Privacy Policy
Last updated: 2 October 2026
1. Data controller and contact details
Sociedade Agrícola Vale de Pombeiros Lda, Portuguese tax number (NIF) 506062783, owner of the ROSO — Douro Wine Estate brand, is the controller of the personal data you provide to it through this landing page. For privacy enquiries or to exercise your rights, contact info@roso.pt.
This policy applies to the temporary roso.pt page and the contact channels it provides. Processing associated with a booking is also covered by the information provided during that process.
2. Data, purposes and legal bases
- News subscriptions: we use the email address you provide to send news about ROSO and its opening, based on your consent, given by selecting “Notify me” after reading the information next to the form. Subscribing is optional.
- Enquiries: we use your contact details and the content of your messages to respond. Where an enquiry concerns a booking or service, the legal basis is taking steps at your request before entering into a contract; for other enquiries, it is our legitimate interest in providing information and managing communications.
- Legal obligations: where applicable, necessary data is processed to meet legal obligations, including responding to requests from competent authorities.
- Operation and security: technical data, such as your IP address, access date and browser information, may be processed by hosting services to deliver and protect the website, based on the legitimate interest in service security and continuity.
Without valid contact details, we may be unable to send news or respond to your enquiry. Please avoid including unnecessary personal data or sensitive information in your messages.
3. Retention
Your subscription email address is used for as long as the purpose of sending news and your consent remain in place. You may withdraw consent at any time. Enquiries are retained for the period needed to follow them up and bring them to a conclusion. Information strictly necessary to comply with legal obligations, demonstrate consent or defend legal rights may be retained for the period applicable to each purpose.
4. Service providers and recipients
To the extent needed to operate the website and manage communications, data may be processed by hosting, technical support and email providers, subject to applicable data protection obligations. Data may also be disclosed to authorities where legally required.
When you open booking, WhatsApp or Google Maps links, you begin interacting with those services. Please read their policies to understand what data they collect and how it is processed. Loading the Google Fonts used on this page also involves a connection to Google’s servers, which may transmit technical data such as your IP address.
5. International processing
Using external services may involve processing data outside the European Economic Area. Where transfers are the Company’s responsibility, they must rely on a mechanism provided for by the GDPR, such as an adequacy decision or appropriate contractual safeguards. You may request information about recipients and applicable safeguards using the contact details above.
6. Cookies and similar technologies
Strictly necessary cookies support essential functions when used. The use of analytics or advertising cookies requiring consent calls for specific information and a prior choice that allows you to accept, refuse and change your decision. External services accessed through links may use their own cookies in accordance with their respective policies.
7. Your rights
Where applicable, you may request access, rectification, erasure, restriction or portability of your data and object to processing based on legitimate interests. You may withdraw consent to news updates, without affecting the lawfulness of earlier processing, by emailing info@roso.pt with your unsubscribe request.
We will normally respond within one month. In circumstances provided for by law, this period may be extended, and we will explain the reasons. Where necessary, we may request proportionate information to confirm the requester’s identity.
You may lodge a complaint with the Portuguese Data Protection Authority (CNPD).
8. Updates
This policy will be updated when website features or data processing arrangements change. The current version and its update date will be available on this page.