OVERVIEW

This Privacy Policy establishes the guidelines for the processing of your personal data by Magnífico Douro, outlining (a) the purposes for which personal data may be processed, (b) the entities with which such data may be shared and (c) the methods available to Users to manage their personal information. This policy applies to all users of the Platform, regardless of whether access or use is made through the main Magnífico Douro website and its subdomains, as well as through other websites, interfaces or applications made available by Magnífico Douro, including mobile applications, for tablets or other electronic devices.

WHAT PERSONAL DATA IS PROCESSED BY MAGNÍFICO DOURO

Personal Data. The Personal Data processed by Magnífico Douro may vary depending on the type of interaction the User has with the Platform. This personal data may be collected directly from the User, obtained through third parties or collected automatically. Personal data may involve: (a) registration information such as e-mail, full name, address, telephone number, cell phone number, tax number, profile photo and passport; and (b) banking information, such as the name of the financial institution with which the User has a bank account, account number, account type, branch, IBAN and credit card details, including cardholder name, validity and CVV code.

1.1. Personal data collected directly from the User. Magnífico Douro has the ability to collect personal information directly from you, covering registration details and banking information.

1.1.1 Offline interaction. Magnífico Douro may collect personal data when you interact with Magnífico Douro in ways other than accessing the Platform, such as participating in an event promoted by Magnífico Douro or by a third party with contractual links with Magnífico Douro.

1.1.2 Optional fields. The Platform offers optional fields, clearly identified as such, with the purpose of improving the personalization of the content made available to the User.

1.1.3 Public data. Magnífico Douro classifies certain personal data as being of a public nature, since it can be viewed by anyone, both inside and outside the Platform, even if that person does not have an account on the Platform. The information you enter in the fields labeled "public data" is included in the category of public data. You, other users of the Platform and Magnífico Douro may provide access to or transmit public data to individuals, regardless of whether they are on or off the Platform. This public data may also be viewed, accessed, re-shared or transferred through third-party tools, such as search engines, application programming interfaces (APIs) and offline media, as well as through applications, websites and other services provided by third parties.

1.2. Personal data obtained from third parties. Magnífico Douro may obtain access to certain personal data from third parties, which may include registration or banking information. This situation occurs, for example, when Magnífico Douro needs, due to compliance with legal or regulatory obligations, to consult databases maintained by third parties that enable the analysis of credit restrictions, anti-fraud verification and other analyzes related to risk management integrated into the Platform.

1.2.1 Magnífico Douro also obtains registration information from third parties when you join, connect or log in to the Platform via a Third Party Service (such as Facebook, for example).

1.2.2 Magnífico Douro may also receive registration information through third parties for event registrations, participation in surveys, advertising campaigns and other activities organized by third parties that have a contractual relationship with Magnífico Douro.

1.3. Personal Data collected automatically when accessing the Platform. When you access the Platform, even if you do not have an account on it, personal data is automatically collected. This information may include examples such as those mentioned below.

1.3.1 Payment transaction information: This includes the payment method used; date and time of the transaction; amount of the transaction; expiry date of the payment method; billing zip code; IBAN information, address and other data relevant to the payment transaction.

1.3.2 Access or use information: The pages and content you consult; searches carried out on advertisements; your frequency of use of the Platform; browser details; connection information; purchase and browsing history.

1.3.3 Log data and device information: Information regarding your access to and use of the Platform (including links visited); IP address; access dates and times; details about the hardware and software used; device information; device event data; unique identifiers (such as the Magnífico Douro ID); crash data; cookie data and the pages you interacted with before and after accessing or using the Platform.

1.3.4 Cookies, pixel and similar technologies, as described in our Cookie Policy.

WHAT PERSONAL DATA IS PROCESSED BY MAGNÍFICO DOURO ON BEHALF OF THIRD PARTIES

2.1 Processing of Personal Data at the Request of Third Parties. There is personal data that Magnífico Douro processes at the request of third parties. The management of this personal data is conducted in accordance with regulations established between Magnífico Douro and these third parties, formalized in written contracts.

2.2. Responsibility for the Processing of Personal Data by Third Parties. The third parties mentioned in the previous points also act as controllers of personal data in the context of the provision of their products and services.

THE PURPOSES FOR PROCESSING PERSONAL DATA

3.1. Purposes of Processing the User's Personal Data. Magnífico Douro uses personal data for the following purposes:

3.1.1 To provide and develop the Platform:

Link your Magnífico Douro account to social networks

Customize the Platform according to your browsing experience

Carry out analyses and studies related to their behavior, interests and demographics

Improving the Platform

Archive purchase history

Update registration

Send messages, updates and account notifications

Carry out user support activities

Allow Users to publish their content

Disseminate the User's content by the means available on the Platform

3.1.2 Providing and optimizing advertising and marketing activities

Registering for events

Send newsletter

Send communications via e-mail, SMS or other digital communication method

Send educational materials or e-books

Carrying out social communication campaigns with a focus on advertising and promotions

Manually send lists to media outlets (Facebook and Google)

Send communications such as email marketing, targeted advertising and other advertising campaigns through various media channels

Analyze browsing behavior to optimize the Platform and offer products and services

3.1.3 Maintaining a safe environment

Authenticate with the Platform

Verify the authenticity of the data and documents provided, including through processing and cross-checking

Sending announcements

Carry out fraud prevention analysis activities, security incidents and abuses on the Platform

Registration check

Content verification

3.2 Purposes of Processing Visitors' Personal Data. Magnífico Douro may collect personal information from visitors to the Platform for the following purposes:

Media campaigns with a focus on advertising and promotions

Send communication, such as e-mail marketing, remarketing and other advertising campaigns on media channels

Analyze your browsing behavior on the Platform

Registering for events

Send newsletter

Send communications via e-mail, SMS or other digital communication method

Send educational materials or e-books

3.3 Live sessions via YouTube / Zoom / Instagram or any other platform. Although our live sessions take place in real time, they will be recorded for various purposes. These include ensuring the quality of the content, allowing future access to participants who cannot be present during the live broadcast and sometimes sharing relevant content with our community.

During the live sessions, we will capture videos, images and audio to preserve the content and experience. It is important to note that by participating in our live sessions, you agree to the possibility of being recorded and to your comments, questions or contributions being captured during these sessions.

Some segments of the recorded sessions can later be used on our various platforms and social networks in video, image or audio formats. This practice is intended to share knowledge, promote constructive discussions and strengthen our community. However, we want to ensure that your privacy is always respected, and that your content is not used in an inappropriate or compromising way.

If you have any specific concerns regarding your privacy or the use of your contributions to our recorded live sessions, please do not hesitate to contact us. We are happy to answer your questions and ensure that your experience with us is a positive and safe one.

LEGAL BASES FOR TREATMENT

4.1 Legal bases. The processing of personal data carried out by Magnífico Douro is always based on a legal basis stipulated by the laws in force. The legal bases adopted by Magnífico Douro may vary according to the processing context.

The following are the legal bases used by Magnífico Douro:

4.1.1 Consent. When the User expressly agrees to the processing of personal data, such as by agreeing to receive newsletters, advertising communications or participate in surveys. This consent can be withdrawn at any time by the User.

4.1.2 Compliance with legal or regulatory obligations. When Magnífico Douro is compelled to process personal data due to legal or regulatory impositions, such as the use of third-party tools to assess Users' credit. In this situation, automated decisions may be made to analyze the feasibility of advancing funds on the Platform.

4.1.3 Execution of the Contract or procedures related to the Contract. When Magnífico Douro is obliged to process personal data as established in the contracts in force between Magnífico Douro and the User.

4.1.4 Regular exercise of rights in judicial, administrative or arbitration proceedings. When it is necessary to process personal data in compliance with a lawsuit, administrative proceeding or arbitration.

4.1.5 Legitimate interest. When Magnífico Douro takes the decision to proceed with the processing of personal data, after a thorough analysis that includes the assessment of the purpose and necessity of the processing for the User, the User's expectations regarding the processing of personal data and the preparation of the relevant legal documentation. This legal basis is applied, for example, when Magnífico Douro sends a newsletter related to the User's interests, taking into account their interaction with the Platform. In this scenario, Magnífico Douro always gives the User the option to unsubscribe from receiving these communications.

PERSONAL DATA RETENTION PERIOD

5.1 Processing period. Magnífico Douro processes personal data until at least one of the following situations is verified. These include:

Realization of the processing purpose

The personal data is no longer necessary or relevant to achieve the specific objective pursued.

End of the Contract with the User, regardless of the reason

When the User exercises the right to withdraw their consent, in cases where the processing of personal data has taken place on this legal basis.

Sanctions that may be imposed by the entity in charge of supervising, implementing and inspecting compliance with current legislation, as well as by other competent bodies.

5.2 Retention of Personal Data. In specific situations, both Magnífico Douro and Magnífico Douro's third-party partners may keep personal data residually even after the conditions that would determine the termination of the processing of personal data. This may occur due to legal or regulatory obligations, as well as in circumstances where there is a legitimate interest on the part of Magnífico Douro or said third parties. In these scenarios, personal data will be kept in secure locations, with restricted access, for the period necessary to comply with legal or regulatory obligations, or until the legitimate purpose of Magnífico Douro and third parties has been achieved.

SHARING PERSONAL DATA

6.1 Sharing. Magnífico Douro is authorized to share personal information with third parties. These third parties formalize written contracts with Magnífico Douro and are fully aware of their responsibilities at all stages of processing, especially in relation to the implementation of security measures that comply with contractual and legal requirements. The sharing of personal data may occur in scenarios such as the following.

6.1.1 User consent. When you provide your consent, we share your data in accordance with what was explained at the time consent was given - for example, when authorizing the sharing of personal data with third parties to enable participation in events.

6.1.2 Compliance with the law, prevention of damage and security. When it becomes necessary to share personal data with third parties to: (a) prevent fraud, such as money laundering risk analysis, which may involve automated decisions; (b) verify lists of restricted Users; (c) authenticate submitted documentation; (d) facilitate support service; (e) prevent illegal activities; (f) handle disputes between Users; (g) conduct internal investigations into conduct that may violate the Terms or Magnífico Douro Policies.

6.1.3 Response to legal requests. In specific situations and when required, Magnífico Douro may make the data collected available to the authorities and bodies involved in the investigation or resolution of disputes between Users, as well as between Users and third parties, including judicial bodies, arbitration courts or competent administrative authorities.

6.1.4 Between companies linked to Magnífico Douro. The sharing of personal data may take place between companies that are under the same control as Magnífico Douro, whether they are controlling, controlled, affiliated or under common control, with the aim of facilitating the provision of Magnífico Douro Services.

6.1.5 Service providers. Magnífico Douro may also share your personal information with third parties that perform financial, accounting, legal, non-profit advisory functions, as well as with possible investors, in addition to third parties that participate in the provision of data backup services, cloud computing service providers or that perform statistical analysis.

INTEGRATIONS AND THIRD-PARTY PARTNERS

Magnífico Douro, in specific situations, may incorporate third-party services into the Platform through application programming interfaces (APIs), such as the YouTube API. These third-party services are not part of the services offered by Magnífico Douro and are not an integral part of the Platform. They are subject to separate terms and conditions, such as YouTube's Terms of Service and Google's Privacy Policy. Magnífico Douro takes no responsibility for these services and, when you interact with them, you provide your personal data directly.

INTERNATIONAL TRANSFERS

8.1 International transfers. Magnífico Douro and its third-party partners may transfer your personal data to countries other than your own. In these situations, the international transfer of personal data will be made to a country that offers an adequate level of personal data protection. Magnífico Douro and its third-party partners implement the necessary legal measures to guarantee the protection of such personal data, as well as to ensure that the transfer complies with one of the transfer mechanisms established in the applicable legislation.

RIGHTS WITH REGARD TO YOUR PERSONAL DATA

9.1 Requests: You can submit a request relating to your rights as set out in the legislation in force. These rights may include requesting confirmation of the processing of personal data, access to your personal data, correction of personal data and deletion of personal data. To make such a request, please use the following e-mail address: info@magnificodouro.pt

To speak to our personal data protection officer, please contact this e-mail address: info@magnificodouro.pt

When Magnífico Douro acts on behalf of a third party and the User seeks Magnífico Douro to exercise one of their rights, in certain situations, we may comply with that request, as appropriate.

If you wish to stop receiving advertising newsletters, e-mails, telephone calls or SMS messages, you can do so via the link provided in the communications themselves.

If you wish to delete the cookies installed, the Cookie Policy shows you how to do this.

SECURITY

10.1 Security measures. Magnífico Douro implements the technical and organizational security measures necessary to safeguard personal data. These measures aim to mitigate the risks associated with destruction, accidental or unlawful loss, alteration, unauthorized disclosure, unauthorized access or any other form of unlawful or unauthorized processing. Magnífico Douro adopts strict access controls based on the principle of least privilege, protecting personal data against possible security incidents.

PROCESSING OF MINORS' PERSONAL DATA

11.1 Personal Data of Minors. Magnífico Douro does not intentionally collect or request personal data from minors under the age of 13. If we become aware that personal data has been collected from a minor under the age of 13, we will proceed to cancel the account created on the Platform and delete the personal data, with the exception of data that may be necessary to prevent new registration attempts.

CONTACT INFORMATION

Magnífico Douro Eventos Lda
VAT ID: PT509421369
Marginal - Platform C

5085-037 Pinhão
Portugal

Doc. Version 1
Last updated: 27-06-2024