Finisterra, Lda. respects your privacy, and this Privacy Policy describes who we are, the purposes for which we use your personal data, the legal grounds for doing so, who we share it with, how long we retain it, your rights, and how to contact us to exercise those rights!
Who is responsible for processing your personal data?
With regard to contacts with the data subject, use of the website loja-horeca.finisterra.pt, social media, and the contractual relationships established, the party responsible for processing your personal data is Finisterra, Lda., Tax ID (NIF) 509515096, with registered office at Centro de Depuração e Distribuição de Bivalves, Porto da Baleeira, Parcela 1, 8650-368 Sagres – Portugal, phone number 910 673 000, email address loja.online@finisterra.pt, hereinafter referred to as “Finisterra“.
What personal data do we process and from whom?
We only collect the personal data that is necessary for the respective purposes; unnecessary or superfluous data is not collected.
We collect, retain and may process the following general personal data: name, phone number, email address, home address.
Regarding suppliers, suppliers’ employees, partners and partners’ employees, we may collect tax data, bank account details (NIB/IBAN), the role held within the legal entity, email address and phone number.
We may also collect information regarding the type of browser and computer used, technical information about how you connect to the website, namely the operating system and method of internet access.
How do we collect your data?
We collect your personal data directly: through the contact form you fill in on our website, when you request newsletters or information about Finisterra‘s activities, or when you contact us by phone, email or social media.
For what purposes do we process your personal data?
- To respond to information requests from potential customers or customers;
- To manage the pre-contractual and contractual relationship with potential customers and customers: to enter into, perform and fulfil purchase and sale, supply and service agreements;
- To comply with legal obligations, namely towards public authorities;
- For invoicing;
- To respond to requests and complaints;
- To manage the content of our website and social media;
- To send newsletters, advertising and promotional campaigns, and information about new product and service offers – duly consented to by the data subject prior to sending;
- To manage the relationship with suppliers and partners.
For matters beyond those described above, we will always request your consent to process your personal data.
You may withdraw your consent by simply sending an email to loja.horeca@finisterra.pt or a letter to:
Finisterra, Sagres, 8650-368, Algarve, Portugal — Attn: Data Protection Officer
What are the legal grounds for processing?
a) Carrying out pre-contractual steps at the data subject’s request and/or performance of the contract concluded between the parties;
b) Compliance with legal obligations;
c) Legitimate interests pursued by Finisterra;
d) Consent of the data subject, where none of the legal grounds above apply.
How long do we retain your information?
Your personal data is stored on protected IT systems, hosted on servers of trusted service providers dedicated to hosting and managing the website, subject to appropriate security measures.
We retain your data only for the period necessary for the purposes that justified its collection, or for the legally required periods. Specifically:
- Data contained in invoices and accounting records: retained for the applicable legal period (currently 10 years, under applicable commercial and tax legislation);
- Data of customers and potential customers: retained for the duration of the business relationship and for an additional period necessary to comply with legal obligations or to defend rights in the event of a dispute;
- Data collected via contact forms or newsletter subscriptions: retained until consent is withdrawn or for as long as necessary for the purpose that motivated the collection.
Once the applicable periods have elapsed, the data will be destroyed or irreversibly anonymised.
Who do we share your data with?
We may share your personal data with third parties that provide services essential to our business, namely:
- PTISP, responsible for website hosting and backup;
- invoicing and accounting service providers;
- payment processing service providers;
- shipping and delivery companies;
- website traffic analysis and spam/abuse protection service providers.
- prestadores de serviços de análise de tráfego do website e de proteção contra spam/utilização abusiva de formulários.
These third parties process the data solely and exclusively on our behalf, under a written contract that ensures compliance with the GDPR and Law No. 58/2019, of 8 August.
Finisterra implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, loss or destruction, including access control, password use, encryption where applicable, and system monitoring.
Are there international data transfers?
Some of the services we use — namely website traffic analysis and anti-spam tools (provided by Google) — may involve transfers of personal data outside the European Economic Area.
In such cases, the appropriate safeguards provided for under the GDPR are adopted, namely the Standard Contractual Clauses approved by the European Commission, or other legally recognised mechanisms that ensure a level of protection equivalent to that guaranteed within the European Union.
Do we use cookies?
The website uses technical cookies and, where applicable, analytics and marketing cookies. For more information about the cookies used, their purposes and how to manage them, please see our Cookies Policy.
What are your rights?
You have the right to access, rectify, erase, restrict processing, object to processing, and data portability. You may exercise these rights by email to loja.online@finisterra.pt or by letter to Finisterra, Sagres, 8650-368, Algarve, Portugal — Attn: Data Protection Officer.
Can you file a complaint?
Yes. In Portugal, the competent supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD) — Av. D. Carlos I, n.º 134, 1200-651 Lisboa. More information at www.cnpd.pt.
Are there automated decisions?
At present, there is no processing involving automated decision-making, including profiling.
Note: This Policy may be updated periodically. We recommend reviewing it regularly.
Last updated: 13-07-2026