PRIVACY POLICY
This Privacy Policy applies to the website of the Guinness® beer brand, dedicated to consumers and interested parties, available at https://guinness-portugal.com/ (the "Site"), where SCC – Sociedade Central de Cervejas e Bebidas, S.A., headquartered at Estrada da Alfarrobeira, 51, 2625-244 Vialonga, with a share capital of EUR 5,000,000.00 (five million euros), registered with the Commercial Registry Office of Vila Franca de Xira under the unique registration and corporate identification number 511147236 (the "SCC"), acts as the data controller of your Personal Data (as defined below).
We recommend that you read this Privacy Policy carefully, as it contains important information to help you understand our practices regarding the processing of any Personal Data you share with us or that we collect in the context of the Site.
We respect your Personal Data protection and are committed to keeping your Personal Data secure, as well as managing it in accordance with our legal responsibilities under applicable law.
For the purposes of this Privacy Policy, “Personal Data” refers to any information relating to an identified or identifiable natural person (“Data Subject”), directly or indirectly, in particular by reference to an identifier, such as a name, an identification number, or electronic identifiers.
1. MINORS
The Site is not intended for use by individuals under the age of 18. We do not collect Personal Data from individuals under 18 years of age, and if such data is provided to us, it will be immediately deleted as soon as we become aware of it.
2. WHAT PERSONAL DATA WE COLLECT AND HOW WE PROCESS IT
To browse most of the Site, you will not need to provide us with Personal Data.
Your Personal Data will not be used for other purposes without your explicit information and/or without obtaining your prior and informed consent.
Below we clarify which Personal Data we may collect and the purpose of its use:
2.1. INFORMATION ABOUT YOUR VISIT TO OUR SITE
When you visit our Site, we collect certain information, such as the pages you visit, your clicks and views, your device type, operating system, and browser type, through Cookies (see Section 6 below).
Information about your use of our Site and services allows us to build segments, i.e., groups of Site visitors or customers with common characteristics, such as age group, gender, or region. You will likely be added to one of our segments. We use these segments to personalize our Site, for example, by changing the order of search results or the placement of certain offers to make them more visible.
We use this Personal Data (when Cookies collected qualify as such) based on your free, specific, informed, and explicit consent, to promote our products and services to our customers and Site visitors, as well as to attract more customers.
Your Personal Data will also be used for the operation, maintenance, and analysis of our Site to resolve performance issues, improve availability, and ensure Site security against fraud (including repeated login attempts that violate our terms and conditions, for example, by individuals under 18 years of age). Our use of your Personal Data for these purposes is necessary to protect our legitimate interests and will be maintained.
Read more about our Cookie Policy to learn how your Personal Data collected through Cookies is processed and retained.
3. SHARING OF PERSONAL DATA
We need to share Personal Data with third parties to help us provide our services and deliver the products we make available to you, as well as to manage our Site. These third parties include:
a. Companies within the HEINEKEN group, for storing Personal Data processed through the Site due to shared IT systems.
b. Service providers, when we need to outsource services or data analysis.
c. Agencies managing activations and promotions.
d. Service providers assisting with website development and media management.
e. First-party and third-party advertising companies.
f. Communication agencies for marketing and market research purposes.
g. Third-party social media platform providers (including Facebook, Google, and Instagram).
h. Courts, litigants, and their professional advisors, when necessary for the establishment, exercise, or defense of legal claims.
i. An acquirer or interested parties in acquiring part of our business.
j. If HEINEKEN sells all or part of the assets or shares of a HEINEKEN group company, your Personal Data may be disclosed to that third party.
Additionally, we may use, disclose, or transfer your information to a HEINEKEN group company in the event of a reorganization, merger, sale, joint venture, assignment, transfer, or other disposition of all or part of our business, assets, or stock (including in the context of bankruptcy or similar proceedings).
SCC may transfer Personal Data to jurisdictions that impose different data protection obligations than your country of origin. This means your Personal Data may be sent to a jurisdiction with less restrictive data protection laws. Any such transfer will be carried out in compliance with applicable law.
If your Personal Data is covered by the GDPR/UK GDPR/Swiss FADP: for transfers of Personal Data within the SCC Group and SCC subcontractors or business partners, contracts include the European Commission’s Standard Contractual Clauses in accordance with the Commission Decision of 4 June 2021 (C(2021) 3972), which constitute appropriate safeguards to ensure compliance with GDPR/UK GDPR/Swiss FADP, including supplementary measures where necessary.
4. PERSONAL DATA SECURITY
We have implemented appropriate security measures to prevent your Personal Data from being accidentally lost, used, accessed, altered, or disclosed without authorization. Furthermore, access to your Personal Data is limited to employees, agents, contractors, and third parties who need it for professional reasons, subject to confidentiality obligations.
Unfortunately, it is not possible to guarantee complete security of information transmitted over the internet, so please note that the security of information partly depends on the security of the computer you use to communicate with us and the measures you implement to protect account information and passwords. Therefore, please protect this information appropriately.
Our Site may include links to third-party websites, extensions, and applications. Clicking on these links or enabling these connections may allow third parties to collect or share data about you. We do not control these third-party websites, extensions, or applications, nor are we responsible for their Privacy Policies. We advise you to read the Privacy Policy of each website you visit and each third-party service or application you use.
5. DATA RETENTION PERIODS
Personal Data collected for advertising and direct and/or personalized marketing purposes, based on your consent, will be retained for a maximum period of 12 (twelve) months, unless the law requires retention for other purposes.
Read more about our Cookie Policy to learn how your Personal Data collected through Cookies is retained.
We will take appropriate measures to delete or anonymize any Personal Data we hold if it is no longer necessary for the purposes defined above or after the retention period has expired.
6. COOKIES
Some of the information referred to in this Privacy Policy is collected through the use of cookies or similar techniques. Cookies are small text files containing small amounts of information that are transferred and may be stored on your device, e.g., on your computer (or other internet-enabled devices such as a smartphone or tablet). Among the similar techniques we use are tracking pixels.
These cookies and similar techniques are often necessary to remember your profile account settings, chosen language, and country, but they also allow us to measure and analyze your behavior on our Site and to display personalized advertising on our Site or on third-party sites. Where necessary, we will request your consent to use cookies. For more information about which cookies we use and how we use them, please read our Cookie Policy.
7. YOUR CHOICES AND RIGHTS
You have the right to request access to and deletion of your Personal Data, as well as to request its rectification, restriction, or object to its processing. All these rights are subject to data protection laws and related legislation, SCC/Heineken Group Data Protection procedures, and other Heineken Group guidelines.
Data Subjects may change their Cookie preferences at any time and request the deletion of their Personal Data. Withdrawal of consent for processing does not affect the lawfulness of processing carried out before the withdrawal.
You also have the right, in certain circumstances, to request that we stop processing your Personal Data. However, this does not apply if we have other legal grounds to continue processing your data (for example, when we need to comply with a legal obligation).
Please note that if you exercise any of these choices or rights, you may no longer be able to use our Site, in whole or in part.
Data Subjects have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD).
8. UPDATES
SCC reserves the right to amend this Privacy Policy at any time. In the event of a modification, the date of the last change, available at the bottom of this page, will also be updated. If the change is substantial, a notice will be posted on the Site.
9. CONTACT
Data Subjects may exercise their rights free of charge and at any time. If you have any questions, objections regarding how we process your Personal Data, or complaints about this Privacy Policy or how we handle your Personal Data, you can contact us using the details below, and we will review your request:
Please write to us:
By email: privacy@centralcervejas.pt
By registered mail: SCC – Sociedade Central de Cervejas e Bebidas, S.A., nº 51, Customer Service, Estrada da Alfarrobeira, 2625-244 Vialonga.
Please note that we may request proof of identification when you submit a request, to verify the identity of the requester.
The most recent version of this Privacy Policy is dated January 14, 2026.