Scope

All holders of personal data, as defined by the General Data Protection Regulation (GDPR).

​

Responsibilities

The Data Protection Officer is responsible for ensuring that this statement is available to all individuals before QUINTA DO COTA begins the process of collecting and processing personal data.

​

All QUINTA DO COTA employees who handle personal data are responsible for ensuring that this statement is an integral part of the organization’s daily operations, with special emphasis on security mechanisms and procedures related to data processing.

​

Privacy Statement

The QUINTA DO COTA website is owned by MMJ Sociedade Agrícola, Lda, headquartered at Courela da Casa Nova do Passa Figo, CCI 911, registered in the Sintra Commercial Registry under the tax ID PT 514745630, with a share capital of €180,000.

​

QUINTA DO COTA is the entity responsible for this Privacy Statement. This policy applies to all physical and digital channels, as well as other websites that reference it. Your privacy is a priority for us. This statement details the types of personal data that QUINTA DO COTA collects through our interactions with you and our services, and explains how that data is handled. We recommend that you read this statement carefully, as it provides further information about the services offered by QUINTA DO COTA.

​

This statement applies to QUINTA DO COTA’s interactions with you and to the services listed below, as well as to other products or services that reference this statement. QUINTA DO COTA is committed to respecting your privacy and processing your personal data carefully and confidentially, in accordance with applicable laws. Data will not be processed for any purpose other than those specified here.

​

QUINTA DO COTA reserves the right to update or modify its Privacy Policy at any time, especially to adapt to legislative changes. Therefore, it is advisable that users visit this page regularly.

​

By using this website, you consent to the collection and use of your information as described in this policy. QUINTA DO COTA reserves the right to modify, add, or remove any part of its privacy policy (on www.quintadocota.com and www.quintadocota.pt) at any time, updating the content of this page.

​

What types of data does QUINTA DO COTA collect?

QUINTA DO COTA collects personal data from its employees, clients, and business partners. Sensitive data, as defined by the GDPR, is not processed by QUINTA DO COTA.

​

Why does QUINTA DO COTA collect personal data?

For employees, collected data includes name, email, job title, and phone number, for the purpose of providing goods and services to clients, internal organizational processes (Quality), and for legal and tax obligations tied to job duties. For clients and partners, collected data includes name, email, and phone number, used for purchases, delivery, product/service supply, legally required documentation, commercial prospecting (direct marketing), marketing events, training, and technical product/service information.

​

Does QUINTA DO COTA use personal data for Direct Marketing?

QUINTA DO COTA may use your personal data to send you unsolicited messages related to products or offers that may interest you. QUINTA DO COTA does not sell, trade, or share your data. Clients expressly authorize QUINTA DO COTA to send information about products and services via direct marketing using personal data through email, phone, SMS, or automated calls. QUINTA DO COTA does not sell or share its customer database with third parties. Consent can be withdrawn by request via email to farmwine@quintadocota.com, or in person at QUINTA DO COTA facilities.

​

Who has access to your personal data?

QUINTA DO COTA does not disclose customer data to third parties without consent, except in specific situations—such as when employees, suppliers, or business partners need to provide a product/service or perform tasks on behalf of QUINTA DO COTA, or when required or permitted by law.

​

QUINTA DO COTA will take necessary precautions to ensure that employees and partners with access to personal data are properly trained and comply with this policy and legal data protection obligations.

​

In cases of non-compliance, disciplinary measures will be applied. When user data is shared, QUINTA DO COTA will ensure GDPR compliance, including contractual provisions to ensure third parties use the data only for specified purposes (where there is a legal basis).

​

Otherwise, data will only be provided with the user's express consent. Disposal will follow the purposes described in this policy, using appropriate security measures to protect data against unauthorized processing, accidental loss, destruction, or other harmful actions.

​

Where is your personal data stored, and for how long?

QUINTA DO COTA processes personal data for the purposes mentioned above, based on applicable legal grounds. The duration of this processing is recorded and, in some cases, data may be retained longer if there is a legal basis or retention policy in effect. Users may request clarification via mmj.agricola@gmail.com or directly at QUINTA DO COTA premises.

​

Is your personal data safe with QUINTA DO COTA?

QUINTA DO COTA stores customer and user data internally and through trusted partners. All data is protected and maintained in compliance with high security standards and GDPR.

​

What about links on the QUINTA DO COTA website?

The QUINTA DO COTA website may contain links to other websites and email addresses of companies not affiliated with Grupo Cota. This Privacy Policy does not apply to those websites. If you provide personal data through a linked site, its privacy policy will apply.

​

You may be contacted by QUINTA DO COTA due to your personal data.

Under the GDPR, your data is subject to strict risk minimization measures to protect your rights and freedoms, especially against unauthorized access. In the event of a privacy breach, you will be notified in accordance with QUINTA DO COTA’s Personal Data Breach Procedure.

​

What are your rights regarding your personal data?

Under the GDPR, you have several rights regarding your personal data, including:

• Right of Access: You may request information on the data QUINTA DO COTA holds about you.

• Right to Rectification: You may request corrections to inaccurate or incomplete data.

• Right to Erasure: You may request the deletion of your data, unless there is a legal basis for retention.

• Right to Restriction: You may request the restriction of processing under certain circumstances.

• Right to Object: You may object to the processing of your data for direct marketing or other legitimate reasons.

• Right to Data Portability: You may request that your data be transferred to another data controller.

​

To exercise any of these rights, please contact QUINTA DO COTA via mmj.agricola@gmail.com or directly at their facilities.

​

Procedure in the event of a data breach

If a personal data breach poses a risk to your rights and freedoms, QUINTA DO COTA will notify the relevant authorities and affected individuals, as required by GDPR. Measures will be taken to mitigate the breach and prevent future incidents.

​

International Data Transfers

QUINTA DO COTA does not transfer personal data outside the European Union, except when necessary to provide services or as required by law.

​

Changes to this Privacy Policy

QUINTA DO COTA may update this Privacy Policy at any time. Changes will be posted on this page and, when appropriate, communicated via email or other means. We recommend that users regularly check this page to stay informed about how their data is protected.

​

Dispute Resolution and ODR

If you have a problem or dispute regarding cookies or services provided by our website, you may use the European Union's Online Dispute Resolution (ODR) platform for a fast and simple resolution.

To access the ODR platform, please visit the following website: European Online Dispute Resolution Platform.