This Privacy Policy describes who we are, for what purposes we can use your data, how we process it, with whom we share it, how long we keep it, as well as how to contact us and exercise your rights.
Who are we?
Your data will be processed by Lactogal Produtos Alimentares S.A., NIF 503183997, headquartered at Rua do Campo Alegre, 830 5º andar, 4150-171 Porto, henceforth referred to as 'Lactogal' or 'we'. This company is responsible for the processing of personal data under the General Data Protection Regulation.
For questions related to the processing of your personal data, you should contact us through the following means:
protecaodadospessoais@lactogal.pt
R. do Campo Alegre, 830, 4º andar, 4150-171 Porto
Why do we need your information?
Lactogal will process your personal data for the following purposes:
Customer and potential customer management
The processing of your data is necessary for the execution of the contract to be concluded between you and Lactogal, or for pre-contractual steps at your request. If you do not provide your data, we will not be able to provide the requested or contracted services.
Your data will be kept for this purpose during the duration of the contracts plus 10 years after termination. The data of potential customers will be kept for 2 years.
The personal data of customers may be processed by Lactogal for litigation management purposes. The legal basis is the existence of a legitimate interest on the part of Lactogal, and the data will be kept for the period necessary to exercise the respective rights.
Marketing
Lactogal may process your data to send you information about its products and services. This data processing will only be carried out with your consent, given at the time. If you consent, you will receive marketing communications by email. The lack of availability of your personal data (name and email) prevents Lactogal from sending you commercial communications. You can object to this data processing at any time.
Your data will be kept for this purpose until you exercise your right to object.
Profiling
Lactogal may process your personal data to assess your economic situation, personal preferences, interests, reliability, and behavior, in order to improve our products and services and the type of communication we make. Lactogal will not make any decision based on your profile definition that produces effects in your legal sphere.
This data processing will only be carried out with your consent, given at the time of collection. You can object to this data processing at any time.
Your data will be kept for this purpose until you exercise your right to object.
Complaint and contact management
You can send us, through the email address info@lactogal.pt, suggestions or complaints regarding the services provided by Lactogal. Your personal data will be processed based on the legitimate interests of Lactogal and your consent. Lactogal collects your data to analyze and resolve the situation underlying your suggestion or complaint. Your data will be kept for this purpose for the time necessary to resolve your issue.
Supplier/subcontractor management
The processing of your data is necessary for the execution of the contract to be concluded between you and Lactogal, or for pre-contractual steps at your request. If you do not provide your data, we will not be able to fulfill the contractual obligations assumed. Your data will be kept for this purpose during the duration of the contracts plus 10 years after termination. The data of potential suppliers/subcontractors will be kept for 2 years.
The personal data of suppliers may be processed by Lactogal for litigation management purposes. The legal basis is the existence of a legitimate interest on the part of Lactogal, and the data will be kept for the period necessary to exercise the respective rights. The data of Lactogal's suppliers, particularly employees, may be communicated to Lactogal's customers to comply with legal or contractual obligations.
Will my information be shared with others?
Your personal information may be disclosed:
- Within the Lactogal business group. Based on your consent, your data may be disclosed to other companies in the group for institutional communication and Lactogal Brands purposes.
- Third-party service providers/subcontractors of Lactogal. If you are our customer or supplier, your personal data may be processed by companies subcontracted by Lactogal, namely for website hosting, email, consultancy services, temporary work, and other entities that provide services to Lactogal. Only the personal data necessary for the provision of the service in question is provided to these companies. Personal data may also be accessed by internal and external auditors of the Lactogal Group, with the guarantee that they will be kept confidential and not used for purposes unrelated to the audits.
Your data will be processed within the European Union.
What are my rights?
At any time, you can request:
- Access to the information we hold about you;
- Correction of the information if it is inaccurate or incomplete;
- Deletion or limitation of the processing of your personal data;
- Right to object to processing;
- Data portability;
- If the processing depends on your consent or agreement and is carried out by automated means, you have the right to send the personal data previously provided, in a structured, commonly used, and machine-readable format.
Your requests will be handled with special care to ensure the effectiveness of your rights. You may be asked to prove your identity to ensure that the sharing of personal data is only done with its owner.
Note that in certain cases (e.g., due to legal requirements) your request may not be immediately fulfilled. In any case, you will be informed of the measures taken in this regard within one month from the time the request was made. You also have the right to file a complaint with the National Data Protection Commissionhttps://www.cnpd.pt/
Specific rights
Right of access
The data subject has the right to obtain from Lactogal the confirmation that personal data concerning them are or are not being processed and, if so, to access their personal data and access the information provided by law. If you want more than one copy of your personal data being processed, Lactogal subjects this service to the payment of a fee for administrative costs.
Right to rectification
The data subject has the right to obtain from Lactogal, without undue delay, the rectification of inaccurate or incomplete personal data concerning them.
Right to erasure ('Right to be forgotten')
The data subject has the right to obtain from Lactogal the erasure of their data without undue delay, and Lactogal has the obligation to erase personal data without undue delay when, in particular, one of the following reasons applies:
a) The personal data are no longer necessary for the purpose for which they were collected or processed;
b) The data subject withdraws consent for the data processing (where the processing is based on consent) and there is no other legal basis for the processing;
c) The data subject objects to the processing and there are no overriding legitimate grounds for the processing;
d) The personal data have been unlawfully processed.
Right to restriction of processing
The data subject has the right to obtain from Lactogal the restriction of processing if, in particular, one of the following situations applies:
a) Contesting the accuracy of the personal data, for a period enabling Lactogal to verify its accuracy;
b) The processing is unlawful, and the data subject opposes the erasure of personal data and requests the restriction of its use instead;
c) Lactogal no longer needs the personal data for processing purposes, but the data are required by the data subject for the establishment, exercise, or defense of legal claims;
d) Opposition to processing, pending the verification that the legitimate grounds of the controller override those of the data subject.
Right to data portability
If the processing depends on the data subject's consent and if this processing is carried out by automated means, the data subject has the right to receive personal data concerning them, which they have provided to Lactogal, in a structured, commonly used, and machine-readable format.
Right to object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them based on Article 6(1)(e) or (f), or Article 6(4) of the GDPR, including profiling based on these provisions. The controller shall cease the processing of personal data unless there are compelling and legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such marketing purposes, which includes profiling to the extent that it is related to such direct marketing.
Can I withdraw my consent later?
If consent is legally necessary for the processing of personal data, the data subject has the right to withdraw consent at any time, although this right does not compromise the lawfulness of the processing carried out based on the consent previously given nor the subsequent processing of the same data, based on another legal basis, such as the fulfillment of the contract or legal obligation to which Lactogal is subject. If you wish to withdraw your consent, you can contact via the following contact: protecaodadospessoais@lactogal.pt
How does Lactogal use cookies and similar technology?
To provide a better service to the user, we use cookies, i.e., small text files that are placed on the hard drive by a web page server. This technology is mainly used by Lactogal to:
• Allow us to know who our visitors are and thus provide a better, safer, and more personalized service;
• Know the performance of our sites, anticipate their update and improvement to meet the expectations of our customers. Each visitor corresponds to an individual cookie, thus ensuring privacy and data security. Statistical data is presented in an aggregated form, not allowing the identification of the individual visitor.
On the Brands' sites, Lactogal uses tags whose main objectives are:
• Automatic sharing of content on social networks and other online destinations;
• Management of site visits, actions performed, and identification of interests for personalized advertising and online ads;
• Analysis and measurement of traffic.
Do you have any questions?
If you have any questions regarding the processing of your personal data, or wish to exercise any of your rights, please contact us: protecaodadospessoais@lactogal.pt
Occasionally, Lactogal will update this Privacy Policy. We ask you to periodically review this document to stay updated.
Last updated: October 2025
