This policy describes the processing of personal data collected by Recheio – Cash & Carry, SA (hereinafter “Recheio”), with headquarters on Rua Actor António Silva n. 7 1649-033 Lisbon, with tax number 500145415, acting as controller, in the scope of the Recheio website (www.recheio.pt) and the social networks in which Recheio is present through official “Recheio” page.

Website navigation does not require registration. However, Recheio may process your personal data to maintain the quality of delivered service and effectively answer users’ requests. Purposes for the personal data processing are listed below:

If you are a Recheio Customer, by registering on the site, providing your tax number, email address and mobile phone number, you will receive access to your Customer Area, where you can consult points, prices and campaigns and make online purchases. Your information is kept for the purpose of creating and managing your online account, and failure to provide this data makes it impossible to complete your registration process. Your data will be deleted after 3 years of inactivity on the Recheio website.

Based on your consent, you may also receive marketing communications about promotions, products, and services.

Within the scope of Recheio client card registration, personal data will be collected, and managed by an autonomous privacy policy, which can be consulted at the following link.

To be able to contact you to clarify and advise on our export processes, we collect your name, email address, telephone number, company name, sector of activity and country. Your data will be kept for a maximum period of 3 years after your contact, after which it will be deleted.

The data collected in the context of customer contact through the Customer Service line, website form, messages via social networks or other means that Recheio makes available to customers, are processed based on Recheio’s legitimate interest, to the management of the complaint or question presented, being maintained for a maximum period of 3 years after the closure of the occurrence.

The email and telephone number collected within the scope of the product technical data sheet, in the customer area, are processed by the Private Brand certification area, based on consent. Data will be kept for a maximum period 1 year after contact.

Within the scope of claims management, the following personal data will be processed: name, contact details and address, identification document data, tax number, data related with the incident and bank data. Image and transaction data may also be processed whenever necessary for the determination of facts and responsibilities within the scope of the process.

These data will be processed to comply with legal obligations, namely in the Civil Code and to pursue the legitimate interest of the company and will be kept for a period of 5 years after the closure of the process, after which they will be deleted.

The data collected in the context of customer contact through messages via Facebook, Instagram, or another social network that Recheio makes available to customers, are processed for the management of the complaint or question presented, based on the legitimate interest of the company, being kept for a maximum period of 3 years, after which they will be eliminated.

Legitimate Interest

Within the scope of Recheio’s legitimate interest and always safeguarding the rights and freedoms of website users, Recheio may also process users’ personal data for the following purposes:

i) fraud prevention and detection.
ii) network and information security.
iii) website development and maintenance.
iv) provision of technical assistance.

Under the legislation in force, data subjects are guaranteed the right to access, rectify and erase their personal data, to restrict and oppose their processing, as well as the right to data portability and processing restriction. Whenever the sole legal condition for the processing is the user’s consent, it may also withdraw previously given consent, at any time, without affecting the lawfulness of processing based on consent before its withdrawal. Exercise of rights may be performed, with the limitations provided for in the applicable legislation, by email through cliente@recheio.pt and Recheio customer service line (800 203 131).

The user also enjoys the right to lodge a complaint with the Portuguese Supervisory Authority (Comissão Nacional de Proteção de Dados).

In its commitment to ensuring the security of its customers’ personal data, Recheio has implemented technical, organizational security measures deemed necessary for the processing activities.

The data collected is not transferred to third parties without your prior consent. However, Recheio uses external partners, namely for the development, maintenance and hosting of computer systems, marketing and communication agencies, market studies, customer support, screening, evaluation, and selection of candidates. In these cases, Recheio ensures that its partners comply with the technical and organizational measures appropriate to the processing activity. In this context, the data collected may be transferred to entities located in third countries (outside the European Union), ensuring that the appropriate security measures are taken in accordance with the legislation in force.

Personal data may also be shared with other entities in accordance with: a) applicable legislation, b) compliance with legal obligations, c) or in response to requests from public and government authorities.

To the extent the user has this system active, this site uses the Google Analytics service, a web analytics service provided by Google, to better understand site usage and services. Google Analytics collects information such as the frequency with which users visit the site as well as other visited web pages. Google uses collected data to track and examine your use of sites, prepare reports on your activities, and share them with other Google services. Google may use the data collected on the sites to contextualize and customize the ads in its own ad network. IP anonymity has been activated on our website so that the IP address of Google users in the Member States of the European Union or in other Contracting States to the Agreement on the European Economic Area is abbreviated in advance. Only in exceptional cases will the full IP address be sent to a Google server in the United States of America.

Google’s ability to use and share information collected by Google Analytics about your visits to sites is governed by Google Analytics Terms of Use and Google’s Privacy Policy, which you should consult to clarify any questions associated with this service or to disable Google Analytics for your device.

The application uses the Google reCAPTCHA service, to prevent spam or abusive behavior. This service verifies whether the data is introduced by a human or an automatic program, through analysis of website visitor behavior based on various characteristics. This analysis starts automatically as soon as the visitor enters the site, evaluating different information (eg IP address, duration of visit, or mouse movements), this data is transmitted to Google. The service is governed by the Google Analytics Terms of Use  and the Google Privacy Policy

This website uses Hotjar in order to better understand its users’ needs and to optimize the service and experience. Hotjar is a technology service that helps to better understand the users’ experience (e.g. how much time they spend on which pages, which links they choose to click, what users do and don’t like, etc.) and this enables maintenance of the service based on user feedback. Hotjar uses cookies and other technologies to collect data on our users’ behavior and their devices (in particular device’s IP address (captured and stored only in anonymized form), device screen size, device type (unique device identifiers), browser information, geographic location (country only), preferred language used to display our website). Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor Recheio will ever use this information to identify individual users or to match it with further data on an individual user.

For further details, please see Hotjar’s privacy policy by clicking on this link . You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of this website and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

Recheio has a Data Protection Officer, whom you may contact for any issues related to the processing of your personal data, by sending an email to dpo.portugal@jeronimo-martins.com

Recheio is entitled to change this data protection policy, at any moment in time. Any changes will be properly presented in this site.