Privacy Policy

The controller responsible for data processing on this website is:

Quinta da Bravura, Lda
Rua Francisco Xavier Ataíde de Oliveira, Lote 33, Loja F
8600-775 Lagos, Portugal
Email: sales@terracosdaluz.com

We have not appointed a data protection officer. For questions regarding data protection, you can reach us at the address stated above.

This website is hosted by checkdomain GmbH, Große Burgstraße 27/29, 23552 Lübeck, Germany. When you visit the website, your browser automatically transmits information to the server, which is stored temporarily in server log files: IP address, date and time of access, page visited, amount of data transferred, referrer URL, and browser and operating-system type. Log files are kept only as long as necessary for security and troubleshooting and are then deleted automatically.

The legal basis is our legitimate interest in the secure and stable operation of the website (Art. 6 (1) (f) GDPR). A data processing agreement (Art. 28 GDPR) is in place with the hosting provider. Processing takes place in Germany.

To secure the website and deliver it faster we use the network of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. All requests to the website pass through Cloudflare servers; technical connection data (including IP address, requested URL, time and browser information) is processed to fend off attacks and cache content.

The legal basis is our legitimate interest in a secure, high-performance website (Art. 6 (1) (f) GDPR). A data processing agreement is in place with Cloudflare; transfers to the USA are based on the EU-US Data Privacy Framework and the EU Standard Contractual Clauses.

Strictly necessary (no consent required): your age confirmation and your privacy choice are stored only locally in your browser (localStorage). No personal data (in particular no date of birth) is collected or transmitted to us. Legal basis: § 25 (2) no. 2 TDDDG and Art. 6 (1) (f) GDPR.

Only with consent: statistics services (see section 5) are loaded only after you have agreed in the consent banner (§ 25 (1) TDDDG, Art. 6 (1) (a) GDPR). You can withdraw or change your consent at any time with effect for the future via the “Cookie settings” link in the footer of every page.

If you have given your consent, we use Google Analytics 4 provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Google Analytics uses cookies (_ga, _ga_*) to analyse how the website is used (e.g. pages viewed, time on site, approximate location, device type). IP addresses are truncated within the EU; Google signals and advertising features are disabled. Data is deleted after 14 months.

Data may be transferred to Google LLC in the USA, which is certified under the EU-US Data Privacy Framework. A data processing agreement is in place with Google. The legal basis is your consent (Art. 6 (1) (a) GDPR, § 25 (1) TDDDG). More information: policies.google.com/privacy.

If you contact us by email, we process the data you provide (in particular your name, email address and message) in order to handle your enquiry and get in touch with you.

The legal basis is Art. 6 (1) (b) GDPR (pre-contractual measures or performance of a contract) and our legitimate interest in answering your enquiry (Art. 6 (1) (f) GDPR). The data is deleted as soon as it is no longer required and no statutory retention obligations apply.

Your data is only passed on insofar as this is necessary for the performance of the contract (e.g. to shipping service providers) or we are legally obliged to do so. Service providers engaged (in particular our hosting provider) process data exclusively on our instructions on the basis of data processing agreements.

Under the GDPR you have the following rights:

Access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) as well as objection to processing (Art. 21). You may revoke any consent given at any time with effect for the future.

To exercise your rights, a message to the contact details stated above is sufficient.

You have the right to lodge a complaint with a data protection supervisory authority. The competent supervisory authority of the controller is the Portuguese data protection authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal
www.cnpd.pt

Notwithstanding the above, you may also contact the supervisory authority responsible for your place of residence.

This privacy policy will be amended as soon as changes to data processing make this necessary.