How personal information is collected, used and protected.
Privacy Policy
Information about personal data, contact form submissions, cookies, third-party services and your privacy rights when using Vinho.com.pt.
Introduction
Vinho.com.pt respects the privacy of its visitors and is committed to handling personal information responsibly and transparently.
This Privacy Policy explains what information may be collected when you visit vinho.com.pt, submit an enquiry, propose editorial content or contact us about advertising and sponsorship opportunities. It also explains how that information is used, stored and protected, and the rights available to you under applicable data protection laws.
Last updated: 10 November 2026.
Who Is Responsible for Your Data?
The operator of Vinho.com.pt is responsible for determining the purposes and means of processing personal data described in this policy.
Website: https://vinho.com.pt/
Data Controller: vinho.com.pt
Privacy Enquiries: Contact Vinho.com.pt
Questions concerning this policy or requests relating to personal information may be submitted through the contact page.
Information We Collect
Personal information may be collected when you communicate directly with Vinho.com.pt or interact with the website.
Information You Provide
When you submit the contact form, the information collected may include:
- Your name.
- Your email address.
- Your organisation or company name, if provided.
- The subject and content of your enquiry.
- Information or attachments you voluntarily include in a message, where supported.
This information is used to understand and respond to your enquiry. Please avoid submitting sensitive personal information unless it is necessary for the matter being discussed.
Technical Information
When you visit the website, technical systems such as web servers, hosting infrastructure and security services may process information including:
- Internet Protocol (IP) address.
- Browser type and device information.
- Operating system and technical configuration.
- Pages requested and the date and time of access.
- Technical errors, security events and related server logs.
Such information may be necessary to deliver website content, maintain technical performance and protect against unauthorised access or misuse.
Cookies and Similar Technologies
Cookies may be used to support essential website functionality. Additional technologies may be present when optional analytics, advertising or embedded third-party services are enabled.
More information about these technologies appears in the Cookies section below.
How We Use Personal Information
Personal information is processed for specific purposes connected with operating the website and communicating with visitors.
Responding to Enquiries
Contact information is used to review messages and provide relevant replies to general enquiries, editorial suggestions, correction requests and other communications.
Editorial Contributions
Information submitted in connection with an editorial proposal may be used to evaluate the proposed contribution, request further details and communicate an editorial decision.
Submitting a proposal does not guarantee that any material will be published.
Advertising and Sponsorship
Where a visitor contacts Vinho.com.pt about advertising or sponsorship, the information provided may be used to discuss the enquiry, evaluate a potential arrangement and manage subsequent business communications.
Website Operation and Security
Technical information may be processed to maintain website availability, diagnose errors, prevent abuse and protect the integrity of website services.
Legal Obligations
Information may be retained or processed where necessary to comply with applicable laws, respond to valid legal requests or establish, exercise or defend legal claims.
Marketing Communications
Submitting the contact form does not, by itself, constitute consent to receive an unrelated marketing newsletter or promotional mailing list. Where consent is required for such communications, it must be obtained separately.
Legal Basis for Processing Personal Data
Where the European Union General Data Protection Regulation (GDPR) applies, personal information must be processed on an appropriate lawful basis.
| Purpose | Potential Legal Basis |
|---|---|
| Responding to general enquiries and editorial correspondence | Legitimate interests in managing communications |
| Responding to requests concerning potential business arrangements | Pre-contractual steps where applicable, or legitimate interests |
| Operating and protecting the website | Legitimate interests in technical operation and security |
| Meeting applicable legal requirements | Compliance with a legal obligation |
| Optional analytics or advertising technologies requiring permission | Consent, where required |
Where processing is based on legitimate interests, those interests must be assessed against the rights and freedoms of the individuals concerned.
Where consent is the applicable legal basis, it may be withdrawn at any time. Withdrawal does not affect processing that was lawful before consent was withdrawn.
Contact Forms and Submitted Messages
The contact page uses a WordPress contact form provided through Forminator.
When you submit a message, the information entered is processed for the purpose of receiving, managing and responding to your enquiry.
Depending on the form configuration, submissions may be stored within the WordPress administration system, delivered to an authorised email inbox or processed through services supporting the form’s operation.
Access to enquiries should be limited to people who need the information to handle the relevant communication.
Information submitted through the contact form is not automatically treated as permission to send unrelated promotional communications.
To submit an enquiry or request concerning your personal data, visit the Contact page.
Sharing Personal Information
Personal information may be accessible to authorised service providers where necessary to operate the website or manage communications.
These providers may include:
- Website hosting and infrastructure providers.
- Website maintenance and security service providers.
- Email delivery and communication services.
- Contact form and website functionality providers.
- Other service providers required for a specific function that has been enabled.
Such access should be limited to what is necessary for the relevant service and governed by appropriate contractual and data protection safeguards where required.
Information may also be disclosed where necessary to comply with a valid legal obligation or lawful request.
Advertising or sponsorship enquiries are not, merely by being submitted, authorisation to disclose the sender’s personal contact details publicly.
International Data Transfers
Some website infrastructure, communication systems or service providers may process information outside the country where a visitor is located.
Where personal data is transferred outside the European Economic Area and the GDPR applies, appropriate safeguards must be in place as required by law. These may include an applicable adequacy decision or approved contractual protections.
Questions concerning the location of processing or applicable safeguards may be submitted through the contact page.
How Long Personal Information Is Kept
Personal information should be retained only for as long as reasonably necessary for the purposes for which it was collected, subject to applicable legal requirements.
Contact Enquiries
Messages and associated contact details are retained for the period needed to review the enquiry, provide a response and complete any necessary follow-up. Information no longer required for these purposes should be deleted or anonymised, unless a longer retention period is justified.
Business Correspondence
Information associated with an actual business arrangement may need to be retained for the duration of that relationship and any applicable legal, accounting or contractual retention period.
Technical and Security Logs
Technical records should be retained for periods proportionate to security, troubleshooting and operational needs, subject to the retention rules of the relevant services.
Consent Records
Where consent is obtained, records may need to be kept for a period sufficient to demonstrate compliance with applicable requirements.
Retention periods may vary according to the nature of the information and the legal basis for processing.
How Personal Information Is Protected
Reasonable technical and organisational measures are used to help protect personal information against unauthorised access, misuse, alteration, loss or disclosure.
These may include secure connections, controlled administrative access, software maintenance and appropriate website security measures.
However, no method of transmitting or storing information electronically can guarantee complete security.
Visitors should avoid including passwords, financial credentials or unnecessary sensitive personal information in ordinary contact form messages.
Your Data Protection Rights
Where the GDPR applies, you may have the following rights, subject to the conditions and limitations established by law.
Right of Access
You may request confirmation of whether your personal data is being processed and obtain access to relevant information.
Right to Rectification
You may request correction of inaccurate personal data or completion of incomplete information.
Right to Erasure
You may request deletion of personal data where the applicable legal conditions are satisfied.
Right to Restriction
You may request restriction of processing in certain circumstances.
Right to Object
You may object to certain processing activities, including processing based on legitimate interests, where applicable.
Right to Data Portability
Where the applicable conditions are satisfied, you may request relevant personal data in a structured, commonly used and machine-readable format.
Right to Withdraw Consent
Where processing relies on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.
Rights Concerning Automated Decisions
Where applicable, you have rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
How to Exercise Your Rights
Requests may be submitted through the Contact page.
Enough information may be requested to verify your identity and process your request securely. Responses will be provided within the periods required by applicable law.
External Websites and Third-Party Links
Vinho.com.pt may contain links to external websites, including wine producers, industry organisations, publications, advertisers and other relevant resources.
External websites operate under their own privacy policies and data-handling practices.
When you follow a link to another website, the information you provide to that website is governed by its applicable privacy terms.
Visitors are encouraged to review the privacy information of external services before providing personal information.
Children’s Privacy
Vinho.com.pt provides editorial information about wine and is not intended for children.
The contact form is not designed to collect personal information from children. If personal data relating to a child is identified and there is no appropriate legal basis for its processing, suitable steps will be taken in accordance with applicable law.
Questions and Complaints
If you have concerns about the processing of your personal information, you may contact the operator of Vinho.com.pt using the Contact page.
You may also have the right to lodge a complaint with a competent data protection supervisory authority.
For matters falling within Portuguese supervisory jurisdiction, the relevant authority is the Comissão Nacional de Proteção de Dados (CNPD). Its website is www.cnpd.pt.
Changes to This Privacy Policy
This Privacy Policy may be updated to reflect changes in website functionality, data processing activities or applicable legal requirements.
Any revised version will be published on this page with an updated revision date.
Visitors may review this page periodically to remain informed about how personal information is handled.