WHO ARE WE?

“CAÇULA GROUP” is a restaurant group located in Porto that comprises five brands: Caçula, Caçula Manga Sushi, Caçula Cervejaria, Caçula Brunch, and CAÇULA GROUP.

WHY THIS PRIVACY AND PERSONAL DATA PROTECTION POLICY?

This Policy aims to inform CAÇULA GROUP Customers/Users the general rules on privacy and the processing of personal data, which are collected and processed in strict compliance with the provisions of the personal data protection legislation in force at any given time, namely Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (“GDPR”).
CAÇULA GROUP complies with best practices in the field of security and protection of personal data, having taken the necessary technical and organizational measures to comply with the GDPR and ensure that the processing of personal data is lawful, fair, transparent, and limited to the authorized purposes.
CAÇULA GROUP is committed to the protection and confidentiality of personal data and has adopted the measures it considers appropriate to ensure the accuracy, integrity, and confidentiality of personal data, as well as all other rights of the respective data subjects.

WHAT DOES THIS POLICY COVER?

This Policy applies exclusively to the collection and processing of personal data for which “CAÇULA GROUP” is responsible for processing, within the scope of the services and products made available to its Customers/Users and in all situations where personal data is processed.

WHAT IS PERSONAL DATA?

Personal data is any information, of any nature and regardless of its medium, including sound and image, relating to an identified or identifiable natural person.
A natural person is considered identifiable if they can be identified, directly or indirectly, in particular by reference to a name, identification number, location data, electronic identifiers, or one or more specific elements of their physical, physiological, genetic, mental, economic, cultural, or social identity.

WHAT DOES THE PROCESSING OF PERSONAL DATA INVOLVE?

The processing of personal data consists of an operation or set of operations performed on personal data or sets of personal data, by automated means or otherwise, namely the collection, recording, organization, structuring, storage, adaptation, retrieval, consultation, use, disclosure, dissemination, comparison, interconnection, limitation, erasure, or destruction.

WHO IS RESPONSIBLE FOR DATA PROCESSING?

The entity responsible for processing personal data is “CAÇULA GROUP,” which determines the purposes and means of processing such data.
To this end, if the data subject needs to contact the data controller, they may do so through the following means and contacts: info@afabricadapicaria.pt   

WHAT TYPES OF PERSONAL DATA ARE PROCESSED?

Within the scope of its activities, CAÇULA GROUP processes the personal data necessary for the provision of services and/or supply of products, processing data such as email address, name, and telephone number in accordance with the information provided by the data subjects.
Personal data may also be processed for marketing purposes or to advertise CAÇULA GROUP’s services, if the data subject has given their consent.
If the data subject has given their prior consent, this may be withdrawn at any time, without compromising the lawfulness of the processing carried out on the basis of the consent previously given.

WHEN AND HOW DO WE COLLECT YOUR PERSONAL DATA?

CAÇULA GROUP collects your personal data, namely by telephone, in writing, through its website, ensuring, whenever necessary, the prior consent of the data subject.
Some personal data is essential for the performance of the contract, without which CAÇULA GRUPO will not be able to provide the service in question.
If the owner of the personal data is not a Customer/User of CAÇULA GROUP, the respective personal data will only be processed when it is made available, in which case the rules of this Policy will apply.
The personal data collected may be processed electronically and in an automated or non-automated manner, ensuring in all cases strict compliance with personal data protection legislation. It will be stored in specific databases created for this purpose and, under no circumstances, will the data collected be used for any purpose other than that for which it was collected or for which the data subject has given their consent.

WHO ARE THE RECIPIENTS OF PERSONAL DATA?

Without prejudice to the recipients indicated throughout this Policy, “CAÇULA GROUP” may communicate the personal data of the Customer/User for the purpose of complying with legal obligations, namely to police, judicial, tax, and regulatory entities.

WHAT ARE THE PURPOSES OF PERSONAL DATA PROCESSING AND THE RESPECTIVE LEGAL BASIS

In general, the personal data collected is based on and intended for the management of the contractual and commercial relationship, the provision of contracted services, the adaptation of services to the needs and interests of the Customer/User, namely for the purposes of accessing specific service features, information and marketing actions.
In addition, personal data may also be processed for the purposes of complying with legal obligations.

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

The period of time during which personal data is stored and retained varies according to the purpose for which the information is processed.
In fact, there are legal requirements that oblige us to retain data for a minimum period of time. Therefore, whenever there is no specific legal requirement, data will be stored and retained only for the minimum period necessary to fulfill the purposes for which it was collected or subsequently processed, as defined by law.

WHAT ARE YOUR RIGHTS AS A DATA SUBJECT?

As owners of personal data, Customers/Users are guaranteed, at any time, the right to access, rectify, update, limit, and erase their personal data (except for data that is essential for the provision of services by “CAÇULA GROUP” or for compliance with legal obligations to which the controller is subject), the right to object to the use of such data for commercial purposes by “CAÇULA GROUP” and to withdraw consent, without compromising the lawfulness of the processing carried out under that consent, as well as the right to data portability.

HOW CAN YOU ACESS, RECTIFY, UPDATE, LIMIT, DELETE, OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA, OR WITHDRAW YOUR CONSENT?

Without prejudice to the provisions of the GDPR, the data subject may do so, either directly or by written request addressed to the respective Data Controller, using the contact details provided for this purpose in this document, as well as other contact details provided by “CAÇULA GROUP”.

HOW CAN YOU OBJECT TO RECEIVING MARKETING CONTACTS?

CAÇULA GROUP may promote new products or services to its Customers/Users, namely by telephone, email, SMS, or any other electronic communications service, if the data subject has given their consent.
If the owner of the personal data does not wish to continue receiving these communications, they may, at any time, withdraw their consent to the use of their data for marketing purposes.

HOW CAN YOU COMPLAIN?

Without prejudice to the right to submit complaints directly to “CAÇULA GROUP” through the contacts provided for this purpose, the Customer/User may complain directly to the Supervisory Authority, which is the National Data Protection Commission (CNPD), using the contacts provided by this entity for this purpose.

WHAT MEASURES HAS CAÇULA GROUP TAKEN TO ENSURE THE SECURITY OF YOUR PERSONAL DATA?

CAÇULA GROUP is committed to ensuring the protection of the personal data made available to it, having approved and implemented strict rules in this regard. Compliance with these rules is an obligation for all those who legally access them.
Bearing in mind the concern and commitment that CAÇULA GROUP shows in the defense of personal data, several security measures of a technical and organizational nature have been adopted in order to protect the personal data made available to it against its dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.
Additionally, third parties who, in the context of providing services, process the personal data of the Customer/User on behalf of and for the account of “CAÇULA GROUP” are required, in writing, to implement appropriate technical and security measures that, at all times, meet the requirements of current legislation and ensure the protection of the rights of the data subject (namely, the protection of privacy and personal data).

UNDER WHAT CIRCUMSTANCES IS DATA COMMUNICATED TO OTHER ENTITIES (THIRD PARTIES AND SUBCONTRACTORS)?

CAÇULA GROUP may, within the scope of its activity, use third parties to provide certain services. Sometimes, the provision of these services involves access by these entities to the personal data of Customers/Users. When this occurs, CAÇULA GROUP takes the appropriate measures to ensure that the entities that have access to the data are reputable and offer the highest guarantees in this regard, which is duly established and safeguarded contractually between CAÇULA GROUP and the third party(ies).
Thus, any entity subcontracted by “CAÇULA GROUP” will process the personal data of our Customers/Users on behalf of and for the account of “CAÇULA GROUP” and will adopt the necessary technical and organizational measures to protect personal data against accidental or unlawful destruction, accidental loss, alteration, unauthorized disclosure or access, and against any other form of unlawful processing.
In any case, “CAÇULA GROUP” remains responsible for the personal data made available to it.

UNDER WHAT CIRCUMSTANCES DO WE TRANSFER YOUR PERSONAL DATA?

The provision of certain services by CAÇULA GROUP may involve the transfer of your data outside Portugal, including outside the European Union or to international organizations.
In such cases, CAÇULA GROUP will strictly comply with the applicable legal provisions, namely regarding the determination of the suitability of the destination country(ies) with regard to the protection of personal data and the requirements applicable to such transfers, including, where applicable, the conclusion of appropriate contractual instruments that guarantee and comply with the legal requirements in force.

HOW CAN YOU FIND OUT ABOUT ANY CHANGES TO THE PERSONAL DATA PROTECTION POLICY?

“CAÇULA GROUP” reserves the right to make adjustments or changes to this Personal Data Protection Policy at any time.