Privacy Policy and Personal Data Protection
Last updated: [04/12/2025]
1. Identification of the data controller
Data Controller: Geoterme Gestão de Activos. Lda
Tax ID (NIF): "508928591"
Registered office / address: "Rua Nossa Senhora da Conceição, n88, 6100-266 Cernache do Bonjardim"
Contact: Geral@zangaria.pt | Tel: 965202635
2. Applicable principles
The processing of personal data follows the principles of lawfulness, fairness, transparency, data minimisation, storage limitation, and integrity and confidentiality, in accordance with the GDPR and national legislation.
3. Data collected
We may collect the following data: identification (name), contact details (email, phone), billing and delivery address, payment data (when applicable), order history, browsing data, and other data voluntarily provided by the data subject.
4. Purposes and legal basis of processing
Data is processed for: contract performance, invoicing and compliance with legal obligations, customer support, delivery of goods, fraud prevention, compliance with tax and accounting obligations, and, with consent, sending of marketing communications. The legal bases include contract performance, compliance with legal obligations, and consent when applicable.
5. Disclosure to third parties
Data may be shared with entities necessary for contract performance, such as carriers, payment service providers, invoicing services, and competent authorities when required by law. Contracts with subprocessors include confidentiality and security obligations.
6. Data retention
Data will be retained for as long as necessary to fulfil the purposes described and in accordance with legal obligations (tax, accounting).
7. Rights of data subjects
The data subject may exercise the rights of access, rectification, erasure, objection, restriction of processing, and data portability, as well as withdraw consent when applicable, by contacting us through the provided means. They may also lodge a complaint with the Portuguese Data Protection Authority (CNPD).
8. Security measures
Appropriate technical and organisational measures will be adopted to protect personal data against unauthorised processing, loss, destruction, or damage.
9. Transfers to third countries
If data are transferred to third countries, such transfers will occur in accordance with adequate legal mechanisms (European Commission adequacy decisions, standard contractual clauses, or other lawful safeguards).
10. Cookies and similar technologies
For detailed information on cookies, please refer to the Cookie Policy available on the website.
11. Changes to this policy
This policy may be amended. Updates will be published on the website indicating the revision date.