Introduction
Your privacy is a priority for gruta.pt. This Privacy Policy explains how we collect, use, process, and protect your personal data when you visit our website or use our services.
Data Controller
The entity responsible for the collection and processing of your personal data within the scope of this website is Grutta, with the contact email hello@grutta.pt
Data We Collect
Depending on how you interact with gruta.pt, we may collect various types of information. This includes contact details such as your name, email address, and phone number when voluntarily submitted via forms. We also collect browsing data, including your IP address, browser type, approximate location, and pages visited, through the use of cookies. If the site processes sales, we collect transaction data necessary for billing and shipping purposes.
Purpose of Processing
We use your data for several specific purposes. These include responding to inquiries or contact requests, improving the browsing experience and website performance, and sending newsletters or marketing communications, provided you have given your explicit prior consent. Furthermore, we process data to comply with legal obligations such as tax and accounting requirements.
Legal Basis for Processing
We process your data based on several legal grounds. These include your explicit consent when accepting cookies or subscribing to a newsletter, the performance of a contract when you purchase a service or product, our legitimate interest in ensuring website security, and the fulfilment of legal obligations.
Third-Party Data Sharing
gruta.pt does not sell your personal data to third parties. We may share data only with strictly necessary service providers, such as web hosting and technical maintenance services, analytical tools like Google Analytics, and email marketing platforms where applicable.
Your Rights
Under the GDPR, you have several rights regarding your information. You have the right to access your data, the right to rectify inaccurate or incomplete information, and the right to be forgotten through the erasure of your data. Additionally, you have the right to restrict or object to how we process your data and the right to data portability. To exercise any of these rights, please contact us at the email address provided above.
Data Retention and Security
Your data will be stored only for as long as necessary to fulfil the purposes for which it was collected or to comply with mandatory legal retention periods. We implement technical and organisational measures, such as SSL encryption, to protect your data against unauthorised access, loss, or destruction.
Cookies and Updates
Our website uses cookies to enhance the user experience. You can manage your cookie preferences at any time through your browser settings or the cookie banner displayed on our site. This Privacy Policy may be updated periodically, so we recommend checking this page regularly for any changes.