1. Data controller
The controller of personal data processed through this website is:
GERCEK OZKOK YAGCI
Trading name: PortreCoffee
NIF: 334131316
Address: Rua Capitão Mouzinho de Albuquerque 63, 2.º Dto. Frente, Fração C, 2400-194 Leiria, Portugal
Email: geral@portrecoffee.pt
2. Personal data processed
At present, the PortreCoffee website may process the following categories of personal data:
a) Newsletter:
- email address;
- information necessary to manage the subscription and evidence of confirmation/consent, including subscription status and confirmation events recorded by the service used.
The current newsletter form does not request a first name, last name or telephone number.
b) Voluntary communications:
When someone contacts PortreCoffee by email or WhatsApp, PortreCoffee may process the information voluntarily provided by that person, such as their name, contact details and the content of their message.
c) Technical data:
The website server and infrastructure services may process technical information necessary for the operation and security of the website, such as IP address, date and time of access, requested pages, browser type and similar technical information.
3. Purposes and legal bases
Newsletter:
The email address is used to send PortreCoffee news, updates, launch information, product information and event information. The legal basis is the data subject's consent. Consent may be withdrawn at any time.
Contact requests:
Information voluntarily submitted is used to respond to the person's request and, where applicable, to take pre-contractual steps requested by that person.
Website security and operation:
Strictly necessary technical data may be processed to protect the security, integrity, availability and proper operation of the website.
4. Newsletter and Brevo
PortreCoffee uses Brevo to manage newsletter subscriptions and email communications.
The current form collects only the email address as the required contact information.
The subscription uses a double opt-in confirmation process. After submitting the form, the user receives a confirmation message and the subscription is completed only after confirmation.
Brevo acts as a data-processing service provider for this purpose.
PortreCoffee does not sell its mailing list or sell personal data to third parties.
5. Data retention
Newsletter data is retained while the subscription remains active.
After unsubscribing, the email address is no longer used for marketing communications. Only the minimum information necessary to respect the opt-out and demonstrate the consent history may be retained where legally necessary.
Information received through contact requests is retained only for as long as necessary to respond to and follow up on the request, subject to any applicable legal obligations.
Technical data is retained only for the period necessary for security, operation and troubleshooting purposes, according to the configuration of the infrastructure used.
6. Recipients and service providers
Personal data may be processed by service providers strictly necessary for operating the website and newsletter, including:
- Brevo, for newsletter management and email communications;
- the website hosting and infrastructure provider.
These providers should process personal data only to the extent necessary to provide their respective services.
7. Data subject rights
Under applicable data-protection law, individuals may, where applicable, exercise the rights of:
- access;
- rectification;
- erasure;
- restriction of processing;
- objection;
- data portability;
- withdrawal of consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
Requests may be sent to: geral@portrecoffee.pt
Individuals also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
8. Newsletter unsubscribe
Every newsletter communication must provide a mechanism to unsubscribe. Subscribers must be able to unsubscribe at any time.
9. Changes to this policy
This Privacy Policy may be updated when the website begins offering sales, payments, deliveries, customer accounts or other functionality involving additional processing of personal data.