Website Users – any person accessing any of the TFP websites or trademarks marketed by TFP: www.fladgatepartnership.com, managed by The Fladgate Partnership - Vinhos, S.A; www.climatechange-porto.com, managed by The Fladgate Partnership - Vinhos, S.A; www.the-yeatman-hotel.com, managed by The Yeatman Hotel, Lda; eventos.theyeatman.com, managed by The Yeatman Hotel, Lda.; shop.theyeatman.com, managed by The Yeatman Hotel, Lda.; www.vintagehousehotel.com, managed by The Vintage House Hotel, S.A.; www.grapeshospitality.com, managed by Grapes - Great Restaurant, Accommodation and Personalised Event Solutions, Lda.; www.baraofladgate.com, managed by Três Séculos - Realizações Hoteleiras, Lda.; www.tresseculos.pt, managed by Três Séculos - Realizações Hoteleiras, Lda.; www.dourorivertaxi.com, managed by Três Séculos - Realizações Hoteleiras, Lda.; clerigostastingroom.com, managed by Três Séculos - Realizações Hoteleiras, Lda.; www.barons-hall.com, managed by Três Séculos - Realizações Hoteleiras, Lda.; www.hoteldaestrela.com, managed by Três Séculos - Realizações Hoteleiras, Lda.; www.chafarizdelrei.com, managed by Três Séculos - Realizações Hoteleiras, Lda.; www.onwine.pt, managed by Onwine, Lda.; www.Taylor.pt, managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.Fonseca.pt , managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.Croftport.com, managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.Krohn.pt, managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.Croftpink.com, managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.Bin27port.com, managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.portandtonic.com, managed by Quinta and Vineyard Bottlers - Vinhos S.A.; www.heritagewines.pt, managed by Heritage Wines – Distribuição de Bebidas, Lda.; www.wow.pt, managed by HILODI - Historic Lodges & Discoveries, S.A.; shop.wow.pt, managed by HILODI - Historic Lodges & Discoveries, S.A.; tickets.wow.pt, managed by HILODI - Historic Lodges & Discoveries, S.A.; www.vintevintechocolate.pt, managed by Y Not Chocolate, S. A.; www.museudovitral.pt, managed by Três Séculos – Realizações hoteleiras, Lda.
DO I HAVE A DUTY TO PROVIDE MY DATA? In the scope of our commercial or professional relationship, you will have to provide the necessary personal data to start and create such a relationship in order to comply with the existing pre-contractual and contractual duties and diligences and that data that we and compulsory have to collect. Without such data, we will generally have to refuse to conclude or perform such an agreement or we will not be able to maintain the agreement and therefore will have to terminate it. If you do not provide us with the necessary information and documentation, we will not be able to start or continue the commercial or professional relationship intended by you, or even follow up on requests you may send us.
HOW DO WE COLLECT YOUR PERSONAL DATA? We may collect personal data in several ways: a) Personal data that we receive directly from you, if you contact us deliberately, usually by phone or email; and/or if we contact you by phone or email or through business development activities in a more general manner. There are several ways in which you can share your information with us. It all depends which suits you better. These may include: - Enter your data on TFP Website by filling out the form as part of the registration procedure; or - Download onto our website or send your CV/ résumé by email or leave a hard copy of your CV; - Participate in a contest through a social network channel such as Facebook, Twitter, Instagram, Pinterest or other; - Sign up for our newsletter or any of our events; - Through the chat function on our Website. b) Personal data we receive from other sources, usually through due diligence or other market information, including lists of applicants in relevant events. We also receive personal information from other sources, for instance if you introduce “Like” on our Facebook page or choose to "Follow" on Twitter or Instagram, we will receive personal information from these websites; To the extent that you access our Website, read or click on an email from us, when appropriate and in accordance with local legal requirements and legislation, we may also automatically collect your data. When you visit our Website there is certain information that we may collect automatically, whether or not you decide to use our services. This includes your IP address, the date, times and frequency of access to our site and the way in which you browse its content, all as provided in the cookies policy below. We will also collect your data when you contact us through our Website using, for example, the chat function. We collect your data automatically through cookies, in accordance with your browser’s cookie settings. If you are also a TFP Applicant or Customer, we may use data from your usage of our websites in order to improve other aspects of our communications with you or the services we provide to you.
WHY DO WE HANDLE YOUR DATA (COLLECTION PURPOSE) AND ON WHAT LEGAL BASIS? PROVISION OF PRODUCTS AND SERVICES TFP may use your personal data, when necessary to perform the agreement between you and TFP, as well as to be able to identify you. We may also use your Personal Data to prevent and research possible misuse of the said Personal Data. MARKETING ACTIVITIES Occasionally, we may send you information that we consider to be of interest to you. In particular and when appropriate, we may use your data for the purposes listed below: - to enable us to develop commercial or marketing initiatives, namely to promote actions to publicise new options or new products and services; - to send you reports, promotions, offers, events and contacts; - to provide you with information about specific promotional discounts and offers to which you are entitled to because of your relationship with TFP; - to allow us to send newsletters, which may contain information on promotional campaigns, on events, discounts, promotions and offers, invitations, reminders about your bookings, activities publicising new features, new products or services and for sending information on participation in contests and prizes, in accordance with the thematic preferences that you have indicated by email; -to provide you with information about personalised and exclusive offers of products and services identified based on your personal preferences and behaviour pattern, as well as from the use of products, services and browsing on the websites. When you have provided us with your email contact details in connection with the sale of a product or service, we may use them for the purposes of marketing of our own products and services. You may, however, freely and if you do not agree with our marketing approach, refuse such communications either at the time of the collection or at the time each message arrives, simply by refusing its arrival as a recipient. Regarding the sending of any other type of e-communication, we will firstly request your prior and express consent. We need your consent for some aspects of these activities that are not covered by our legitimate interests (in particular, the collection of data through cookies and the provision of marketing directly to you through digital channels). If you do not agree with our marketing approach, you are entitled to withdraw your consent at any time. We may use your data to show you TFP adverts and other content displayed on other websites such as, for example, on Facebook. If you do not wish us to use your data in this way, turn off the option “Advertisement Cookies” (please check our Cookies Policy). OTHER PURPOSES - To store (and update as necessary) your information in our database, so that we can contact you regarding the agreements you have entered with us; - To offer you services or to obtain assistance and services from you; - To fulfil specific legal duties; - To help us direct appropriate marketing campaigns, in which TFP may adopt automated decisions, including profile definition; - In rare circumstances, to assist us in the declaration, exercise or defence of a right and - To defend the vital interests of the data holder. We may also use your personal data for these purposes if we consider it necessary to do so in order to defend our legitimate interests. DEVELOPMENT ON PRODUCTS AND SERVICES TFP may use your personal data for the development of your products and services. However, we will predominantly use combined data and statistical information for that purpose. TFP keeps track of the pages our customers visit within the website to determine which services/products are most requested. In this case, we collect information concerning the computer or device (including mobile devices) that you use to access the website, namely your IP address, the website you used to access us, the type and language of your browser, operation system, cookies, the country from where you are accessing, reference and exit pages, URL, platform, number of clicks you have made, domain names, searched and visited pages, and the order in which you have visited them, the time spent on a particular page, the date and time you have accessed our website, access errors and other similar information that your browser may sends us. COMMUNICATION TFP may use your personal data to communicate with you, namely, to send you news related to TFP’s products and services, or to assist you in matters relaters to customer support, in particular to respond and manage users requests through customer service channels, as well as to monitor the quality of our service. In this case, your full name, email and phone number will be collected. TFP’s newsletter subscription may involve the use of personal data in order to carry out personalised advertising of our products and services, which are available to users through email, push notifications by any other electronic means or through third parties. You can freely unsubscribe from receiving our Newsletter at any time, simply by following the information we provide in each communication.
TFP may use data that has been identified based on your personal and behaviour pattern preferences. In order to send you customised offers, TFP will collect the said data from your interactions with us, whether through our website, or through an app, support line, or even from the use of products. In such case, the following personal data will be collected: gender and preferences for services or products.
The management of data for the purpose of profiling and market researching is also based on TFP’s legitimate interest. >To such end, TFP considers the interests and rights of those concerned and the measures taken by the person responsible to fulfil general duties in terms of proportionality and transparency, having surmised that: a) the impact on individual fundamental human rights, freedoms and guarantees is reduced; b) the said management may be reasonably foreseen by the person concerned; c) the data handling for the referred purpose does not lead to exclusion, discrimination, defamation or endanger of the holder’s reputation and/or his/her negotiation power. If you consider that the referred data management may lead to any kind of emotional repercussion, you may exercise your right of access and/or right to object, as well as voluntarily exclude yourself without any need for justification of your decision. We inform you that you can limit this by exercising the right to object by writing an email to any of the contacts listed in “How to contact us”. IMPROVING THE SERVICE PROVIDED TO THE USER Your Personal Data related to your physical or online purchases, tastes and preferences can be used for analysis, user profiling, market research, quality surveys and improvement of our Customer interaction. RECRUITMENT ACTIVITIES In order to fill job vacancies, we can internally develop recruitment activities. We have listed below several ways in which we may use and process your personal data for this purpose: - Collect your data through you and other sources, such as LinkedIn; - Store your data in our database (and update them when necessary), so that we can contact you regarding recruitment; - Assess data concerning yourself in relation to the vacancies that we believe are appropriate for you; - Allow you to send your CV, apply online for employment offers or subscribe alerts on job offers that we believe will be of your interest; - Comply with our obligation arising from any agreement entered into between you and TFP; - Comply with our obligations arising from any agreements entered into between third parties and TFP, regarding your recruitment; - Streamline our payment and invoicing procedures; -Check the data provided by you, using third party resources (such as psychometric assessments or skills tests) or to request information (such as employment recommendations or references, as appropriate under applicable law, that you have provided contact data of, and as long as you have gathered previous consent authorising us to contact these entities); and - Comply with our legal obligations, including, for instance, crime detection or tax and fiscal duties collection. We handle your abovementioned personal data pursuant to the provisions in the GDPR and other applicable legislation, and we base this data management essentially on pre-contractual procedures and contract performance, on the fulfilment of a legal obligation or to satisfy legitimate interests pursued by TFP or on the protection of the imperative interests of the data subject. That is, we use and process your personal data for the management and performance of agreements or other procedures requested by the data subject (Article 6, paragraph 1 b) of the GDPR); in the context of a legitimate interest (Article 6 paragraph 1 f) of the GDPR); based on the consent of the data subject (Article 6 paragraph 1 a) of the GDPR) and by legal imperative or in the public interest (Article 6 paragraph 1 c) of the GDPR).
WITH WHOM DO WE SHARE YOUR PERSONAL DATA? Where appropriate and in accordance with legal requirements and local legislation, we may share your personal data for various reasons and in several ways with the following categories of entities: - Any of the companies of our Business Group, identified in the Glossary herein. - In the pending of an investigation, claim or lawsuit filed within the Tax, Audit, Administration or Public Authorities, Courts, Foreigners and Borders Service (“SEF”) and Portuguese Security Forces, which are responsible for the matter and, internally, the areas or departments of the TFP Group that collaborate in collecting information and reporting facts to the competent authority; - Third party service providers who perform tasks on your behalf (including external consultants, business partners and professional counsellors such as lawyers, auditors and accountants, recruitment companies, technical support and IT consultants conducting testing and work development on our Company’s technology systems; - Third party IT service and outsourced documents storage providers, in cases where we have an appropriate management agreement (or similar protections); - With the company “UNLOCK THOUGHTS, LDA, Tax and Companies Registration number 513923195, with registered headquarters in Rua do Bom Sucesso nº 372, 5, civil parish of Lordelo do Ouro and Massarelos, municipality of Oporto, as partner company of our Hotel da Estrela and our Hotel Palacete Chafariz d’El Rei, for the same legal effects and purposes foreseen in this Policy; - Platforms and suppliers of marketing technology; - In the event of acquisition or selling of businesses or assets, we may share your personal data with potential purchasers of these businesses or assets; - In the event of payments, the credit institutions and other payment service providers, as well as the technology service providers related to payment services to whom the transaction data is passed on, and which may be bound by legislation of the State in where they perform, or by agreements concluded by the latter to provide information on transactions to official authorities of other countries, both inside and outside the European Union, in the battle against financing terrorism, serious forms of organised crime and money laundering prevention. Our website and our application will allow you, in some circumstances, social plug-ins from various social networks. If you decide to interact with a social network such as Facebook, Twitter, Google + (for instance, through account registration), your activity on our website or in our app will also be available in your social network. If you are connected to one of these social networks during your visit to our website or app, or if you interact through one of the said social plug-ins, the social network may include this information to your profile on the said social network, in accordance with your privacy setting. If you wish to avoid this data transfer, please close your account session on the social network before entering our website or app or change your privacy settings whenever possible. We recommend you read the privacy policies of the social networks you use in order to obtain detailed information about the collection and transfer of personal information, and also to get to know your rights and which privacy settings are appropriate and you should select for your profile.
HOW CAN YOU ACCESS, AMEND OR DELETE THE PERSONAL DATA YOU HAVE PROVIDED TO US? One of the main targets of the GDPR is to protect and clarify the rights of EU citizens and individuals in the EU with regard to data privacy. This means that you have several rights to your data, even when you have previously provided such data to us. These entitlements are better described below. We will try to process your request without undue delay and, in any case, within one  month (subject to any extensions permitted by law). Please note that we may keep a record of your communications to help us resolve any matters raised and brought by you. RIGHT TO OBJECT: this right allows you to oppose the handling of your personal data, for the reasons related to your particular situation when your personal data are managed for one of the following purposes: (i) our legitimate interests; (ii) to enable us to perform a task in the public interest or exercise official authority; (iii) to send you direct marketing materials, including profile definition; and (iv) scientific, historical, research or statistical purposes. If you exercise the right to Object, we will terminate the processing of the data that you have objected to, unless: - we can present evidence that we have legitimate compulsory grounds for the data management that overlap with your interests; or - we are processing your data in order to declare, exercise or defence a right. RIGHT TO WITHDRAW CONSENT: If we have obtained your consent to handle your personal data for some activities (for example, for marketing purposes), you may withdraw this consent at any time and we will no longer perform the specific activity you have previously consented upon, unless we consider that there is an alternative reason on our behalf to justify the continuing data management, in which case we will inform you about such condition. RIGHT OF ACCESS BY THE DATA SUBJECT: You may request us, at any time, to confirm the information we have about you, as well as additional information about the purposes of our data management, the period of time which we keep your data, the existence of automated decisions, the recipients to whom the data are disclosed, among any other information provided for in article 15 of GDPR. We may ask you to verify your identity and more information about your request. If we grant you access to the information we keep about you, we will not charge for access unless your request is "manifestly excessive or groundless". If you request us any additional copies of this information, we may charge you a reasonable administrative cost, and where this is legally permitted. In cases where we it is legally permitted, we may deny your request. If we refuse your request, you will always be informed of our reasons and grounds. RIGHT TO ERASURE: In some circumstances, you are entitled to request us to delete your personal data. Usually, the exercise of this right must meet one of the following criteria: - the data is no longer necessary for the purpose for which we originally collected and/or processed; - when you have withdrawn your consent to process your data and there is no other valid reason why we should continue to keep and process them; - if you object to processing and there are no legitimate interests that justify the said data processing; - the data have been unlawfully processed (for instance, in a way that does not comply with the GDPR); or - the data needs to be deleted in order to comply with our legal obligations as data controller. Nevertheless, this right does not apply, and therefore TFP may continue to process your data in a legitimate manner, when the following proves necessary: - to exercise the right to information and freedom of speech; - to comply with legal obligations, to perform a task of public interest or to perform official authority; - for reasons of public health in the public interest; - for record, research or statistical purposes; or - to exercise or protect a right. When presented with a valid request to erase data, we will take all the reasonable and practical steps to delete the said data. RIGHT TO RESTRICTION OF PROCESSING DATA: In some circumstances, you have the right to restrict the processing of your personal data. This means that we can only carry on storing your data and we will not be able to carry out any further processing of your data until: (i) one of the circumstances listed below is resolved; (ii) we have obtained your consent; or (iii) additional processing is required in order to declare, exercise or defend a right, the protection of the rights of another person or on grounds of important public interest of the EU or of a Member State. The circumstances in which you have the right to request the restriction of the processing of your personal data are: - in the event of answering the accuracy of the personal data we deal with. In this case, the processing of your personal data will be restricted for the period during which the accuracy of the data is being checked; - if you object to the processing of your personal data based on our legitimate interests. In this situation, you may request that your data will be restricted while we confirm our grounds for your personal data processing; - if the processing of your data is unlawful, but you would rather restrict our data processing instead of their erasure; and - if we no longer need to process your personal data, but we need the data to establish, exercise or defend a right. If we have shared your personal data with third parties, they will also be notified of the restriction to processing, unless this notification is impossible to make or involves a disproportionate effort. We will, for sure, notify you before lifting any restriction on the processing of your personal data. RIGHT TO RECTIFICATION: You have the right to request us to rectify any inaccurate or incomplete personal data we keep regarding you. If we have shared such personal data with third parties, they will be notified of the rectification, unless this notification is impossible to make or involves a disproportionate effort. Where appropriate, we will also inform you to which third parties we have disclosed inaccurate or incomplete personal information. When we consider that it is reasonable not to comply with your request, we will explain the reasons for our decision. It is important that the personal information we keep regarding you is accurate and updated. Please let us know if there are any changes to your personal information during the period in which we keep your data. RIGHT TO DATA PORTABILITY: If you wish so, you are entitled to transfer your personal data between data controllers. This means that you can transfer data from your TFP account to another online platform. To enable you to do it, we will supply you with your data in a automated read-only format, protected by password, so that you can transfer the data to another online platform. Alternatively, we can directly transfer the data for you. This right to data portability is applicable to: (i) personal data that we process automatically (i e, without human intervention); (ii) personal data provided by you; and (iii) personal data that we process based on your consent or to fulfil an agreement. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY: You also have the right to file a complaint to your local supervisory authority, which in Portugal is the Comissão Nacional de Proteção de Dados (www.cnpd.pt). Please contact us if you intend to exercise any of these rights or withdraw your consent for the processing of your personal data (if your consent is our legal basis for processing your personal data). Please bear in kind that we may keep a record of your communications to help us resolve any matters you may raise:
- Heritage Wines - Distribuição de Bebidas, Lda., A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 250, 4400-088 Vila Nova Gaia Alternatively, you can email us at firstname.lastname@example.org - Grossão - Comércio de Bebidas S.A., A/c. Encarregado de Proteção de Dados, Avenida D. João II – Quinta dos Barões, 4430-022 Vila Nova Gaia Alternatively, you can email us at email@example.com - Grapes - Great Restaurant, Accomodation and Personalised Event Solutions, Lda., A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 250, 4400-088 Vila Nova Gaia Alternatively, you can email us at firstname.lastname@example.org - Sociedade Agrícola de Nogueira, Lda., A/c. Encarregado de Proteção de Dados, Quinta da Roêda, 5085-036 Pinhão Alternatively, you can email us at email@example.com - Três Séculos - Realizações Hoteleiras, Lda., A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 250, 4400-088 Vila Nova Gaia Alternatively, you can email us at firstname.lastname@example.org - The Yeatman Hotel, Lda., A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 345, 4400-088 Vila Nova Gaia Alternatively, you can email us at email@example.com - Wiese & Krohn, Sucessores, S.A. A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 250, 4400-088 Vila Nova Gaia Alternatively, you can email us at firstname.lastname@example.org - HILODI - Historic Lodges & Discoveries, S.A., A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 250, 4400-088 Vila Nova Gaia Alternatively, you can email us at email@example.com - The Vintage House Hotel, S.A., A/c. Encarregado de Proteção de Dados, Lugar da Ponte, 5085-034 Pinhão Alternatively, you can email us at firstname.lastname@example.org - Onwine, Lda., A/c. Encarregado de Proteção de Dados, Avenida D. João II, nº 1288 (Rotunda Gil Eanes), 4430-415 Vila Nova de Gaia Alternatively, you can email us at email@example.com - Y Not Chocolate, S.A., A/c. Encarregado de Proteção de Dados, Rua do Choupelo, nº 250, 4400-088 Vila Nova de Gaia Alternatively, you can email us at firstname.lastname@example.org
HOW DO WE STORE AND TRANSFER YOUR DATA AT AN INTERNATIONAL LEVEL? Data transfer to other countries (countries outside the European Union) only occurs if it is necessary for the execution of orders or upon your requests (for example, payment orders or shipment of products), by legal requirement or if you have given us an express authorisation to do so. If requesting service providers of third countries is required, they will be obliged to comply with the written instructions in this regard by signing an agreement with the standard contractual clauses of the European Union, in order to comply with the level of data protection applicable in the European Union. You will receive detailed information from us separately as required by law. We want to ensure that your data is stored and transferred in a safe way. Therefore, we will only transfer data outside the European Economic Area or EEA (i e, the State Members of European Union together with Norway, Iceland and Liechtenstein) where this is in line with the data protection legislation and the means of transfer provide adequate guarantees in relation to your data, namely: - through a data transfer agreement incorporating the current standard contractual clauses adopted by the European Commission for the transfer of personal data by data controllers in the EEA to controllers and subcontractors in jurisdictions lacking adequate data protection legislation; or - transferring your data to a country where the European Commission has noted an adequate level of data protection; or - if you have consented to the transfer of data.
To ensure that your personal data receives an adequate level of protection, we have applied appropriate procedures with third parties with whom we share your personal data to guarantee that your personal information is handled by such third parties in compliance with data protection law.
GUARANTEES AND WARNINGS User guarantees that the personal data provided to TFP are correct and accurate and will notify any change or amendment to them assuming sole responsibility for losses and damage caused by erroneous, inexact or incomplete communication of these data. User is explicitly warned that when disclosing personal data in public TFP media such as Facebook, Google +, Twitter and Instagram, this information may be seen and used by third parties. TFP does not read any personal communication published or posted on our costumers’ own web pages.
BROWSERS RECOMMENDED TFP website is optimised for viewing on Google Chrome, Safari, Mozilla Firefox, Microsoft Edge.
ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS Occasionally, it may be necessary to process personal data and, where appropriate and in accordance with local requirements and legislation, to process sensitive personal data regarding the exercise and defence of legal claims. On this perspective, article 9 paragraph 2 f) of GDPR such processing when it “is necessary for the establishment, exercise and defence of legal claims in a judicial proceeding or whenever courts act in the exercise of their judicial function.” This may arise, for instance, in circumstances where we need to obtain legal advice in relation to legal proceedings or if we are required by law to retain or disclose specific information as actors in legal proceedings.