The Gramol online store on the website www.gramol.pt, NIPC 518498468, headquartered at Estrada Nacional 227 km 49, 3600-665 VALADARES SPS processes the personal data provided by the Customer to respect and enforce the Terms and Conditions, process electronic orders and deliveries, activate insurance and for the necessary communication within the period required by law.

General Conditions 

1. The controller of personal data, in accordance with the GDPR (hereinafter referred to as the "Regulation") is Pedro Torres Laranjeira - Unipessoal, Lda, a company with VAT number 518498468, headquartered at Estrada Nacional 227 km 49, 3600-665 VALADARES SPS (hereinafter referred to as the "Controller"); 

2. The Controller's contact details are: email: clientes@gramol.pt, tel.: +351 965815889; 

3. Personal data is any information relating to an identified or identifiable natural person.

Origin of personal data 

1. The controller processes personal data obtained with the customer's consent and collected as part of the purchase contract and fulfillment of the electronic order placed on the online store www.gramol.pt. 

2. The controller processes only the customer's identification data and contact details necessary to fulfill the purchase contract; 

3. The controller processes personal data for delivery and accounting purposes and for necessary communication between the parties involved in the contract for the period required by law. Personal data will not be disclosed and will not be transferred to other countries.

Purpose of data processing 

The controller processes the customer's personal data for the following purposes: 

1. Registration on the website www.gramol.pt, in accordance with Chapter 4, Section 2 of the GDPR; 

2. To fulfill electronic orders placed by the customer (name, address, email, telephone number); 

3. To comply with laws and regulations arising from the contractual relationship between the customer and the controller; 

4. To execute the purchase contract based on the necessary personal data, in particular to activate insurance policies. The contract cannot be concluded without the personal data. 

Data storage period 

1. The controller stores personal data for the period necessary to comply with the laws and regulations arising from the contractual relationship between the Customer and the Controller and for a period of 3 years after the end of the contractual relationship; 

2. The controller must delete all personal data as soon as the personal data storage period ends.

Recipients and those responsible for personal data 

Third parties that process customer personal data are subcontractors of the controller. The services of these subcontractors are essential for the successful fulfillment of the contract for the acquisition and processing of electronic orders between the controller and the customer. 

The Manager's subcontractors are: 

Webnode AG (e-commerce system); 

Shipping companies; 

Google Analytics (website analytics); 

Allianz Portugal

Consumer Rights 

In accordance with the Regulation, the Customer has the right to: 

1. Access to personal data; 

2. Rectification of personal data; 

3. Right to erasure of personal data; 

4. The right to object to the processing of personal data; 

5. The right to port personal data; 

6. The right to withdraw consent to the processing of personal data in writing or by email: clientes@gramol.pt; 

7. The right to lodge a complaint with the supervisory authority in case of an alleged violation of the Regulation. 

Personal data security 

1. The data controller takes all necessary technical and organizational precautions to protect personal data; 

2. The controller has taken technical precautions to protect the spaces where data is stored, in particular, by password-protecting access to the computer, using antivirus software, and performing regular computer maintenance.

Final provisions 

1. By placing an electronic order on the website www.gramol.pt, the customer confirms that they are aware of all the conditions regarding personal data protection and accept them to the fullest extent possible; 

2. The customer accepts these conditions by checking the box on the request form; 

3. The controller may update these conditions at any time. A new, updated version must be published on the website. 

These Rules come into effect on October 1, 2025.