of the Content available on the Website without prior notice and without any obligation to compensate third parties for such modifications.
  3. USER REGISTRATION
    3.1. As a condition for using certain functionalities of the Website, as indicated therein, you must register by providing your first and last name, address, postal code, district and locality, mobile number, date of birth, gender, email, and password, in accordance with other instructions provided on the Website.
  4. USER OBLIGATIONS
    As a condition of access and use allowed under these Conditions, the User agrees to:
    4.1 Respect the rights of Cave Lusa and third parties.
    4.2 Refrain from violating public decency and comply with all legal provisions by making proper and appropriate use of the Website, in strict compliance with these Conditions, which you have read, understood, and accepted in full without any reservations.
    4.3 Not modify the software in any way, nor use modified versions of the software, particularly to gain unauthorized access to the Content or any reserved content.
  5. INTELLECTUAL PROPERTY
    5.1. Unless otherwise indicated, all intellectual property rights over the Website and the Content belong to or are licensed to Cave Lusa. These rights include copyrights and industrial property rights over Cave Lusa’s trademarks and logos.
    5.2. Cave Lusa will not tolerate any infringement of its intellectual property rights and will take appropriate measures to defend its interests.
  6. PRIVACY POLICY
    6.1. Cave Lusa declares that it respects and complies with all legal provisions regarding the protection and privacy of personal data, as set out in the General Data Protection Regulation (GDPR), and further declares that it has and will maintain technical measures to prevent the loss, misuse, alteration, unauthorized access, or improper appropriation of personal data provided to or transmitted to Cave Lusa. However, Cave Lusa warns that security measures on the Internet are not impregnable and cannot guarantee that data will not be accessed by third parties.
    6.2. Registering on the Website for access to certain features and transmitting any personal data constitutes acceptance of this Privacy Policy and implies that:
    (i) You have read, understood, and fully accept Cave Lusa’s privacy policy;
    (ii) You acknowledge the characteristics, constraints, limitations, and flaws of the Internet, including that data and information transmissions via the Internet have only relative technical reliability, circulate on heterogeneous networks with varying characteristics and technical capabilities, which can hinder or make access impossible at certain times;
    (iii) You recognize that any website is subject to unauthorized third-party intrusions and may consequently be interrupted and that information circulating on the Internet is not protected against potential diversions (free access), possible viruses, and that any individual may create a link to the website and/or elements contained therein, accepting the inherent risks;
    (iv) Cave Lusa cannot be held responsible for damages suffered by users caused by third-party access to data transmitted by the owner on this Website or elsewhere on the Internet;
    (v) Cave Lusa is not responsible for any damages that may result from the use of the Website or the access or download of Content, including but not limited to virus contamination.
    (vi) You accept the inherent risks of your activities as an Internet user, including the risk of potential data transfer in open networks.
    6.3. Cave Lusa informs users of its data protection policy so that they can determine and freely and consciously express their willingness to transmit their data to Cave Lusa during the registration process on the Website.
    6.4. Cave Lusa also informs that personal data provided by their owners will constitute a computerized file of personal data owned by Cave Lusa, under its responsibility.
    6.5. Cave Lusa is the entity responsible for and the recipient of the personal data transmitted by users. These data may be communicated to third parties, namely to companies that directly or indirectly hold a share in Cave Lusa, with the same guarantees of protection and privacy.
    6.6. The data transmitted to Cave Lusa are intended for managing contacts with clients and Website users, promoting products and services (direct marketing), managing advertising sweepstakes and contests, either by Cave Lusa or by entities subcontracted by it.
    6.7. Cave Lusa informs users that they may exercise their rights to access, rectify, modify, or delete their personal data at any time and free of charge by sending an email or a registered letter addressed to Cave Lusa at the following email address: online@cavelusa.pt or postal address: Cave Lusa – Unipessoal Lda., Sítio da Manhosa, Pavilhão 2/3 Ranhados, 3500-631 Viseu, Portugal.
    6.8. Cave Lusa reserves the right to amend its Privacy Policy. In such a case, Cave Lusa will announce the changes, indicating the modifications to be made with due notice.
  7. WARRANTIES FROM CAVE LUSA
    7.1. Cave Lusa does not guarantee the User that:
    i) The Content, goods, offers, or services displayed on the Website will meet or be suitable to meet any of the User’s needs or expectations;
    ii) Any error in the software will necessarily be corrected.
    7.2. Cave Lusa provides no warranties to the User regarding the qualities, characteristics, suitability, accuracy, timeliness, or truthfulness of the Content and the Website.
    7.3. No advice or information obtained by the User through the Content and/or the Website will create any warranty not expressly stated in these Conditions.
    7.4. The Website is part of a public area of electronic communications susceptible to use by multiple users and, as such, subject to computer overload. Therefore, Cave Lusa does not guarantee uninterrupted service, loss of information, or delays during such situations or force majeure events (extraordinary or unforeseeable circumstances beyond Cave Lusa’s control).
    7.5. Information collected by Cave Lusa on the Website is anonymous. Anonymous information collected by Cave Lusa is processed to help improve the content of its websites, tailor them to its visitors, and understand how they are used. For this purpose, Cave Lusa may use tracking technology (cookies) to collect anonymous information, such as the type of internet browser, operating systems, and the date and time of access. Cave Lusa does not collect any personal data unless it is specifically, voluntarily, and knowingly provided by the User, as outlined in section 6 above.
  8. LIABILITY
    8.1. Cave Lusa will not be liable to the User for:
    a) Any damages suffered by the User and/or third parties resulting from the use or inability to use the Content or the Website, except where such damages result directly from Cave Lusa’s willful or grossly negligent conduct.
    b) Any damages suffered by the User and/or third parties due to delays, interruptions, errors, and communication suspensions resulting in loss of information caused by factors outside Cave Lusa’s control and not attributable to it, including deficiencies or failures caused by communication networks or services provided by third parties, the computer system, modems, connection software, possible viruses, or from downloading infected files or files containing viruses or other properties that may affect the User’s equipment, particularly if the User has not installed appropriate software to protect access, as well as in cases of unforeseeable overload of computer systems.
    c) Any damages suffered by the User and/or third parties resulting from using electronic communication means, particularly due to failure or delay in delivering electronic communications, internet connection failures, interception or manipulation of electronic communications by third parties, and the transmission of viruses.
    d) Any damages suffered by the User and/or third parties resulting from technical failures in capturing, displaying, or using the Website that are not attributable to Cave Lusa or from outdated Content.
    e) Any damages suffered by the User and/or third parties resulting from any unauthorized use of Cave Lusa’s servers and/or all information and data stored therein.
    f) The accuracy, timeliness, or truthfulness of the information contained in the Content.
    g) Any errors, deficiencies, inaccuracies, or inaccuracies in the Content and any damages such errors, deficiencies, inaccuracies, or inaccuracies may cause to the User.
    h) Any links or any information or Content that may exist on websites to which the User is redirected via links.
    8.2. Cave Lusa warns that the hyperlinks on the Website may direct the User to external sites operated by third parties. Cave Lusa does not control or assume responsibility for the content, operation, and quality of products or services offered on sites to which the User is redirected through hyperlinks.
  1. WHO IS RESPONSIBLE FOR THE PROCESSING OF PERSONAL DATA?
    The entity responsible for the processing of personal data is the company Cave Lusa Unipessoal Lda., headquartered at Sítio da Manhosa, Pavilhão 2/3 Ranhados, 3500-631 Viseu, Portugal, which defines which data is collected, the means of processing, and the purposes for which this data is used. Personal data refers to any information relating to an identified or identifiable natural person.
  2. WHO ARE THE DATA SUBJECTS?
    10.1. The client or potential client, a natural person to whom the data pertains, who uses or intends to use the products, services, or campaigns provided by Cave Lusa.
    10.2. The representative or point of contact at a company or its employee, in the case of legal entities, who, in the execution of a contract or pre-contractual negotiation, or in the context of institutional contact, engages with Cave Lusa.
    10.3. The applicant, a natural person, who wishes to apply for a job opportunity or submit a spontaneous application to Cave Lusa.
  3. WHAT CATEGORIES OF PERSONAL DATA ARE PROCESSED BY CAVE LUSA?
    i) Contact Information: email, telephone, country, address.
    ii) Personal Information: name, date of birth, identification number, nationality.
    iii) Curriculum Information: academic qualifications, spoken and written languages, IT skills, evaluation data, and other details in the curriculum vitae.
    iv) Application, internet pages, and social media data: such as profiles, location, and behaviors.
    For representatives and employees of legal entities, only the data necessary to respond to requests, execute contracts, or develop partnerships and institutional contacts are collected, such as name, email, and telephone. Data related to temporary workers, external service providers contracted by Cave Lusa, or interns conducting curricular internships are also collected.
  4. HOW, WHEN, AND FOR WHAT PURPOSES ARE YOUR PERSONAL DATA COLLECTED?
    Your personal data may be collected under the following circumstances and for the following purposes:
    12.1. Via the website, when you make a contact request, request support, apply for a job opportunity, submit a spontaneous application, or during a subsequent recruitment process.
    12.2. When entering into a contract with us as part of our activities, if you are a temporary worker, external service provider, or intern contacting us.
    12.3. For marketing and communication campaigns, such as receiving information about institutional news and products.
    12.4. When making a purchase.
  5. WHAT ARE THE LEGAL BASES AND DURATION FOR PROCESSING PERSONAL DATA?
    The legal bases that justify the processing of your personal data by Cave Lusa, for the purposes described in section 12 of this policy, are as follows:
    13.1. Consent: Your personal data may be processed upon your free, specific, informed, and explicit consent, which you express through a statement or a clear affirmative act. For example, we process personal data of job applicants in the context of spontaneous applications submitted through any means or channels, such as the website, email, postal mail, or in person.
    13.2. Pre-contractual and/or contract execution steps: Your personal data may be necessary to clarify doubts, enter into, execute, and manage the contract established with Cave Lusa. For example, we process personal data for the execution and management of contracts between the client and Cave Lusa.
    13.3. Legal obligation: Your data may be required to comply with a legal obligation to which Cave Lusa, as the data controller, is subject. For instance, compliance with tax obligations may require providing information to the Tax Authority.
    13.4. Legitimate interest: Your data may be necessary for tasks related to Cave Lusa’s business activities, except in cases where your privacy and data protection rights prevail. For example, we process personal data for business management, customer communication, or recruitment processes.
  6. HOW LONG DO WE RETAIN YOUR PERSONAL DATA?
    14.1. Cave Lusa retains the personal data of individuals only for the period strictly necessary to achieve the purpose for which it was collected.
    14.2. In certain cases, the law requires data retention for a specific period, such as data necessary for compliance with tax obligations, which will be retained for 10 years under current legislation.
    14.3. We will also retain your data for as long as you maintain a contractual relationship with Cave Lusa. We may retain your personal data for longer periods with your consent or where Cave Lusa has a legitimate interest, always respecting the period necessary for the intended purpose.
    14.4. In the absence of a specific legal obligation, your data will be processed only for the period necessary to fulfill the purposes for which it was collected, as long as legitimate grounds for its retention by Cave Lusa persist.
    14.5. Your personal data, when processed for spontaneous applications and recruitment and selection processes, will be handled as follows:
    i) If you have applied for a current recruitment process, we collect your personal data provided in your Curriculum Vitae based on our legitimate interest to respond to the needs of the recruitment and selection process. We will retain your Curriculum Vitae only during the recruitment and selection process to which you applied. If you wish to be considered for other similar vacancies, we need your consent. With your consent, we will retain your Curriculum Vitae for a period of six months. Otherwise, it will be deleted as soon as the position you applied for is filled.
    ii) If you are submitting a spontaneous application, we collect your personal data provided in your Curriculum Vitae based on your consent, retaining it for six months, during which we will consider you for any potential opportunities matching your profile.
    14.6. Once the maximum retention period has been reached, personal data will be irreversibly anonymized (and anonymized data may be retained) or securely destroyed.
  1. TO WHOM DO WE TRANSMIT YOUR PERSONAL DATA?
    15.1. Cave Lusa transmits your personal data only when necessary for the purposes described above.
    15.2.Cave Lusa’s suppliers and/or service providers are contractually subject to the same terms and conditions for personal data processing established by this privacy policy. They are prohibited from using, transferring, disclosing, or recording the personal data of the data subject for any purpose other than that for which they were specifically contracted.
    15.3. Depending on the purpose for which the data was collected, your personal data may be transmitted to different recipients. Only the data necessary for the activities pursued by these entities will be transmitted, within the purposes identified in this privacy policy.
    15.4. Your personal data may also be transmitted to entities that must receive the data by law, such as the Tax Authority.
  2. WHAT ARE THE RIGHTS OF DATA SUBJECTS?
    Cave Lusa ensures the application and compliance with all rights of data subjects provided for in the General Data Protection Regulation (GDPR) and applicable national legislation.
    Right of Access
    You have the right to obtain confirmation of whether personal data concerning you is being processed and, if so, the right to access your personal data and information regarding the processing. For example, you can request an exact copy of your compiled data and request additional information about the processing we carry out.
    Right to Rectification
    You also have the right to obtain, without undue delay, the rectification of inaccurate personal data concerning you, including the right to correct or complete your personal data.
    Right to Erasure of Data (“Right to be Forgotten”)
    You may exercise the right to have your personal data erased without undue delay, provided that: The data is no longer necessary for the purpose for which it was processed; You withdraw your consent, and there are no other valid grounds for retention; You object to the processing, and there are no overriding legitimate interests, as well as in other legally provided cases.
    Right to Data Portability
    You have the right to receive your personal data in a structured, commonly used, and machine-readable format and to transmit that data to another data controller (if technically possible) without interference from Cave Lusa, provided the processing is based on consent or a contract and is carried out by automated means.
    Right to Withdraw Consent
    You can change your consent, limit it to certain types of processing, or withdraw it at any time. However, the withdrawal of consent does not affect the lawfulness of processing based on consent previously given.
    Right to Object
    You may object at any time to the processing of your personal data when there are no compelling and legitimate reasons for the processing that override your interests, rights, and freedoms or for the establishment, exercise, or defense of legal claims.
    Right to Restrict Processing
    In certain situations, you have the right to restrict the processing of your personal data, namely if you contest its accuracy for a period that allows verification, when the data is no longer necessary for processing but is required by you for legal claims, or if you have objected to processing until it is verified whether Cave Lusa’s legitimate grounds override yours.
    Right Not to Be Subject to Automated Decision-Making
    You have the right not to be subject to a decision based solely on automated processing, including profiling, that produces legal effects or significantly affects you in a similar way.
  1. HOW CAN YOU EXERCISE YOUR RIGHTS?
    17.1. You may exercise your rights free of charge, except in cases where a request is manifestly unfounded or excessive, in which case a reasonable fee may be charged, considering the costs involved.
    17.2. We will respond to your requests within a maximum of 30 days, except for cases involving complex requests.
    17.2. To exercise your rights, you may contact us via the following address: online@cavelusa.pt
    17.3. If you are not satisfied with our response after exercising any of these rights, you have the right to file a complaint with the Portuguese Data Protection Authority (CNPD): Rua de São Bento, n.º 148, 3º, 1200-821 Lisboa, Tel: 351 213928400, Fax: +351 213976832, e-mail: geral@cnpd.pt).
  2. SECURITY MEASURES
    Cave Lusa employs physical, technological, organizational, and security measures appropriate to protect your personal data to safeguard it against dissemination, loss, misuse, alteration, unauthorized processing, or access.
  3. DATA PROTECTION OFFICER (DPO)
    19.1. Cave Lusa has appointed a Data Protection Officer (DPO) who: (i)Supervises and advises the data controller on obligations concerning privacy and data protection regulations; (ii) Cooperates with the supervisory authority; (iii) Acts as a point of contact for clarifying questions about the data processing carried out by Cave Lusa.
    19.2. If you have any questions or wish to file a complaint, you can contact the Data Protection Officer via the following email: online@cavelusa.pt
  4. FINAL PROVISIONS
    20.1. If any provision of these Conditions is deemed invalid, ineffective, or unenforceable, such determination will not affect the validity or enforceability of the remaining clauses, which will remain fully valid.
    20.2. In the case referred to above, the parties will replace the invalid, void, or unenforceable provision with valid terms that correspond as closely as possible to the intent and purpose of the original terms.
    20.3. All matters governed by these Conditions are subject to Portuguese Law.
    20.4. In the event of a dispute concerning the interpretation or application of these Conditions, the competent court will be the judicial district of Viseu, with express waiver of any other jurisdiction.
  5. UPDATING THE PRIVACY POLICY
    21.1 Cave Lusa reserves the right to update this Privacy Policy at any time. As such, we recommend periodically consulting this policy on our website to stay informed about how your personal data is processed.
    21.2. Without prejudice to consulting this policy on our website, Cave Lusa will communicate any changes through its various communication channels.

This Privacy Policy was last updated in March 2022.