WATZEAT PRIVACY POLICY
At WatzEat (hereinafter referred to as "WatzEat”, "we”, "us” or "our”) we are committed to respecting your privacy. This Policy applies to Users of the WatzEat web platform ("Platform”).
1. Data Controller
Braveplateau, Lda., which operates under the trade name "WatzEat”, NIPC 517402181, with headquarters at Rua João de Barros, N.º 90, Bloco A, R/C, Esqº 4150-414 Porto is the Data Controller for your personal data within the scope of using the Platform.
For questions related to the processing of your personal data, you should contact us through the following means:
· Telephone: +351 223790070
· E-mail: info@watzeat.com
· Address: Rua João de Barros, N.º 90, Bloco A, R/C, Esq.º 4150-414 Porto.
2. Personal data we process
WatzEat collects and processes, namely, the following categories of users' personal data:
· Identification and contact data: such as name, contacts (mobile number, e-mail address, address), NIF.
· Personal characteristics: such as gender, image.
· Data relating to orders: such as order history and preferences.
· Location data.
· Data related to information technologies: such as login data (WhatsApp credentials), data from the device used to access WatzEat services, data collected by cookies and other similar technologies.
· Financial (payment) and tax data: such as, payment card information, payment methods, payments, invoices and payment history.
· Data relating to opinions, evaluations and complaints.
a. Special Categories of personal Data
WatzEat may also collect and process special categories of personal data, in the following situations:
· We may process health data when you give us information about specific dietary requirements (such as allergies and intolerances).
WatzEat only processes special categories of personal data if the data subject has given their explicit consent for the processing of this personal data or if such processing is necessary by virtue of a legal obligation on the part of WatzEat.
3. How we collect Personal Data
In most cases, WatzEat collects your Personal Data directly from you, namely when you create or update your customer account, when you visit the Platform, when you place an order on the Platform, when you participate in campaigns promoted by WatzEat, when you subscribe to newsletters, when you give us your opinion or when you contact us.
We may also collect your information indirectly from third parties, namely data about your account and online activity from account authentication providers, fraud prevention entities or online advertisers.
4. How we use Personal Data
Whenever WatzEat processes your personal data, it does so based on a legal basis for this processing. The processing of special categories of Personal Data, when it exists, is always justified based on an additional condition of legitimacy, as described in clause 2.a.
Below are the purposes for which WatzEat may use your Personal Data and the legal basis on which each of the cases is based.
|
Purposes |
Data Categories |
Legal Basis |
Retention of Personal Data |
|
Creation and management of the Customer account |
· Identification and contact data. · Identity verification data. · Personal characteristics. · Data relating to orders. · Data related to information technologies. |
· Execution of a contract to which the Customer is a party
|
While the account is active and up to 3 years after the account is closed |
|
Processing and delivery of orders |
· Identification and contact data. · Identity verification data. · Data relating to orders. · Location data; Special categories of data · Health data |
· Execution of a contract to which the Customer is a party. · Compliance with legal obligations to which WatzEat is subject |
While the account is active
|
|
Payment management |
· Identification and contact data. · Identity verification data. · Financial (payment) data |
· Execution of a contract to which the Customer is a party. · Compliance with legal obligations to which WatzEat is subject |
10 years after the transaction |
|
Customer support |
· Identification and contact data. · Data relating to opinions, evaluations and complaints |
· Execution of a contract to which the Customer is a party. · Consent. · Pursuit of WatzEat's legitimate interests in processing and responding to any contact or request for information |
Deleted after the request is resolved or, if necessary, up to 2 years after the last contact |
|
Management of complaints and disputes |
· Identification and contact data. · Data relating to opinions, evaluations and complaints |
· Execution of a contract to which the Customer is a party. · Pursuit of WatzEat's legitimate interests in litigation management |
Deleted after resolution of the complaint or dispute, or up to 3 years |
|
Marketing |
· Identification and contact data. · Data relating to orders |
· Consent. · Pursuit of WatzEat's legitimate interests in promoting services similar to those previously acquired |
After consent is withdrawn by the data subject or the data subject objects to this processing, or up to 2 years after the last interaction/last order |
|
Satisfaction surveys |
· Identification and contact data. · Data relating to orders |
· Consent. · Pursuit of WatzEat's legitimate interests in evaluating and continuously improving the services provided, obtaining feedback to optimize the User's experience and guarantee the quality of the Platform |
Up to 1 year after data collection |
|
Service improvement |
· Data relating to orders. · Data related to information technologies |
· Pursuit of WatzEat's legitimate interests in analyzing usage patterns to optimize the User's experience and improve the functioning of the Platform |
Up to 1 year after data collection |
|
Security and fraud prevention |
· Identification and contact data. · Identity verification data. · Data related to information technologies. · Data relating to orders |
· Compliance with legal obligations to which WatzEat is subject. · Pursuit of WatzEat's legitimate interests in monitoring and detecting fraudulent activities, protecting against unauthorized access and guaranteeing the security of the Platform |
Up to 7 years |
5. Automated Decision Making
We may carry out automated analysis of your personal data to make certain decisions automatically, without human intervention, including decisions about: (i) order assignment, (ii) prices, (iii) fraud prevention and detection; (iv) definition of dynamic profiles; and (v) automatic resolution of complaints.
You have the right to request that the decision be reviewed by a human, as well as to object to the processing of your personal data for the purpose of automated decision-making, as described in section 9.
6. How long we keep your Personal Data
The period of time during which Personal Data is stored and kept, as defined in section 3, varies depending on the purpose for which the information is processed. In fact, there are legal requirements that require data to be kept for a minimum period of time. Therefore, and whenever there is no specific legal requirement, the Data will be stored and kept only for the minimum and strictly necessary period for the pursuit of the purposes that motivated its collection or its subsequent processing, in the terms defined by law.
In any case, Personal Data may be kept for a longer period when it is necessary to comply with legal obligations to which WatzEat is subject or for the purpose of declaring, exercising or defending a right in a judicial process
7. How we Protect your Personal Data
WatzEat is committed to protecting the security of Personal Data. WatzEat uses various technical and organizational methods to protect personal data in accordance with the GDPR and other applicable data protection laws.
8. To whom we communicate Personal Data
WatzEat informs that, within the scope of the execution of the contractual relationship, it may use third-party service providers, such as, for example: payment service providers (financial institutions); home delivery service providers; legal advisory and consulting service providers; audit service providers; suppliers and providers of information technology services. Whenever such third-party service providers process personal data on behalf of WatzEat, they will process the data as subcontractors, always and only in accordance with the instructions given to them by the latter and as a result of the contract entered into between the latter and those service providers.
For the purposes of complying with legal obligations, WatzEat informs that your Personal Data will, where applicable, also be transmitted to competent entities and authorities to whom, by virtue of current legislation, WatzEat must communicate such Personal Data.
Your Personal Data will also be shared with Partners.
a. International Data Transfer
Your personal data will only be transferred to countries outside the European Economic Area that the European Commission considers guaranteeing an adequate level of protection. If the third country (outside the EEA) does not offer this level of protection, your personal data can only be transferred to that country if the data exporter and the data importer enter into applicable standard contractual clauses for the transfer approved by the European Commission. If applicable, you can obtain a copy of these clauses by sending an email to info@watzeat.com.
9. Your Rights
Regarding your personal data, you have the following rights:
Right of access – you have the right to obtain confirmation from WatzEat that personal data concerning you is being processed or not, to access your personal data held by WatzEat and to obtain a copy of the data being processed.
Right of rectification – you have the right to obtain, without undue delay, the rectification of inaccurate or incomplete data.
Right to erasure ("right to be forgotten”) – you have the right to obtain the erasure of your data, under the terms provided for in the General Data Protection Regulation and other applicable personal data protection legislation, namely, if the data is no longer necessary for the purpose that motivated the collection or processing; if you withdraw your consent and there is no other basis for the processing of your personal data; and if you object to the processing and there are no overriding legitimate interests that justify it.
Right to restriction of processing – you have the right to obtain the restriction of the processing of your data, under the terms provided for in the General Data Protection Regulation and other applicable personal data protection legislation, namely, as an alternative to the erasure of your data, in case of unlawful processing; if WatzEat no longer needs the data for processing purposes, but they are required by the User for the purpose of declaring, exercising, or defending a right in legal proceedings; if you contest the accuracy of the data, for a period that allows WatzEat to verify its accuracy; and if you object to the processing, until it is verified that WatzEat's legitimate reasons prevail.
Right to data portability – if the processing of personal data is based on the execution of a contract or consent and is carried out by automated means, you have the right to receive your personal data in a structured, commonly used and machine-readable format and, whenever possible, in an open format or you have the right to request WatzEat that this data be directly transmitted to another data controller.
Right to withdraw consent – in cases where the processing is based on consent, you have the right to withdraw it. The withdrawal of consent does not compromise the lawfulness of the processing carried out based on the consent previously given.
Right to object to processing – in cases where WatzEat claims a legitimate interest in the processing of data, you can object, at any time, to the processing of your personal data. In these cases, WatzEat will cease the processing, unless it demonstrates that it has a legitimate interest that prevails over the rights, interests and freedoms of the data subject or the data is necessary for the purposes of declaring, exercising or defending a right in a judicial process. Whenever the processing is based on a legitimate interest, WatzEat considers that it prevails over the rights, interests and freedoms of the data subject; without prejudice, whenever you exercise your right to object, we will carry out a case-by-case analysis of the situation.
You can exercise the above rights in writing, to the contacts indicated in section 10.
You also have the right to file a complaint with the National Data Protection Commission (www.cnpd.pt), if you consider that the processing of your personal data violates applicable legislation.
Regarding the use of cookies on the Platform, please consult the Cookie Policy available at [https://www.watzeat.com/cookiepolicy].
10. Contacts
If you wish to exercise any of your rights regarding the processing of your data or contact us for any questions related to this Privacy Policy or data protection matters, please contact us:
· Telephone: +351 223790070
· E-mail: info@watzeat.com
· Address: Rua João de Barros, N.º 90, Bloco A, R/C, Esq.º 4150-414 Porto
Last Updated: [31/07/2025]