Privacy Policy

Who are we

Sovina, Lda. (“Sovina”) is a commercial company based at Rua Manuel Pinto de Azevedo, no. 65, Armazém 4 e 5, 4100-321 Porto, Portugal, registered in the competent Commercial Registry Office under the sole registration number and legal person 508979951, which has as its social object the manufacture and marketing of beer, and also the commercialization of brewing equipment.

Esporão, S.A. (“Esporão”) is a commercial enterprise based at Herdade do Esporão, 7200-229, Reguengos de Monsaraz, Portugal, registered at the competent Commercial Registry Office under the sole registration number and legal person 500116377.

The Personal Data Protection Act (hereinafter “LPDP”) and the General Data Protection Regulation (Regulation (EU) 2016/679 of the European Parliament and the Council of 27 April 2016, onwards “GDPR”) ensure the protection of natural persons with regard to the processing of personal data and the free movement of such data.

This privacy and data protection policy (“Privacy Policy”) concerns the processing of personal data performed by Sovina and collected through the website:

• www.sovina.pt

and the processing of personal data collected through the website:

• www.cervejartesanal.com.

From now on, both websites together referred to as “Platform”:

Both Sovina and ESPORÃO are committed to protecting the personal data (“Personal Data”) of their customers and users, hereinafter referred to as “Users” or individually as “User”, made available on the Platform, adopting a policy subject to high privacy standards and which is strict in maintaining the confidentiality, loyalty and integrity of personal data.

In this context, they have developed the Privacy Policy, which aims, inter alia, to make known to its Users the situations in which they process Personal Data, namely how and why they are collected, to whom they disclose, how they protect their privacy when they visit or use the services made available on the Platform, as well as their rights in relation to the processing of Personal Data performed.

The collection and processing of Personal Data made by Sovina and ESPORÃO comply with the provisions of the legislation for the protection of personal data in force, in particular with the GDPR and LPDP.

What is Personal Data?

Personal Data means any information of any nature and regardless of its support, including sound and image, relating to an identified or identifiable natural person. A person who can be identified directly or indirectly, in particular by reference to an identification number or other specific elements of his physical, physiological, psychological, economic, cultural or social identity, shall be considered identifiable.

Other important settings:

Supervisory Authority – an independent public authority established by a Member State of the European Union, with responsibility for monitoring the application of the GDPR, in order to defend the fundamental rights and freedoms of natural persons in relation to processing and facilitating the free movement of data within the European Union. In Portugal, the supervisory authority is the National Data Protection Commission (“CNPD”).

Consent – expression of will, free, specific, informed and explicit, by which the data subject accepts, by means of an unequivocal positive statement or act, that the Personal Data concerning him is processed for a certain purpose.

Data protection officer (“DPO”) – a person or entity appointed to ensure, in an organization, the conformity of the processing of personal data with the GDPR, ensuring efficient communication with the holders of personal data and cooperation with the supervisory authorities concerned.

Controller – Natural or legal person, public authority, agency or other body that, individually or in conjunction with others, determines the purposes and means of processing Personal Data.

LPDP – Law No. 58/2019 of 8 August, the safe implementation, in the national legal order, of Regulation (EU) 2016/679 of Parliament and the Council of 27 April 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data

GDPR – General Data Protection Regulation (EU) of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data.

Processor – natural or legal person, public authority, agency or other body that processes personal data on behest sovina as controller.

Personal Data Holder – identified or identifiable natural person to whom the Personal Data collected on the Platform relates, i.e. the Users of the Platform.

Processing(s) – operation or set of operations carried out on personal data or on sets of personal data, by automated or non-automated means, such as collection, registration, organization, structuring, retention, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination, or any other form of making available, comparison or interconnection, limitation, payment, or destruction.

Third party – natural or legal person, public authority, service or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

Who is the Controller of Personal Data?

Sovina is the Controller of your Personal Data collected through the website www.sovina.pt;

ESPORÃO is the Controller of your Personal Data collected through the website www.cervejartesanal.com.

Both, as responsible for the processing, reserve the right to subcontract other entities to carry out this Treatment on their behalf and on their behalf.

It is reported that Sovina and ESPORÃO are not obliged to appoint a Data Protection Officer under the GDPR.

What types of Personal Data are collected, what are the purposes and their legal grounds?

Under the GDPR and LPDP, the collection of Personal Data can only be made if there is a legal basis for its Processing.

Accordingly, Sovina only processes the following categories of Personal Data, collected through the website (www.sovina.pt), as well as for the purposes, and with the grounds of legitimacy, identified below:

Data Category	Purpose	Legitimacy
Identification data: name and email contact and information required for registration for a given event.	When you register for a particular event/workshop/competition or when you request information through the various channels (email, telephone and platform) about events/workshops.	Sovina’s legitimate interest in responding to the demonstration of will in the sharing of a particular event/workshop/competition and/or obtaining information about it and/or pre-contractual due diligence for registration in certain events/workshops/hobbies.
Contact details (email), Identification data (name) and information regarding the request for information or about the complaint made.	Making a complaint or preparation of requests for information(e.g., about a product, about the status of the order, etc.).	Sovina’s legitimate interest in responding to complaints made.
Contact details (email).	Subscription to newsletters and other information materials.	Consent*
Contact details (email).	Sending commercial information (direct marketing), namely about promotions in Sovina’s products and services, as well as commercial proposals.	Consent*
Identification data: gender; name; identification document; number of taxpayers. Contact details: email address; phone/mobile phone; fax; address; Demographics: nationality.	Respond to requests for information in legal proceedings or requests from administrative authorities or other third parties to detect and prevent fraud.	Legal obligations
Identification data: gender; name; identification document; number of taxpayers. Data regarding your tastes and preferences of the products and services provided by Sovina.	Satisfaction surveys	Sovina’s legitimate interest in obtaining the consumer’s perspective on its products and better power the quality of them.

On the other hand, ESPORÃO only processes the following categories of Personal Data collected through the website (www.cervejartesanal.com),as well as for the purposes, and with the grounds of legitimacy, identified below:

Identification data: gender; name; identification document; number of taxpayers. Contact details: email address; phone/mobile phone; fax; Address. Demographic data: nationality; Online interaction data: password.	Registration and login to the website to order products and/or to obtain information about the online store.	Legitimate interest of ESPORÃO in providing information about the products and/or pre-contractual steps in the case of an order request.
Data relating to the order(s) placed on a given product(s/service(s): Bank details, name; identification document; number of taxpayers. Contact details: email address; phone/mobile phone; fax; Address. Demographics: nationality. Online interaction data: password (encrypted information that allows the system to recognize the User’s password).	Product/service order request on the website.	Pre-contractual due diligence
Online interaction data: password and email and data related to product acquisition.	Improvements in the products and services of ESPORÃO.	Legitimate interest of ESPORÃO in keeping the created accounts secure.
Identification data: gender; name; identification document; number of taxpayers. Contact details: email address; phone/mobile phone; fax; address; Demographics: nationality.

* The collection form has a field for the User to expressly indicate his/her Consent. If the User chooses to provide his/her Personal Data for such purposes, the Consent provided may be withdrawn at any time, without jeopardizing the processing previously performed.

Data automatically collected by the Platform:

Browsing the Platform involves only the collection of the internet protocol address (“IP”).

The domain server for the Platform records and stores the information that is normally recorded by definition by the server, that is, the IP by which the User had access to the Internet, the date and duration of access to the Platform, the internet address of the website that brought him directly to the Platform and the indication that the User was or did not indicate that he was of the age necessary to consume alcoholic beverages.

This information will be used to measure the number of visits to the different areas of the Platform, to determine whether Users are of legal age to consume alcoholic beverages and to help make it more useful to Users. For more information, go to Sovina’s Cookie Policy here.

Under what circumstances do we communicate Users’ Personal Data?

Sovina and ESPORÃO use other entities for the provision of certain services. If this provision of services may imply access by these entities to users’ personal data. This will be the case for suppliers or service providers of Sovina or ESPORÃO (e.g., entities providing support services such as consulting professionals).

In such cases, Sovina and ESPORÃO ensure through contracts and clauses for Personal Data Processing that any Subcontracting entity that processes the Personal Data on behalf of and on its behalf offers guarantees for the execution of appropriate technical and organizational measures, so that the Processing meets the requirements required by the GDPR and LPDP or other law applicable to the matter, ensuring the confidentiality and security of the data, including compliance with the rights of the Personal Data Subjects.

Sovina and ESPORÃO may also transmit Users’ Personal Data to third parties, where they deem such communications of data as necessary or appropriate (i) in the light of applicable law, (ii) in compliance with legal obligations/court orders, (iii) to respond to requests from public or governmental authorities and other administrative authorities, (iv) when it appears necessary to comply with a legal, regulatory or other obligation, as well as (v) ensure the security of Personal Data Subjects, or otherwise prevent fraudulent conduct.

As a rule, User Personal Data is not transferred to third countries (outside the European Union) and is kept on servers located within the European Union. However, where Subcontractors transfer data to third countries, Sovina and ESPORÃO will implement the necessary and appropriate measures in the light of applicable law to ensure the protection of personal data subject to such transfer, strictly complying with the legal provisions of the GDPR and LPDP or other applicable legislation relating to such transfers.

What is the retention period of Personal Data?

The period of time during which personal data is stored and stored varies according to the purpose for which it is used, the rule being the retention of them only for the period necessary for each purpose. There are, however, legal obligations(e.g., tax) that may require the retention of Personal Data for a longer period of time and, in this case, the data will be kept only for the period necessary to comply with the legal obligation imposed.

The Personal Data collected are processed in strict compliance with applicable legislation, being stored in specific databases, created for this purpose. Such data are stored in a format that allows the identification of the Personal Data Holders.

If the Processing is based on consent, Sovina retains your Personal Data in accordance with the Consent given and/or until such Consent is revoked.

What are your rights as a Personal Data Subject?

Sovina and ESPORÃO guarantee users, as Personal Data Subjects and at any time, the right of access, rectification, the tualization, limitation and payment of their Personal Data, the right to object and the withdrawal of consent, without compromising the lawfulness of the processing carried out under this Consent, as well as the right to the portability of the data:

Right of access: Whenever the User requests, you can obtain confirmation about the Processing carried out by Sovina and by ESPORÃO to your Personal Data, namely obtain the following information:

reasons why Personal Data is processed;

types of Personal Data that are processed;

entities to whom Sovina and ESPORÃO may transmit personal data;

retention period of personal data or, if this is not possible, the criteria for setting that period;

rights it enjoys in relation to the Processing of Personal Data.

Right of rectification: Whenever the User considers that the Personal Data (Objective Personal Data that has been provided by you) is incomplete or incorrect, it may request its rectification, or that it is completed.
Right to erasure: You may request that Personal Data be deleted when one of the following occurs:

Personal Data is no longer necessary for the purpose that motivated its collection or processing;

when the Consent on which the Processing is based is withdrawn and there is no other legal basis for it;

where opposition to the Processing is lodged and there are no prevailing legitimate interests justifying such Processing;

when personal data has been unlawfully processed; And

personal data must be erased under a legal obligation to

The right to the payment does not apply where the Treatment is necessary for the following purposes:

exercise of freedom of expression and information;

compliance with a legal obligation that requires the Processing;

purposes of public interest archive, scientific or historical research purposes or statistical purposes, to the extent that the exercise of the right to erasure seriously impairs the achievement of the objectives of such Processing;

declaration, exercise or defense of a right in judicial proceedings.

Right to limitation of Processing: The limitation of the Processing allows the User to request the Controller to restrict access to certain Personal Data, or to suspend certain activities of the same. Specifically, the User may request the limitation of the Processing of Personal Data in the following cases:

if you dispute the accuracy of the Personal Data for a period of time that allows Sovina to verify that accuracy;

if Sovina and ESPORÃO no longer need personal data for a certain processing purpose;

if you have objected to the processing, unless it is found that the legitimate interests of Sovina and ESPORÃO prevail over those of the User.

Right to portability: The User may request the receipt of the Personal Data that he has provided, in a structured format, of current use and automatic reading. You also have the right to request that they be transmitted to another Controller, provided that this is technically possible. The right to portability applies to the following cases:

where the Processing is based on express consent or the performance of a contract; And

when the treatment in question is carried out by automated means.

Right of opposition: The User has the right to opposed the Treatment in the following situations:

where the Processing is based on the legitimate interest of the Controller;

when the processing is carried out for purposes other than those for which the data were collected, but which are compatible with them;

treatment is done for direct marketing purposes.

In such cases, Sovina and ESPORÃO cease to process personal data unless they have legitimate reasons to perform such Processing, and these prevail over the interests of users.

Right to withdraw the Consent provided: In cases where the Treatment is based on legitimacy the Consent, the User may withdraw it at any time.
Right to lodge complaints with the Supervisory Authority : If the User wishes to lodge any complaints regarding matters relating to the Processing of Personal Data, he/she may do so with the National Data Protection Commission, the competent Supervisory Authority in Portugal.

For more information, you should access www.cnpd.pt.

How can you exercise your rights as a Personal Data Subject?

To deal with matters related to the protection of Personal Data of the www.sovina.pt website, you should contact Sovina through one of the following ways:

E – mail to the following address: geral.sovina@esporao.com.

Letter addressed to Sovina to the following address: Av. 44, 1400-315 Lisboa, or contact us by phone: +351 213 031 540.

To deal with matters related to the protection of Personal Data of the website www.cervejartesanal.com,you should contact ESPORÃO through one of the following ways:

E – mail to the following address: geral.sovina@esporao.com.

Letter addressed to ESPORÃO to the following address: Herdade do Esporão 7200-229 Reguengos de Monsaraz, or contact by phone: +351 213 031 540.

What are the measures taken by Sovina and ESPORÃO to ensure the security of Users’ Personal Data?

Sovina and ESPORÃO commit to guarantee the protection of the security of personal data that is made available on the Platform. Demonstrating the great concern and commitment that Sovina and ESPORÃO reveal in the defense of privacy issues, several security measures of a technical and organizational nature have been adopted in order to protect the Personal Data that is made available on the Platform against its dissemination, loss, misuse, alteration, treatment or unauthorized access, as well as against any other form of unlawful processing.

All data is processed over a secure connection (128-bit SSL) that encrypts/encrypts it. The user will be able to check the security level in their browser by presenting the symbol of a lock representing a secure connection (https).

Notwithstanding the security measures adopted by Sovina and ESPORÃO, Users browsing the Platform should take additional security measures, including ensuring that they use an updated browser in terms of properly configured security patches (e.g., active firewall, antivirus and antispyware). Finally, users must ensure that the platforms they visit on the Internet are authentic and should avoid websites whose reputation is not trusted by the.

Personal data are treated with the level of protection legally required to ensure their security, taking into account the current state of the technology, being the user aware and accepting that internet security measures are not impregnable.

Changes to the Privacy Policy

It is the policy of Sovina and ESPORÃO to comply with the legal, and regulatory provisions governing the privacy and protection of Personal Data in all countries where it develops its activity, without exception, so that, whenever necessary, the right to adjust the Privacy Policy in accordance with the legal requirements imposed, as well as to update it in accordance with changes made in the Processing of Users’ Personal Data, are reserves.

In this way, Sovina and ESPORÃO will publish on the Platform the information related to the changes made to the Privacy Policy.

This Privacy Policy entered into force on January 1, 2021 and is updated in accordance with the GDPR and LPDP and other applicable legislation.

Cookie Policy

Sovina and Esporão use ‘Cookies’ on their websites to improve their user experience.

What are ‘Cookies’?

‘Cookies’ are data files that a website sends to your computer while you are visiting that same site. These data files include information that allows you to memorize important data that will make your browsing more efficient and useful. This website uses ‘Cookies’ for various purposes, namely to obtain non-personal data from online visitors, check which content interests users the most, the time each user spends on the site, the time it takes to upload the content, among others

To install certain ‘Cookies’ on your device we need your prior consent, which is why there is a warning about this when you browse the Esporão websites. This notice states that Esporão will assume that you accept the installation of ‘Cookies’ unless you tell us otherwise.

How are cookies used?

Visitors to this website use various computers and web browsers. To make your visits as simple as possible, a record of the type of browser (e.g. Internet Explorer, Google Chrome, Mozilla Firefox) and the operating system (e.g. Windows, Apple, Android) is automatically saved and the domain name of your Internet service provider.

The platform on each visit records one or more ‘Cookies’ on the visitor’s computer, which are used to account for and personalize the visit. These Cookies do not save or collect personal information. The recording of cookies on the computer can always be controlled through the visitor’s browser.

The refusal of ‘Cookies’ may result in the inability to access some areas of the site and the content will not be adapted to the user’s preferences.

What kind of ‘Cookies’ do we use?

Esporão uses the following types of Cookies on its websites:

There are two categories of Cookies:

a) the sessions: temporary cookies that remain in your browser’s cookie file and that are automatically deleted when the user closes your browser;

b) the permanent s: cookies that remain stored at the browser level on the user’s equipment and that are used whenever you make a new visit to our platform, allowing us to provide a more personalized service.

The types of cookies that are in use in the platform are as follows:

Cookie Type	Purpose
Strictly necessary	Enable site navigation and use of your applications, such as access to secure areas of the site and cannot be turned off. Typically, they are configured in response to actions performed by the user that correspond to a service request, such as setting privacy preferences, logging in, or filling out forms. You can configure your browser to block or alert you about these cookies, but in this case, some parts of the site may not work. These cookies do not store any personally identifiable information. Click here for a list of cookies in use.
Performance	Used to analyze how users use the site and to monitor their performance, for example, to identify which pages are with the most views, to identify the most effective method of linking between pages, or to determine the rate of error messages on certain pages. All information collected by these cookies is aggregated and therefore anonymous. If you do not allow these cookies, we will not know when you have visited the site and will not be able to monitor your performance. Click here for a list of cookies in use.
Functionality	Stores user preferences for a specific site so that the site does not need to be reconfigured on each visit. These cookies may be set by us or by external service providers whose services we add to our pages. If you do not allow these cookies, some or all of these services may not work correctly. Click here for a list of cookies in use.
From Third Parties	They measure the success of applications and the effectiveness of third-party advertising. They can be used by these entities to create a profile of their interests and show relevant ads on other sites. These cookies do not directly store personal information, but are based on uniquely identifying your browser and internet device. If you do not allow these cookies, you will not enjoy targeted advertising. Click here for a list of cookies in use.

This listing may be updated according to changes implemented by Sovina and ESPORÃO.

Functionality Cookies are installed until the user clears cookies from their browser.

Cookies and social media plug-ins (social buttons)
These social cookies are intended to allow users to share pages and content through third-party social networks.

Our site also uses plug-ins or social buttons.

Social plug-ins make it easy to share pages and website content on various social platforms. For example, they allow you to share information from our site with your friends on social networks.

To this end, plug-ins use session cookies to verify the user with these platforms, thus validating whether or not they are connected to the social network during browsing.

For more information on the use of personal data in relation to social networks, the privacy policies of the social networks of the third parties concerned can be consulted.

What if the user does not want to accept cookies?

If you do not wish to accept cookies, you can configure your computer at any time to be notified whenever a Cookie is being sent or disable and block all Cookies through your browser.

You should check your browser’s “help” menu to find out how best to change or update your Cookies.

For more information about Cookies and how to prevent them from being installed or how to delete existing Cookies from your hard drive, you may visit the following website: http://www.allaboutcookies.org.

Google Analytics browser opt-out:

To provide visitors with more choice about how their data is collected by Google Analytics, Google has developed the Google Analytics Browser Opt-out Add-on. The add-on communicates with Google Analytics JavaScript (ga.js) to indicate that information about your website visit should not be sent to Google Analytics. The Google Analytics Opt-out Browser extra does not prevent information from being sent to the website itself or to other web analytics services. Learn more about Google Analytics Opt-out Extra Brower.

Links to other platforms

The Platform contains links to third-party platforms. These links are provided solely for your convenience. Sovina and ESPORÃO do not support or be responsible for any of these third-party platforms and will not be responsible for the content contained therein. Your access to any of these third-party platforms is your sole responsibility.