PRIVACY AND COOKIES POLICY – CARM – Casa Agrícola Roboredo Madeira S.A.

Who is responsible for processing your personal data?
CARM – Casa Agrícola Roboredo Madeira S.A., with registered office at ALMENDRA – Vila Nova de Foz Côa, 5150-021 Almendra, Portugal, NIPC 504571133 (“CARM”), is responsible for processing your personal data collected through all platforms and data obtained directly from customers, in stores and on websites managed by CARM.

In what situations do we collect your personal data?
Your personal data will be collected and processed by CARM in the following cases:
• If you contact us directly, namely through our website or any other service provided by us, for example if you are interested in our products and services and/or have any questions;
• If you purchase products or services directly;
• If you respond to one of our direct marketing campaigns, for example by filling in your details on one of our online platforms or homepage and expressly consenting to such processing.

What personal data may be collected?
• Contact data: name, address, telephone number and email address;
• Consumer preferences;
• Other personal data: information such as date of birth or other details provided;
• Website usage and communications: information on how you use the website and whether you opened or forwarded our messages, including data collected through cookies or other tracking technologies;
• Transaction or interaction data: information about the purchase of products or services, interaction with CARM customer support, among others.

For what purposes and on what legal basis can your personal data be used?
Data collected in the context of contract execution or service provision is processed for the performance of the purchase and sale contract or service agreement entered into with us, for compliance with legal obligations applicable to CARM, or for sending promotional communications, marketing, gifts or invitations.

If you give consent for further use of your data, it may be stored within the scope described in the respective consent declaration. For example, consent given for promotional purposes (product and service offers), customer profiling and/or market research (not related to the contract and/or service), and where necessary, transmission to specific contractual partners. You may withdraw your consent at any time with future effect.

Data transfer to third parties
Your data will not be transferred to third parties, except when necessary for compliance with legal or contractual obligations applicable to CARM.

How long do we keep your personal data?
In accordance with Article 17 of the GDPR, we only retain your data for the period strictly necessary for the respective purposes:
• Use for contract execution purposes: data may be kept for the duration of the contract and, depending on its nature, up to 10 years after termination, due to legal archiving obligations such as tax records and supporting documents relevant for tax purposes;
• Use for promotional communication and market research based on consent: data will be retained until consent is withdrawn.

Who may we share your personal data with and how do we keep it secure?
Your personal data may be accessed by our suppliers or service providers when necessary to comply with legal or contractual obligations.

Your rights as a data subject
You may review or withdraw your consent at any time with future effect. You will no longer be contacted or receive communications related to the purposes selected in your consent declaration after full withdrawal.

To withdraw consent provided to CARM, you may return to the main page where consent was given, fill in your personal data again, and submit a new consent form, selecting or deselecting the relevant options according to your preferences.

You may contact us to exercise your rights of access, rectification, erasure, restriction of processing, objection, non-subjection to automated decision-making (including profiling), data portability, and the right to lodge a complaint with the supervisory authority.

If you have any questions regarding our use of your personal data, you may contact us at: info@carm.pt.

If you are not satisfied with our use of your personal data or our response after exercising any of these rights, you have the right to lodge a complaint with the supervisory authority.

Guarantees and remarks
The data subject guarantees that the personal data provided to CARM is accurate and correct and undertakes to notify any changes. The data subject is solely responsible for any damages caused by incorrect, inaccurate or incomplete data.

The data subject is expressly informed that by disclosing personal data on CARM’s public platforms such as Facebook, Google and Instagram, such information may be seen and used by third parties.

CARM does not read any private communication published on customers’ own web pages.

COOKIES
When you visit our website, a small text file (cookie) is created and stored on your computer. This file allows recognition of your device, providing easier and faster access and personalisation of your online experience.

We also collect technical information about your computer when you visit our website, such as IP address, operating system, and browser type. This information is used to improve your browsing experience and is not shared with external entities.

Most browsers automatically accept cookies, but you may delete or block them at any time.

We use cookies for tracking website usage and understanding user behaviour, helping us improve our website and services.

Types of cookies used:

• Session cookies: stored only during your browsing session and deleted when you close the browser.

• Persistent cookies: stored on your device and remain after closing the browser. These may be read on future visits. We use persistent cookies from Google Analytics, Facebook and Mailchimp.

• Strictly necessary cookies: essential for website functionality and cannot be disabled.

• Performance cookies: help monitor and improve website performance.

• Functionality cookies: remember your preferences and settings.

• Personalisation cookies: enable personalised content and advertising based on browsing behaviour.

If you do not allow cookies, some website features may not function properly.

Changes to this policy
CARM reserves the right to amend this Privacy and Cookies Policy at any time. Any changes will be published on CARM’s websites.