Privacy Policy
Introduction
Sociedade Agrícola Dois Marias, Lda. respects the right to privacy of users of the website www.doismarias.pt and undertakes to protect their personal data transparently, responsibly, and in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR), as well as other applicable national legislation.
This Privacy Policy explains how we collect, use, store, and protect the personal data of website users, the online store, and the services provided by Dois Marias.
By using this website, creating a customer account, placing an order, or subscribing to the newsletter, the user declares to have read and understood this Privacy Policy.
Data Controller
The data controller for personal data is:
Sociedade Agrícola Dois Marias, Lda.
NIPC: 510 418 686
Rua Coronel Andrade e Silva, n.º 9
7350-128 Elvas
Portugal
Email for data protection questions:
Website:
Personal Data Collected
Depending on the user's interaction with the website, the following personal data may be collected:
Identification
- Name
- Surname
Contact
- Email address
- Phone number
Addresses
- Billing address
- Delivery address
Tax Data
- Tax Identification Number (NIF), where applicable
Account Data
- Password (stored in encrypted form)
- Order history
- User preferences
Technical Data
- IP address
- Device type
- Browser used
- Operating system
- Language
- Date and time of access
- Cookies
- Statistical browsing data
Marketing Data
When the user provides consent:
- Communication preferences
- Newsletter opening history
- Click history
- Interactions with marketing campaigns
Purposes of Processing
Personal data may be processed for the following purposes:
Online Store Management
- Order processing
- Invoicing
- Product delivery
- Customer support
- Customer account management
Legal Basis:
Contract performance.
Contact with the User
Responding to requests submitted through website forms.
Legal Basis:
Pre-contractual measures or legitimate interest.
Dois Marias Club:
Sending newsletters with:
- News
- New wines
- Launches
- Events
- Campaigns
- Exclusive content
Legal Basis:
Consent.
Compliance with Legal Obligations
Including:
- Tax obligations
- Accounting obligations
- Legal obligations applicable to e-commerce.
Legal Basis:
Legal obligation.
Security
Fraud prevention.
Detection of abusive access.
Protection of IT systems.
Legal Basis:
Legitimate interest.
Statistics and Website Improvement
Analysis of website usage for continuous improvement of the user experience.
Legal Basis:
Consent, when legally required.
Data Retention
Personal data will only be retained for the period necessary for their respective purposes or for the legally imposed periods.
In general terms:
- Customer account data: as long as the account remains active;
- Data relating to orders and invoicing: for the applicable legal period;
- Newsletter data: until consent is withdrawn;
- Data collected via forms: for the period necessary to respond to the request or to follow up on the established relationship.
After the respective periods expire, the data will be deleted or anonymized, unless there is a legal basis for their retention.
Data Recipients
Personal data may be disclosed to third parties strictly necessary for the provision of services, including:
- Shopify
- SIBS
- PayPal
- Mailchimp
- Hosting service providers
- IT service providers
- Shipping companies
- Certified accountant
- Public authorities, when legally required
- Check if any entity is missing
These entities only process the data essential to the performance of their respective functions.
International Transfers
Some service providers may process personal data outside the European Economic Area.
Whenever this occurs, Sociedade Agrícola Dois Marias, Lda. will ensure that such transfers are carried out based on legally provided mechanisms, namely:
- European Commission adequacy decisions;
- Standard Contractual Clauses;
- Other appropriate safeguards provided in the GDPR.
Data Security
Sociedade Agrícola Dois Marias, Lda. adopts appropriate technical and organizational measures to protect personal data against:
- loss;
- destruction;
- unauthorized access;
- alteration;
- improper disclosure;
- unlawful use.
These measures include, where applicable:
- encrypted communications (SSL/TLS);
- access control;
- authentication;
- IT security systems;
- backups;
- access monitoring.
Only authorized employees and strictly necessary service providers have access to personal data, exclusively for the performance of their respective functions and to the extent indispensable for the provision of services.
Data Subject Rights
Under the GDPR, the data subject may exercise the following rights:
- Right of access;
- Right to rectification;
- Right to erasure;
- Right to restriction of processing;
- Right to object;
- Right to data portability;
- Right to withdraw consent;
- Right to lodge a complaint with the National Data Protection Commission (CNPD).
Exercise of Rights
Requests related to personal data may be sent to:
Sociedade Agrícola Dois Marias, Lda. will respond within the legally established deadlines.
Cookies
The use of cookies is regulated by the respective Cookie Policy, available on the website.
Changes to the Privacy Policy
Sociedade Agrícola Dois Marias, Lda. may update this Privacy Policy whenever necessary, particularly as a result of legislative, technological, or organizational changes.
The most recent version will always be available at www.doismarias.pt.
Contacts
Sociedade Agrícola Dois Marias, Lda.
Rua Coronel Andrade e Silva, n.º 9
7350-128 Elvas
Portugal
Last updated: June 2026.
