This policy describes the approach we take in protecting the personal data we process, providing data subjects (Website Users, Clients, Suppliers, and Candidates), whenever they are individuals, with information regarding the processing of their personal data, their rights concerning that data, and how they can exercise those rights, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council – General Data Protection Regulation (“GDPR”) and other applicable data protection and privacy legislation.
This policy may be supplemented with information about the processing of personal data carried out in the context of supplying products, offering services, or organising specific events and activities.
Index
Will act as Data Controller any of the entities listed below, depending on the relationship you have with us and which, for the purposes of this policy and acting as such, will be indistinctly referred to as “TFP“:
’Personal data‘ means any information relating to an identified or identifiable natural person (‘data subject’).
www.fladgatepartnership.com, managed by The Fladgate Partnership – Vinhos, S.A;
www.climatechange-porto.com, managed by The Fladgate Partnership – Vinhos, S.A;
www.the-yeatman-hotel.com, managed by The Yeatman Hotel, Lda.;
www.vintagehousehotel.com, managed by The Vintage House Hotel, S.A.;
www.manorhousedouro.com, managed by The Vintage House Hotel, S.A.;
www.quintadoportal.com, managed by Quinta and Vineyard Bottlers – Vinhos, S.A.;
www.grapeshospitality.com, managed by Grapes-Great Restaurant, Accommodation and Personalised Event Solutions, Lda.;
www.baraofladgate.com, managed by Três Séculos – Realizações Hoteleiras, Lda.;
www.casadaspipasrestaurant.com, managed by The Vintage House Hotel, S.A.;
www.tresseculos.pt, managed by Três Séculos – Realizações Hoteleiras, Lda.;
www.douroriverferry.com, managed by Três Séculos – Realizações Hoteleiras, Lda.;
www.barons-hall.com, managed by Três Séculos – Realizações Hoteleiras, Lda.;
www.onwine.pt, managed by Grossão – Comércio de Bebidas, S.A.;
www.directwine.pt, managed by Grossão – Comércio de Bebidas, S.A.;
www.Taylor.pt, managed by Quinta and Vineyard Bottlers – Vinhos, S.A., except regarding the processing of personal data carried out within the scope of the Taylor’s Port Cellars (Vila Nova de Gaia) and Taylor’s Shops & Tasting Room (Porto and Lisboa), managed by Três Séculos – Realizações Hoteleiras, Lda.;
www.Fonseca.pt, managed by Quinta and Vineyard Bottlers – Vinhos, S.A., except regarding the processing of personal data carried out within the scope of Fonseca Port Wine Cellars (Vila Nova de Gaia), managed by Três Séculos – Realizações Hoteleiras, Lda., and within the scope of Quinta do Panascal Wine Tourism (Douro), managed by The Vintage House Hotel, S.A.;
www.Bin27port.com, managed by Quinta and Vineyard Bottlers – Vinhos, S.A.;
www.Croftport.com, managed by Quinta and Vineyard Bottlers – Vinhos, S.A., except regarding the processing of personal data carried out within the scope of Quinta da Roêda Wine Tourism (Douro), managed by The Vintage House Hotel, S. A.;
www.Croftpink.com, managed by Quinta and Vineyard Bottlers – Vinhos, S.A.;
www.Croftbrandy.pt, managed by Quinta and Vineyard Bottlers – Vinhos, S.A.;
www.Pittersporto.com, managed by Quinta and Vineyard Bottlers – Vinhos, S.A.;
www.heritagewines.pt, managed by Heritage Wines – Distribuição de Bebidas, Lda.;
www.wow.pt, managed by Hilodi – Historic Lodges & Discoveries, S.A.;
www.vintevintechocolate.pt, managed by Y Not Chocolate, S.A.;
atkinsonmuseum.com, managed by Hilodi – Historic Lodges & Discoveries, S.A.;
portoduckstore.pt, managed by Hilodi – Historic Lodges & Discoveries, S.A.;
portocomtudo.com, managed by Hilodi – Historic Lodges & Discoveries, S.A.;
www.fladgatefamilywines.com, managed by Fladgate Still & Sparkling Wines, S.A.;
www.portoprotocol.com, managed by Fundação The Porto Protocol
The TFP websites may occasionally contain links to websites and services of other companies, which have their own privacy policies, and/or services provided by third parties, installed on your device, may allow access to information contained therein. Therefore, we recommend that you carefully read the privacy policies of these third parties. TFP is not responsible for the practices or content of these privacy policies.
TFP websites provide you, in certain circumstances, social plugins from various social networks. If you choose to interact with a social network such as Facebook or Google (for example, through account registration), your activity on our Website or application will also be available to the respective social network. If you are logged into one of these social networks during your visit to our Website or application or if you are interacting through one of the aforementioned social plugins, the social network may include this information in your profile on that social network, in accordance with your privacy settings. If you want to avoid this type of data transfer, log out of your social network account before entering our Website or application, or change your privacy settings whenever possible. We recommend reading the privacy policies of the social networks you use to obtain detailed information about the collection and transfer of personal information, to understand your rights, and to know which privacy settings are appropriate for your profile that you should select
TFP collects various types of personal data depending on different purposes, such as, namely:
Customer data: we process the data necessary for the preparation, fulfilment and execution of any contract entered into between the Customer and TFP, as well as to manage any potential complaints. Depending on the relationship you have with us, considering our different business areas, identification and contact data may be processed (name, phone/mobile number, email address, address and postal code; date of birth, place of birth, nationality, birthday; type, number and expiry date of identification document; gender, profession, information about household members; language); financial and banking data (tax identification number, IBAN/NIB, credit card data), billing and product delivery data, reservation data (number, dates, room number, payment information), customer/registration number, data related to purchases and/or interest in the products and/or services we market, type and number of loyalty program card (WOW Card, The Yeatman Wine SPA Private Club, Onwine Club); ticket number, car make and license plate, parking space and date of vehicle parking, if you request the valet parking service at the facilities where we provide it. We also hold information related to your online engagement, which we use to ensure that the marketing communications we send you are relevant to you, in accordance with the consent you have given us. We may also process information that you, directly or through someone from your company, have decided to share with us (evaluation of our services and products, allergies, physical and health conditions, and dietary restrictions), as well as, if you visit our premises, images captured by the video surveillance system (CCTV), identification data, vehicle registration number, and the reason for your visit;
Supplier data: we process the data necessary for the preparation, fulfillment, and execution of any contract entered into between the Supplier and TFP, as well as to manage any potential complaints. In this context, we handle the data of contact persons or individuals representing the supplier or service provider, such as names, addresses, telephone numbers, and email addresses. We will also process financial and banking data to facilitate payments to you. We may also process information that you have decided to share with us, either directly or through someone from your company, as well as, if you visit our premises, images captured by the video surveillance system (CCTV), identification data, vehicle registration number, and the reason for your visit;
Candidate data: depending on the relevant circumstances, we may collect all or part of the following information:
Website User data: we process the data necessary to ensure a good experience when using the Website, enabling you to take advantage of all its features, as well as for effective management of the services we provide. This includes information about how you use our Website, how often you access it, your browser type, your IP address, the location from which you access our Website, the language you choose to view it in and the hours when our Website is most popular, as well as other information better described in our cookie policy below. If you contact us through the Website using, for example, the chat feature, we will collect any information you provide, such as your name and contact details.
Additionally, if you register on TFP Website through social networks (which involves using your credentials on these networks, such as your Facebook or Google login information, to create your TFP account and log in with it), we will also collect personal data. When you use the login option via social networks, TFP will only use the public profile information that is necessary to create your TFP account. Once the account is created, you will have the opportunity to complete it with additional information that you choose to share with us. Any additional information you provide will only be used for the purposes mentioned in this policy.
In the context of the relationship you have with us (e.g. commercial), you must provide the personal data necessary to establish and manage that relationship, as well as to fulfill obligations and pre-contractual and contractual diligences derived from it, and also the data we are legally required to collect. Without this data, we will generally have to refuse to enter into or perform the contract, or we will not be able to maintain the contract, having to terminate it.
If you do not provide us with the necessary information and documentation, we will not be able to establish or continue the commercial or employment relationship you intend or follow up on the requests you send you address to us.
We may collect personal data in various ways: personal data that we receive directly from you if you contact us on your own initiative, usually by telephone, email or through a form on our Website; and/or if we contact you by telephone or email, or through business development activities more generally.
There are various ways in which you can share your information with us, which include:
We will also process personal data transmitted by third parties, namely from social networks, if you ‘follow’ us and/or make a ‘like’ on our pages of Facebook, Instagram, X, LinkedIn, TikTok, Pinterest, Flickr or YouTube.
We collect your data automatically through cookies, in accordance with your consent and the cookie settings of your browser. Please see our Cookie Policy below.
You may unsubscribe from newsletters and/or promotional communications at any time by using the option provided for this purpose in each communication sent.
If you do not agree with our marketing approach, you have the right to withdraw your consent at any time, without this affecting the lawfulness of processing based on consent previously given.
We may use your data to show you ads from TFP and other content on other websites, such as Facebook. If you do not want us to use your data in this way, disable the marketing/advertising/targeting cookies option (see our Cookie Policy below).
TFP may use your personal data for the development of its products and services. However, we will predominantly use aggregated data and statistical information.
TFP keeps track of the pages you visit on our website to determine which services/products are most requested. In this case, information is collected regarding the computer or mobile device you use to access the website, namely your IP address, the website through which you accessed ours, the type and language of your browser, operating system, cookies, the country from which you are accessing, referring and exit pages, URL, platform type, the number of clicks made, domain names, landing pages, pages visited and the order in which you visited them, the time spent on a particular page, the date and time you accessed the website, access errors and other similar information that your browser sends us.
Your data related to your purchases may be used, in a statistical and aggregated form, for purposes of analysis, market research and quality surveys.
To fill vacancies, we may develop recruitment activities internally. For this purpose, we may carry out various personal data processing, such as:
The legal basis for the processing of personal data are as follows:
When appropriate and in accordance with local laws and requirements, we may share your personal data in various ways and for various reasons with the following categories of recipients:
We are committed to taking all technical and organizational measures to protect the personal information we hold from misuse, accidental or unlawful amendments, loss and unauthorised disclosure or access. For this purpose, TFP uses security systems, rules and other procedures to ensure the protection of your personal data, as well as to prevent unauthorised access to data, improper use, disclosure, loss or even destruction of your personal data.
We are committed to taking all reasonable and appropriate measures to protect the personal information we hold from misuse, accidental or unlawful amendments, loss and unauthorised disclosure or access. For this purpose, TFP uses security systems, rules and other procedures to ensure the protection of your personal data, as well as to prevent unauthorised access to data, improper use, disclosure, loss or even destruction of your personal data.
If you suspect misuse, loss or unauthorised access to your personal information, please let us know immediately.
After the retention periods mentioned above, the personal data will be deleted and /or erased in a completely secure manner.
The data subject has the right to obtain clear, transparent and complete information about how TFP processes their personal data. That is why we made this Privacy Policy available to you.
Under the applicable legislation, the data subject may exercise, at any time, the right to access, rectify or erase their personal data, as well as the right to restrict the processing of such data. Where appropriate, they also have the right to object to the processing or request data portability.
In cases where personal data processing is carried out on the basis of your consent, you may withdraw that consent at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
You have the right to lodge a complaint with a supervisory authority if you consider the processing of personal data related to you infringes the data protection legislation. In Portugal the relevant supervisory authority you can complain to is the Comissão Nacional de Proteção de Dados – CNPD (www.cnpd.pt).
To exercise any of the above rights or clarify any questions regarding our privacy policy, please contact us by letter or email, providing proof of your identity and indicating the right you wish to exercise, by letter or email, at the following addresses:
Data transfer to other countries (countries outside the European Economic Area) only occurs if it is necessary for the execution of orders or upon your requests (for example, payment orders or shipment of products), by legal requirement or if you have given us an express authorisation to do so. If requesting service providers of third countries is required, they will be obliged to comply with the written instructions in this regard by signing an agreement with the standard contractual clauses of the European Union, in order to comply with the level of data protection applicable in the European Union. You will receive detailed information from us separately as required by law.
We want to ensure that your data is stored and transferred in a safe way. Therefore, we will only transfer data outside the European Economic Area or EEA (i.e., all the European Union Member States as well as Norway, Iceland and Liechtenstein) where this is in line with the data protection legislation and the means of transfer provide adequate guarantees in relation to your data, namely:
To ensure that your personal data receives an adequate level of protection, we have applied appropriate procedures with third parties with whom we share your personal data to guarantee that your personal information is handled by such third parties in compliance with data protection law.
The data subject guarantees that the personal data provided to TFP are correct and accurate and will notify any change or amendment to them assuming sole responsibility for losses and damage caused by erroneous, inexact or incomplete communication of these data. The data subject is explicitly warned that when disclosing personal data on TFP’s public media such as Facebook, Instagram, X, LinkedIn, Tiktok, Pinterest, Flickr or YouTube, this information may be seen and used by third parties.
TFP websites are optimised for viewing on Google Chrome, Safari, Mozilla Firefox and Microsoft Edge.
They are small text files that a website, through your web browser, stores on your computer or other device you use to access the Internet. They allow websites to function more efficiently and in a more personalised way, improving your online experience. For example, when you visit an online shopping website, cookies not only allow your individual preferences to be ‘remembered’, but can also ‘remember’ your user and login status, the items in your shopping cart, and much more.
Cookies can be of different types and have different specific functions. In general, the cookies we use can be:
Under applicable law, with the exception of strictly necessary cookies, the use and storage of other cookies depends on your prior and express consent. Please note that rejecting the use of cookies may affect the quality of your experience on the Website.
You can manage your cookie preferences at any time. Most Internet browsers, through their configuration options, allow you to control the storage of cookies on your computer or mobile device, as well as the immediate deletion of those that have been previously installed on that device.
If you wish to have greater control over the installation of cookies, you can use programs or add-ons to your Internet browser, known as “do not track” tools, which will allow you to choose which cookies you want to permit.
Rejecting the use of cookies on TFP websites may restrict or prevent access to certain areas and/or content on those web pages or limit the receipt of personalised information.
Occasionally, it may be necessary to process personal data and, where appropriate and in accordance with local requirements and legislation, to process sensitive personal data regarding the exercise and defence of legal claims. On this perspective, article 9 paragraph 2 f) of GDPR allows such processing when it “is necessary for the establishment, exercise and defence of legal claims in a judicial proceeding or whenever courts act in the exercise of their judicial function.”
This may arise, for instance, in circumstances where we need to obtain legal advice in relation to legal proceedings or if we are required by law to retain or disclose specific information as actors in legal proceedings.
TFP reserves the right to change this Privacy and Cookies Policy at any time, and any changes will be duly posted on the TFP’s websites. If the changes are materially relevant, a notice will be published.
Last update: June 2026
