The protection of your personal data is very important to LOBO DE VASCONCELLOS WINES.

In this Privacy Policy we show you how we collect and process the personal data of anyone who purchases our products through our Platform, as well as of who else accesses and browses our website. We also inform you of your rights as data subject.

We always guarantee strict compliance with personal data protection legislation, in particular with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 ("RGPD"), and with Law no. 58/2019, of August 8, which ensures the execution of the RGPD in Portugal.

The Controller

LOBO DE VASCONCELLOS WINES LDA., headquartered at Rua D. Afonso Henriques, 79-81, 2150-167 Golegã, and registered in the Commercial Registry under NIPC 515209929, is the entity responsible for the processing of your personal data (the Controller). Therefore, whenever throughout this Privacy Policy the terms 'LOBO DE VASCONCELLOS WINES', 'We' 'Our(o)' are used, these will be references to LOBO DE VASCONCELLOS WINES, LDA. When we refer to "you" or "your" we refer to you, the data subject.

If you have any questions about this Privacy Policy or about the way we handle your data, please contact us at the email address or call us at +351 266 095 487

Links to third-party websites

Our website may provide links to third party websites. The collection and processing of data that takes place on these websites is not our responsibility. As this Privacy Policy does not apply to the collection and processing of personal data carried out by these third parties, we encourage you to read the Privacy Policy of the website you visit whenever you leave the LOBO DE VASCONCELLOS WINES website.

The personal data we collect

Personal data is any information, of any nature and regardless of its support, relating to an identified or identifiable natural person.

A natural person who can be identified directly or indirectly is considered identifiable, namely by reference to a name, identification number, location data, electronic identifiers or to one or more specific elements of their physical, physiological, genetic, mental, economic, cultural or social identity.

We only collect data that we consider essential for navigating our website and for providing you with the goods you have requested, as well as for managing your orders, registering and billing your orders, ensuring that they are delivered to you and for giving you information about our promotions, news or other opportunities that we think are suitable for you. To see the purposes and legal basis for the processing of your data, please refer to the section (“FOR WHAT WE USE YOUR PERSONAL DATA”).

Specifically, we may collect:

Identification data: name, tax identification number (NIF), title, date of birth;

Contact details: delivery address, email address, telephone number;

Purchase and billing data: billing address, payment methods and amounts;

Connection and location data: IP address, device type and country through which you access our website;

Commercial data: purchases made, website registrations, communications made with us.

How we collect your personal data

We collect your personal data when you browse our website, when you order our products, when you subscribe to our newsletter, or when you contact us.

The personal data we collect can be processed by computer and in an automated or non-automated manner and we guarantee in all cases strict compliance with the legislation for the protection of personal data. The data are stored in specific databases created for the purpose and under no circumstances will the collected data be used for any purpose other than that for which they were collected.

For what purposes do we use your personal data

In the table below you can see the purposes for which we collect and process your personal data:


Type of data

Legal basis

Client registry 

Identification data and contact details

Performance of a contract to which the data subject is party

Orders management and delivery 

Identification data and contact details

Performance of a contract to which the data subject is party

Payment management

Identification data, purchasing and billing data

Performance of a contract to which the data subject is party;

processing is necessary for the purposes of the legitimate interests pursued by the controller

Management of customer relationship (contacts, notification of changes to our terms and conditions of sale)

Identification, contact details and commercial data

Performance of a contract to which the data subject is party;

Compliance with legal obligations;

Processing is necessary for the purposes of the legitimate interests pursued by the controller (for example, to understand how we can offer better services and products to our customers)

Ensure the full functioning of our website

Identification data, contact details and connection and geolocation data

Processing is necessary for the purposes of the legitimate interests pursued by the controller for example, to keep the online store up and running and safe)

Compliance with legal obligations

Sending newsletters and other marketing communications

Identification and contact data, connection and geolocation data and commercial data

Processing is necessary for the purposes of the legitimate interests pursued by the controller;

Performance of a contract to which the data subject is party

Data analysis to improve our website, our services and our customer relations

Connection and geolocation data and business data

Processing is necessary for the purposes of the legitimate interests pursued by the controller 

Communication of your personal data to third parties

We do not share your data with third parties.

However, in some cases, in order to be able to process your requests and deliver your orders, we will have to resort to service providers and intermediaries, such as transport companies or electronic payment processing companies which, for this, will have to have access to part of your personal data.

However, these communications are made solely and exclusively for the fulfilment of the purposes set forth herein and in accordance with our instructions, always complying with legal rules on personal data protection, information security and other applicable legislation.

We may also communicate your personal data to third parties when you have given your consent, or when:

  • the communication is made in compliance with a legal obligation or a court order; and
  • the communication is carried out for the purposes of a legitimate purpose provided for by law.

Depending on where you are, and if your order is placed in a country outside the European Economic Area, we may have to communicate your personal data to that country. In this case, we ensure strict compliance with legislation on data transfers to third countries, ensuring the level of data protection provided by European legislation.

How long do we keep your personal data

Your personal data will be kept only for the minimum period necessary to pursue the purposes which motivated its collection or further processing.

It may be necessary to keep them for a longer period if they are needed to handle complaints or if there is any dispute arising out of our relationship with you.

Your rights as the data subject

As a data subject, you have the right to access, rectify, update, limit and erase your personal data, the right to object to their use for commercial purposes and to withdraw the consents you have provided us, without affecting the lawfulness of processing based on consent before its withdrawal, as well as the right to their portability, under the law.

To exercise your rights please contact us in writing providing the reasons and justification for such exercise. As a security measure, and to prevent your data from being accessed by third parties, we may need to ask you for additional information to confirm your identity.

How to opt out for marketing communications

To unsubscribe from our marketing communications, simply select the “unsubscribe” option that we make available in every email we send you.

Our security measures

We implement technical and organizational measures that ensure the confidentiality of your personal data, protecting them from accidental or unlawful destruction, loss, alteration, disclosure or unauthorized access and also against other illegal data processing.

Any entity that we subcontract will be bound by equivalent security measures, acting permanently under our instructions.

Complaints to the CNPD

If you think that we have somehow violated your right to the protection of personal data, you can complain directly to the competent data protection authority which in Portugal is the National Data Protection Commission (CNPD).

Changes to this Privacy Policy

We may change this Privacy Policy at any time so we advise you to consult it from time to time.