Privacy Policy
This Privacy Policy describes how WINE-TIME EUROPE LDA collects, uses, shares and protects the personal data of visitors and customers of the website https://www.wine-time.biz, in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016 (General Data Protection Regulation — GDPR), and with Portuguese Law No. 58/2019, of 8 August, which ensures the implementation, in the national legal order, of the GDPR.
1. Data Controller
The Data Controller for your personal data is:
WINE-TIME EUROPE LDA
Tax ID: PT 507 842 219
Registered office: Rua das Fisgas 442 - Parque Cascais Stock - Armazém 6
2645-117 Alcabideche, Portugal
Phone: +351 21 362 46 06
Email: info@wine-time.biz
For matters relating to the protection of your personal data, you may contact us via the email indicated above.
2. Personal Data Collected
2.1. Data collected automatically (Device Information)
When you visit our website, we automatically collect certain information about your device, namely:
- Browser type and version
- Operating system
- IP address
- Time zone
- Pages visited and time spent
- Referring sites and search keywords
- Cookies installed on your device
2.2. Data collected when you place an order (Order Information)
When you make or attempt to make a purchase through the website, we collect:
- First name and surnames
- Billing and delivery address
- Tax identification number (when applicable)
- Email address
- Phone number
- Payment information (processed exclusively by payment service providers)
Important note: Complete credit/debit card data is never stored on our servers. This data is processed directly by authorized and supervised payment service providers (Stripe, PayPal, Ifthenpay), in a secure environment and in compliance with the PCI-DSS standard.
3. Purposes and Legal Bases of Processing
We process your personal data for the following purposes, with the following legal bases:
| Purpose | Legal Basis (art. 6 GDPR) |
|---|---|
| Processing and fulfilment of orders (shipping, invoicing, payment management) | Performance of contract — art. 6(1)(b) |
| Compliance with legal obligations (tax, accounting, anti-money laundering prevention) | Legal obligation — art. 6(1)(c) |
| Fraud risk analysis and transaction security | Legitimate interests — art. 6(1)(f) |
| Marketing communications, newsletters and commercial offers | Consent — art. 6(1)(a) |
| Website improvement, statistical analysis and user experience optimization | Legitimate interests — art. 6(1)(f) |
| Response to information requests and customer support | Performance of contract or legitimate interests |
4. Sharing of Personal Data
WINE-TIME EUROPE LDA shares your personal data only with third parties indispensable for the provision of the contracted services, namely:
- Payment service providers: Stripe (Stripe Technology Europe Limited / Stripe Payments Europe Limited), PayPal, Ifthenpay Lda. (authorized by the Bank of Portugal under registration no. 8707)
- Carriers: CTT Expresso, DHL, TNT, FedEx (for the delivery of orders)
- E-commerce platform: Jumpseller (website hosting)
- Analytics services: Google Analytics, Meta (Facebook Pixel)
- Competent public authorities: when required by law, judicial decision or formal request from authorities
All subcontractors are obliged, by contract or by law, to comply with the GDPR obligations and to ensure an adequate level of protection of personal data.
International data transfers
Some of our subcontractors are based outside the European Economic Area (notably in the United States). In such cases, the data transfer is carried out on the basis of adequate guarantees provided for in the GDPR, namely standard contractual clauses approved by the European Commission or adequacy decisions (Data Privacy Framework for the USA).
5. Data Retention
Your personal data is retained only for the period necessary for the purposes for which it was collected, or to comply with legal obligations:
- Order and invoicing data: 10 years (by fiscal and accounting imposition — Portuguese General Tax Law)
- Marketing data: until the data subject withdraws consent
- Navigation data (cookies): variable depending on the type of cookie (see Cookie Policy)
- Customer communications: up to 5 years after the last interaction
6. Rights of the Data Subject
Under articles 15 to 22 of the GDPR, you are entitled to the right to:
- Access: obtain confirmation as to whether your personal data is being processed and, if so, access it
- Rectification: request the correction of inaccurate or incomplete data
- Erasure ("right to be forgotten"): request the deletion of your data under the conditions provided for in the GDPR
- Restriction of processing: request the temporary suspension of processing
- Portability: receive your data in a structured, commonly used and machine-readable format
- Objection: object to the processing of your data, in particular for direct marketing purposes
- Withdraw consent: at any time, without compromising the lawfulness of processing carried out on the basis of consent previously given
- Not to be subject to automated decisions that produce significant effects on your legal situation
To exercise any of these rights, contact us by email at info@wine-time.biz, identifying yourself clearly. We will respond within a maximum period of 30 days.
7. Right to Lodge a Complaint with the Supervisory Authority
If you consider that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
Portuguese National Data Protection Commission (CNPD)
Av. D. Carlos I, 134 - 1st
1200-651 Lisbon, Portugal
Phone: +351 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt
8. Data Security
WINE-TIME EUROPE LDA adopts appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, alteration or improper disclosure, namely:
- SSL/TLS encryption in all communications with the website
- Restricted access to personal data only by authorized employees
- Fraud detection and prevention systems (Stripe Radar and equivalents)
- Regular backups
- No storage of complete payment card data
9. Cookies
We use cookies on the website to ensure its correct operation, improve user experience and analyze browsing. You can manage your cookie preferences through the configuration panel presented on first access to the site, or in your browser settings.
10. Minors
This website is intended exclusively for persons aged 18 or over, in compliance with Portuguese legislation regarding the sale of alcoholic beverages. We do not intentionally collect personal data of minors. If you become aware that a minor has provided us with personal data, please contact us so that we can proceed with its deletion.
11. Changes to the Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in our practices or in applicable legislation. The version in force will always be published on our website with the indication of the date of the last update.
Last update: May 2026