Privacy Policy


1. Data Controller

This website is managed by Medronho do Coração, headquartered in Santana da Serra, Portugal, hereinafter referred to as "We" or "Medronho Brand".

For any questions related to the protection of personal data, you can contact us via email: medronhodocoracao@gmail.com

2. Scope of Application

This Privacy Policy applies to the use of this website and all personal data collected through:

Direct contact via email.

Cookies and other tracking technologies used on this website.

3. What Personal Data We Collect

We may collect and process the following categories of data:

Contact data: name, email address and other information you choose to provide via email.

Website usage data: IP address, browser type, pages visited, date and time of access, through cookies and analytics tools (basic/statistical cookies only).

We do not request, nor do we intend to process, any special categories of personal data.

4. Purposes and Legal Bases of Processing

We process your personal data for the following purposes:

Responding to contact requests: when you send us an email, we use the data you provide to respond to your questions or requests.

Legal basis: consent and/or legitimate interest in responding to your contact.

Website management and improvement: we use essential cookies and, when accepted, statistical cookies to ensure the correct functioning of the website, measure audiences and improve content.

Legal basis: legitimate interest (strictly necessary cookies) and consent (non-essential cookies, such as statistical cookies).

We do not use your data for automated decisions with legal or similar effects.

5. Cookies

This website uses cookies to ensure its correct functioning and, optionally, for statistical purposes.

Strictly necessary cookies: essential for the functioning of the website (e.g., remembering your cookie choice, basic security, page loading). These cannot be disabled in our systems.

Statistical cookies (optional): help us understand how the website is used, in an aggregated and anonymous way, to improve the user experience.

You can find more information in our Cookie Policy and manage your cookie preferences through the banner or browser settings.

6. Data sharing with third parties

We may share personal data with:

Technical service providers: such as website hosting companies, email platforms or analytics tools, only to the extent necessary to provide these services.

These third parties generally act as subcontractors, being contractually obliged to process data only in accordance with our instructions and to implement appropriate security measures.

We do not sell your personal data to third parties.

7. International data transfers

If any of our service providers are located outside the European Economic Area, we ensure that there are adequate safeguards in place to protect personal data, in accordance with the GDPR (e.g., standard contractual clauses approved by the European Commission). 8. Data Retention Period

We retain personal data only for the period strictly necessary to fulfill the purposes described above:

Contact data: kept for the time necessary to fulfill your request, unless the law requires a different period.

Website usage data (cookies): in accordance with the periods defined in our Cookie Policy or in your browser settings.

After the retention period ends, the data is deleted or anonymized.

9. Data Subject Rights

As a data subject, you have the following rights, under applicable law:

Right of access: to know if we process data about you and, if so, what data.

Right to rectification: to request the correction of inaccurate or incomplete data.

Right to erasure (“right to be forgotten”): to request the erasure of your data, where applicable.

Right to restriction of processing: to request that processing be restricted in certain circumstances.

Right to object: to object to processing based on legitimate interest, for reasons related to your particular situation.

Right to data portability: to receive the personal data you have provided to us, in a structured, commonly used and machine-readable format, where applicable.

Right to withdraw consent: when processing is based on your consent, you may withdraw it at any time, without affecting the legality of prior processing.

To exercise any of these rights, you can contact us via email: medronhodocoracao@gmail.com


You also have the right to lodge a complaint with the competent supervisory authority.
​
Data Protection Authority (in Portugal, the National Data Protection Commission – CNPD).

10. Security of Personal Data

We adopt appropriate technical and organizational measures to protect personal data against loss, misuse, unauthorized access, disclosure, alteration, or destruction.

Despite these efforts, no system is completely secure; therefore, we cannot guarantee the absolute security of information transmitted over the internet.

11. Links to Other Websites

This website may contain links to third-party websites (e.g., social networks, partners, external stores).

We are not responsible for the privacy practices of these websites. We recommend that you consult their respective privacy policies when visiting these websites.

12. Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect legal, technical, or organizational changes.

The current version will always be the one published on this website, with the date of the last update.

Last updated: January 25, 2026.