Privacy Policy

This privacy policy explains how marnovetil.top S.A. collects, uses, and protects your personal information when you visit our website or use our services.

Last updated: 15th January 2026

Data Controller Information

The data controller for your personal information is:

  • Company: marnovetil.top S.A.
  • Registration Number: 259637841
  • VAT Number: PT257483961
  • Address: Avenida da Liberdade 35, 1061-536 Lisbon, Portugal
  • Email: [email protected]
  • Phone: +351 215 356 012

Data Collection

We are committed to protecting your privacy and being transparent about the data we collect. The personal data we collect includes information you provide directly to us and information we collect automatically when you visit our website.

Information You Provide

When you contact us through our website forms or communicate with us directly, we may collect the following personal information:

  • Full name and contact details (email address, phone number)
  • Restaurant or business information
  • Service enquiry details and preferences
  • Any other information you choose to provide in your communications

Information Collected Automatically

When you visit marnovetil.top, we automatically collect certain technical information:

  • IP address and browser type
  • Pages visited and time spent on our website
  • Referring website and exit pages
  • Device information and operating system
  • Cookie data (subject to your consent preferences)

How We Use Your Information

We use the personal data we collect for legitimate business purposes and to provide you with our services. Specifically, we use your information to:

  • Respond to your enquiries and provide customer support
  • Deliver our restaurant menu engineering services
  • Communicate about our services and business updates
  • Improve our website functionality and user experience
  • Comply with legal obligations and protect our business interests
  • Analyse website performance and user behaviour (with your consent)

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Legitimate Interest: For business communications and service delivery
  • Consent: For marketing communications and analytics cookies
  • Contract Performance: To fulfil our service agreements
  • Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Third Parties

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following limited circumstances:

  • Service Providers: With trusted third-party providers who assist us in operating our website and delivering services
  • Legal Requirements: When required by law or to protect our rights and interests
  • Business Transfers: In connection with any merger, acquisition, or sale of assets

International Transfers

Some of our service providers may be located outside the European Economic Area (EEA). When we transfer personal data internationally, we ensure appropriate safeguards are in place, including adequacy decisions or standard contractual clauses approved by the European Commission.

Data Retention

We retain your personal information only for as long as necessary to fulfil the purposes for which it was collected and to comply with our legal obligations. Specifically:

  • Contact enquiries: Retained for up to 3 years for customer service purposes
  • Service contracts: Retained for the duration of the contract plus 7 years for legal compliance
  • Website analytics: Anonymised data retained for up to 26 months
  • Marketing communications: Until you withdraw consent or unsubscribe

Your Rights

Under GDPR and Portuguese data protection laws, you have the following rights regarding your personal data:

  • Right of Access: Request a copy of the personal data we hold about you
  • Right to Rectification: Request correction of inaccurate or incomplete data
  • Right to Erasure: Request deletion of your personal data in certain circumstances
  • Right to Restrict Processing: Request limitation of how we process your data
  • Right to Data Portability: Receive your data in a structured, machine-readable format
  • Right to Object: Object to processing based on legitimate interests or for marketing purposes
  • Right to Withdraw Consent: Withdraw consent for processing that requires it

Exercising Your Rights

To exercise any of these rights, please contact us using the details provided below. We will respond to your request within one month and may require verification of your identity for security purposes.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • Secure data transmission using SSL/TLS encryption
  • Access controls and authentication requirements
  • Regular security assessments and updates
  • Staff training on data protection and privacy

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will notify you by updating the "last updated" date and, where appropriate, provide additional notice through our website or direct communication.

Contact Information

If you have any questions about this privacy policy or how we handle your personal data, please contact us:

Supervisory Authority

If you believe we have not handled your personal data appropriately, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD) or your local supervisory authority.