Last updated: September 28, 2026

Padaria Ribeiro (SOCOPÃO - Padaria e Confeitaria, Lda.), as the data controller, is committed to guaranteeing the privacy and protection of the personal data of users of the website padariaribeiro.com, in accordance with the General Data Protection Regulation (GDPR) and other applicable legislation.

1. Data Controller

  • Company Name: SOCOPÃO - Padaria e Confeitaria, Lda.
  • Tax ID (NIF): 501889663
  • Address: Praça Guilherme Gomes Fernandes 21, 4050-293 Porto, Portugal
  • Privacy Contact E-mail: [email protected]

2. Personal Data Collected and Purposes

We collect and process your personal data for the following purposes:

  • Contact Forms: We collect your name, e-mail and message solely to respond to your request for information or suggestion.
  • Job Applications: We collect name, e-mail, phone contact, CV (PDF format) and message submitted through the Opportunities page (including open applications), for the exclusive purpose of evaluating and managing recruitment processes.
  • Newsletter: If you subscribe to our newsletter, we collect your e-mail address and the language in which you subscribed, in order to send you news, seasonal products and offers from our shops. Your subscription only becomes active once you confirm it through the link we send you by e-mail (double opt-in). To understand which communications are useful, we record whether you open our newsletters and which links you click.
  • Browsing and Cookies: We collect browsing data (IP address, browser type) to ensure the website works correctly and for statistical purposes (if you accept the corresponding cookies). See our Cookie Policy for more details.
  • Anti-Spam Verification (Cloudflare Turnstile): Our forms use the Cloudflare Turnstile service to distinguish real users from automated access, which may involve Cloudflare processing technical data from your device/browser. See the Cloudflare Turnstile Privacy Policy.

3. Legal Basis for Processing

The processing of your personal data is based on your free, specific, informed and explicit consent given when submitting contact forms or accepting our cookie policy, as well as on compliance with legal obligations or the company's legitimate interest, depending on the purpose in question.

Sending the newsletter is based solely on your consent, which you may withdraw at any time.

4. Data Retention

Personal data collected through contact forms will only be kept for the period strictly necessary to respond to your request, or for as long as the resulting business relationship/communication lasts, unless the law requires retention for a longer period.

Personal data and CVs submitted for job applications (including open applications) will be kept for 12 months, the period necessary to evaluate the recruitment process and any compatible opportunities that may arise during that time, after which they will be deleted, unless the data subject requests their deletion earlier.

Newsletter subscribers' e-mail addresses are kept for as long as the subscription is active. Once you unsubscribe, you will no longer receive any communications. Subscription requests not confirmed within 30 days are not added to the newsletter list.

5. Sharing Data with Third Parties

Your personal data will not be sold, rented or shared with third parties for commercial purposes. It may only be transmitted to technical service providers (e.g. web hosting providers, IT support, or the Cloudflare Turnstile anti-spam protection service) acting on our behalf under strict confidentiality agreements and GDPR compliance.

The newsletter is managed and sent through the Brevo platform (Sendinblue SAS, France), which acts as our data processor and stores the data within the European Union.

Data submitted in job applications is processed internally by our team, solely for the purpose of evaluating the application.

6. Your Rights

Under the GDPR, as the data subject, you have the right to:

  • Request access to your personal data;
  • Request the rectification of inaccurate or incomplete data;
  • Request the erasure of your data ("right to be forgotten");
  • Request the restriction of processing or object to it;
  • Withdraw your consent at any time.

To exercise any of these rights, simply send a request by e-mail to: [email protected].

You can unsubscribe from the newsletter at any time using the "unsubscribe" link included in every e-mail, or by writing to [email protected].

7. Right to Lodge a Complaint

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority in Portugal:

Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt