WHAT DATA WILL BE COLLECTED AND HOW WILL IT BE USED?
Your personal data will be collected by Wine XP through either the website or APP and will be used in order to book “Wine Experiences”. Your contact details, as a Customer or User of Wine XP, will allow wineries and Wine XP to maintain a business relationship with you.
The main data collected by Wine XP through the registration process on the website or APP are: name, country, date of birth, tax identification number (TIN), e-mail, phone number, IP address, and any information that may be needed in order to book their services, meaning, the “Wine Experiences”.
When booking and/or registering on the Wine XP website or APP, the Customer/User gives Wine XP its consent to collect and use the data for the following purposes: sales and orders made on their website or APP, communication with the wineries if the data provided is needed in order to ensure the sale or order, statistics and analyses, complaints and litigations, and also marketing purposes.
The company responsible for collecting and processing the data provided by Customers/Users of the Wine XP website (www.winexp.pt) or APP is the following:
Company Name: WDXPERIENCE, Lda.
Company Headquarters: Edifício NERE, Parque Industrial e Tecnológico de Évora, Rua Circular Norte, 7005-841 Évora
Capital: 5.000,00 Euros
Tax number: 516.115.677
WDXPERIENCE, Lda. is responsible for the collection and processing of the data and commits to abide by the legal provisions of Regulation (EU) 2016/679 of the Council of 27 of April 2016 (GDPR) on the protection of personal data, as well as community and national laws which are applicable.
You as a Customer or User is informed as to which fields of data are of mandatory nature. If a Customer does not fill out one or more mandatory fields, Wine XP will not be able to provide services to such a user.
WHAT IS THE AIM IN COLLECTING PERSONAL DATA AND WHY DO WE DO IT?
Wine XP is only allowed to use a Customer’s personal data if it has any legal ground to do so. As part of the legal grounds to use personal data, the GDPR suggests the following:
1. The execution of a contract (for example, the booking of a Wine Experience), or;
2. The execution of a legal obligation (for example, the obligation to keep invoices), or;
3. When it represents a legitimate interest for Wine XP, or;
4. When the Customer or User has given his consent.
The “legitimate interest” of Wine XP should not go against the rights, freedoms or guarantees of Customers or Users. The GDPR gives examples of legitimate interests such as the prevention of fraud and direct marketing.
Wine XP collects and stores personal data provided by its Customers or Users with the following purposes:
1. Managing a Customer’s account, shopping cart, and orders. The processing of data is based on the execution of the contract between the Customer and Wine XP and furthermore represents a legitimate interest of the company.
2. Managing the payment transactions - Execution of the contract between the Customer and Wine XP.
3. Managing communications with the Customer or User through the following means: phone/e-mail/letter, regarding for example, refunds due to cancellations - corresponding to the execution of the contract between the Customer and Wine XP.
4. Measuring a Customer’s satisfaction (through the gathering of reviews regarding the wine experiences offered on Wine XP) - Legitimate interest of Wine XP in order to improve the quality of services.
5. Combat payment frauds when making bookings - Execution of the contract between the Customer and Wine XP and legitimate interest of the company.
6. Sending of segmented marketing communications by e-mail, mobile notifications (SMS), social media, other websites, or any other format - based on the Customer’s consent.
7. Measuring the volume of visits to the website and APP - based on the Customer’s consent.
8. Availability of social media sharing tools - based on the Customer’s consent.
9. Sharing of data with commercial partners (such as the wineries) - it can be done based on the execution of the contract between the Customer and Wine XP.
For any data processing that may require the Customer’s consent, it will be considered given if the Customer checks the privacy policy box, agreeing to its terms. The Customer/User can always withdraw their consent by making a request to the mailing address indicated above for the Headquarters of WDXPERIENCE LDA. Or to the e-mail: info@winexp.pt.
TO WHOM IS MY DATA MADE AVAILABLE TO?
Your data will be made available to Wine XP partners (wineries) and can be used and processed to assist them when providing and concluding your wine experience.
WHAT ARE MY RIGHTS REGARDING THE DATA?
In application of articles 14 to 22 of Regulation nº 2016/679 of 27 of April 2016 (GDPR), any individual using a service can exercise the following rights:
- Right to access;
- Right to rectification;
- Right to opposition and elimination of data;
- Right to opposition;
- Right to limit the processing on data;
- Right to the portability of data.
If Wine XP identifies any violation of a Customer’s personal data that might represent a breach of their rights, freedoms and guaranties, the Customer will be informed of the breach and all its details.
HOW CAN I EXERCISE MY RIGHTS?
The rights previously mentioned can be exercised by sending an e-mail to info@winexp.pt or registered letter to the company’s headquarters.
In the absence of a reply or an unsatisfactory reply, the Customer has the right to appeal to the data protection authority of their country of residence.
-In Portugal, the CNPD: https://www.cnpd.pt/index.asp
WILL I BE RECEIVING MARKETING COMMUNICATIONS?
Wine XP uses your personal data in order to send marketing communications by e-mail, mobile text, and on social media. The company pledges to respect the applicable rules of each communication channel.
HOW ARE COOKIES USED?
Cookies are short text files stored on your computer through your browser which contain information related to your preferences or behaviors, such as the pages you have visited, searches, clicks, date/time, and at times also including your personal data. Cookies can improve your experience as a user of this site and can facilitate your navigation on the site and at times help you fill in forms more quickly. Cookies do not damage your computer in any way.
You can at any time disable the cookies on your computer’s browser.
HOW LONG WILL MY DATA BE KEPT?
Your data will be processed and stored, to the extent necessary, in order to meet the applicable contractual and legal provisions and obligations. In this regard, it’s important to take into consideration the continuous duration of commercial relations between Wine XP and the Customer. Based on this premise, your data may be stored for the duration of contractual services, as well as the duration in which the data may be necessary to meet any legal obligations that the company may face. However, if a Customer’s account is inactive for a period of more than 4 (four) years, it will be deactivated and all associated data will be erased, unless a legal obligation implies storing the data for a longer period.
WHICH SECURITY MEASURES ARE BEING TAKEN IN ORDER TO PROTECT AND SAFEGUARD MY DATA?
As responsible for the processing of data, WDXPERIENCE, Lda., is responsible for the processing of your data, and will take all precautions to safeguard and preserve the security and confidentiality of your data, namely preventing loss, change, misuse, or access by unauthorised third parties. Nonetheless, the internet is a constantly changing environment, which can make it unfeasible for WDXPERIENCE LDA. to constantly maintain the same levels of security. For this reason, the company cannot ensure that through illegal and unauthorised means or through third party links, that third parties will not have access to data from the Wine XP website or APP. The company, WDXPERIENCE LDA, however implement all possible security and technical measures and precautions in order to ensure the protection your data from misuse or unauthorised access and to safeguard them as much as possible.
The company may alter its privacy policy at any given moment without previous notice. The current agreement is subject to Portuguese Law.
Any litigation arising from interpretation or execution of a purchase made on Wine XP will be submitted to the Comarca of Lisbon Tribunal/ Courts, with expressed waver of any other jurisdiction.
Date: 9 November, 2021