PRIVACY AND COOKIES POLICY
Last updated: 26 October 2026
At Panetto, the privacy of your data is a priority. This policy explains how we process the personal data collected through this website, in accordance with the General Data Protection Regulation (GDPR).
1. Data Controller
Verdinatingível, Lda, NIPC (tax ID) 516 915 088, with registered office at Rua Hermano Neves, nº 18, 3 E7 – 1600-477 Lisbon, Portugal, is the entity responsible for processing your personal data.
The production unit is located at Rua Outeiro do Cavalo, nº 1 - Fração 5I, Pinheiros, 2440-334 Batalha, Portugal.
Contact for privacy matters and the exercise of rights: qualidade@panetto.pt
2. What Data Do We Collect and Why?
We process only the data necessary for each purpose, stated below with the corresponding legal basis.
The fields marked as mandatory in the forms are necessary for us to reply to your request or fulfil your order. If you choose not to complete them, we may be unable to provide the service requested.
Contact Form: Name, email, subject and message, to reply to your request. Legal basis: legitimate interest in replying to requests received (Art. 6(1)(f) GDPR).
Spontaneous Applications: Name, email, telephone, location, area of interest, availability, message and CV, to assess your application and a possible hiring. Legal basis: your consent (Art. 6(1)(a) GDPR), which you may withdraw at any time.
The CV is sent through the form, is stored only temporarily on the server during sending, is delivered by email to geral@panetto.pt and the temporary copy is deleted immediately afterwards. It is then handled and deleted by the Human Resources Department.
Abuse Protection: To limit automated or abusive submissions on the forms, the website calculates a code derived from the IP address, which is stored temporarily for a maximum of 1 hour. The IP address is not stored in plain form. Legal basis: legitimate interest in the security of the website (Art. 6(1)(f) GDPR).
Online Shop: Items added to the cart are kept in your browser (local storage). If orders are placed through the shop, the data needed to fulfil them will be processed (name, delivery address, contact and, if requested, tax number). Legal basis: performance of a contract (Art. 6(1)(b) GDPR). Panetto does not store payment card data.
Tax Data: Tax number and invoicing data, where applicable, to comply with the legal invoicing obligation (Art. 6(1)(c) GDPR).
3. Who Do We Share Your Data With?
Your data is shared exclusively with partners that are essential to the operation of the service.
Email: Messages and applications sent through the forms are delivered by Panetto’s own mail server.
Management System: Shop data, if any, is processed in the company’s own management system (PaneGEST).
Delivery and Payment: If orders are placed, the strictly necessary data may be disclosed to entities providing delivery and payment services.
Tax Authority, for compliance with legal invoicing and tax reporting obligations.
External Links: The website may contain links to third-party services (for example, Google Maps and the Complaints Book); when you use them, the privacy policies of those services apply.
4. Data Retention
Messages, Applications and Emails Received: Deleted by the Human Resources Department after a maximum period of 1 year from receipt, a period considered appropriate for managing contacts and recruitment processes, including CVs.
IP-Derived Code: Maximum of 1 hour; the IP address is never stored in plain form.
Tax Data: Retained for a period of 10 years, in accordance with Portuguese tax law.
5. Your Rights
Under the General Data Protection Regulation (GDPR), you may request at any time:
Access to and rectification of your personal data.
The erasure of your personal data (right to be forgotten).
The restriction of the processing of your data.
Objection to the processing of your data based on legitimate interest.
Portability of your data to another platform.
The withdrawal of your consent at any time, without affecting the lawfulness of processing carried out previously.
To exercise these rights, contact us at qualidade@panetto.pt.
We will reply within the legal period of one month, which may be extended under the GDPR.
6. Security and International Transfers
Our website uses HTTPS/SSL protocols to protect your data during transmission. We do not use providers located outside the European Union to process your personal data on this website.
7. Complaints
If you have any question or complaint, please contact us first. If you are not satisfied, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
Cookies and Local Storage
The website does not use analytics or marketing cookies, nor tracking technologies or personalised advertising.
Shopping Cart: Items added to the cart are kept in your browser’s local storage, not in a cookie. You can delete them at any time by clearing the site data in your browser.
If analytics, advertising or other tools that use cookies are used in the future, this policy will be updated before they are used.