Privacy Policy

Osswald & Oliveira – Produtos Regionais e Biológicos (hereinafter referred to as Mercearia das Flores), as an entity responsible for the processing of the personal data provided to it, in accordance with Regulation (EU) 2016/679 of the European Parliament and the Council of 27th of April 2016, commonly referred to as General Data Protection Regulation (GDPR) and other applicable national and community legislation, has adopted the Personal Data Privacy Protection Policy disclosed in this document, establishing the way it collects, stores and processes the Personal Data, ensuring its confidentiality and safety. 

Section 1 - Purpose
The processing operations carried out by Mercearia das Flores comply with the fundamental principles of data protection and privacy, which ensure the proper functioning of the processes, the trust with customers and partners, as well as the public image:  lawfulness, impartiality and transparency, purpose limitation, data minimization, accuracy, retention limitation, integrity, confidentiality and transmission.

Certain areas of our site can only be reach through registration of the user.

This Personal Data Privacy Policy applies to all personal information collected, processed and stored by Mercearia das Flores through the several existing forms and channels.

The Personal Data transmitted by the data subject through the different means of interaction with Mercearia das Flores is intended to one or several of the following purposes:

a) As part of the buying and selling process, we collect the personal information that you provided us: name, address and e-mail, payment and billing data. The details given by the user during registration are for Mercearia das Flores’ exclusive use and the privacy and protection of the users' details are guaranteed.

b) When you browse our website we automatically receive your IP (Internet Protocol) address. This will give us information about your browser and operative system.

When there is no specific legal requirement, the Personal Data shall be stored for no longer than is absolutely necessary, in order to comply with their purposes.  The period during which the data is stored depends on the purpose for which the information is processed.

When accessing areas which require personal data, referred to as “Personal Data”, the service user (hereinafter referred to as data subject) shall be aware of this Personal Data Privacy Policy and the Terms and Conditions of use and service provision of Mercearia das Flores.

Section 2 - Consent
The Personal Data transmitted by the data subject through the different means of interaction with CP is intended to one or several of the following purposes:

1 - Conclude a sale agreement and manage the contractual relationship established, including the validation, supervision and gathering of official reports;

2 - Handle and respond to information requests, suggestions and complaints;

3 - Receive spontaneous applications and recruitment procedures;

4 - Enhance the browsing experience in the website (cookies, as described in Section 8 of this Privacy Police);

5 - Make available information regarding the products and special offers of Mercearia das Flores and its partners, sending of newsletters and implementation of contests;

6 - Conduct customer satisfaction surveys;

7 - Respond to service assessment questionnaires;

8 - Manage the relationship with the customer;

9 - Customer segmentation to improve the service offering or fees and loyalty programs, in accordance with tastes and preferences of use of the provided services;

(for the purposes mentioned in items 1 to 9, the consent of the Data Subject is not required, in accordance with paragraph b) of item 1 of article 6 of the GDPR)

The Personal Data transmitted by the Data Subject may require his/her express consent, in accordance with the intended purpose. In such cases, the data subject freely gives his/her consent in a specific, informed and explicit way, in each of the means of interaction with Mercearia das Flores.

The data subject may always require the withdrawal of any of his/her consents for the corresponding processing.

The withdrawal can be carried out through the website, in the personal area, by contacting us at or contacting in person our sales points upon unambiguous identification of the data subject. The consent withdrawal, regarding a certain personal data processing, does not compromise the lawfulness of the processing already carried out based on such consent.

If we ask for personal data due to any other reason as marketing, we will ask you directly for your consent and will give you the opportunity to refuse it.

Section 3 – Transmission of your personal data
The provided data may be transferred to official entities, in compliance with legal obligations. The provision of information or services by Mercearia das Flores may also, eventually, lead to the transmission or access to the personal data by partners or subcontractors in accordance with Section 6 of this Privacy Policy.

When you give us personal information to conclude any transaction, to verify the credit card, to place an order, to organize a delivery or return a purchase, it means you agree with the payment and are using it for that specific reason.

The legislation of data protection grants to the data subjects the right to information regarding the purposes and processing of their data, the right to access, correct, delete and restrict the processing, and the right to transfer their data and contest automated individual decisions.

To exercise the abovementioned rights, the data subject shall contact us at

The data subject may also submit a complaint to the competent national supervisory authority.

Section 4 - Server
Our website is housed in our supplier that provides us the e-commerce on-line platform and allows us to sell products and services.
This partner ensures the compliance with the applicable legislation of GDPR of 25th of May, 2018.

Section 5 - Payment:
Shopping on line is only accessible through registration which has to be an informed consent of the buyer (I read and agreed Mercearia das Flores’ Private Policy). To conclude a transaction, verify credit card number, make an order, ask for delivery or return an order, implies that you have accepted the price.

When you chose a direct payment gateway to conclude your purchase, your data will be managed through the Payment Card Industry Data Security Standard (PCI-DSS).

Mercearia das Flores will never store any data about your credit card. Payment will be done by you in a Redeunicre website.

For further details, you may consult

Section 6 - Third party services
Mercearia das Flores ensures that it will only resort to entities that offer adequate guarantees for the implementation of appropriate technical and organizational measures, so that the data processing ensures the compliance with the applicable legislation. This applies to our partners or subcontractors that have access to any personal data transmitted by us.

In general, the service providers used by us will only collect, use and disclosure your information in a way that is necessary to allow them to perform the services they provide us.

Nonetheless, some third parties’ service providers, such as payment gateways and other payment transaction processors have their own privacy policies regarding the information you need to provide in order to complete your purchase transaction. For these service providers, we recommend that you read their privacy policies so that you can understand how your personal information will be used by them.

Links: when you click in our website links, they may direct you to another website. We are not responsible for the privacy practices of other websites and encourage you to read their declarations of privacy.

After leaving our website when you go to a third-party website or application, you are no longer subjected to this privacy policy or terms and conditions of service of this website.

Mercearia das Flores doesn’t take any responsibilities of the contents and policies of any third-party website.

Mercearia das Flores does not sell, buy or markets personal data, in any way.

Section 7 - Security
Mercearia das Flores undertakes to adopt administrative, technical, physical and organizational measures which ensure the safety, integrity and privacy of the data subject’s personal data, appropriate to the risk of each processing and consistent with the practices established in the European Union.  Such measures are applied to protect the personal data against its dissemination, improper use, non-authorized access or the loss, change or destruction, as well as any other form of unlawful processing. To protect your personal information, we take the maximum precautions and follow the best practices to make sure they are not being lost, misused, accessed, given disclosure, changed or destroyed.

The data subject ensures that the personal data he/she provides is true and accurate and undertakes to notify any change thereof.  Any damage caused to CP or to any third party due to the provision of incorrect, inaccurate or incomplete information in the registration forms, is the sole responsibility of the person who introduced or provided such information.

The data subject undertakes to not disclose his/her username and password.  If he/she decides to share such data with someone, he/she shall be responsible for all activities performed in his/her personal area.

The data used to make payments, particularly regarding credit/debit cards, are provided directly in the platforms of the corresponding service providers.

If you provide us with your credit card data, these are encrypted using Secure Socket Layer (SSL) technology. Although no transmission method through the Internet or electronic storage is 100% safe, we follow all the requirements of the PCI-DSS and implement additional patterns, generally accepted.

Section 8 – Cookies
In order to provide a more personalized service, the website uses cookies to collect and store information. A cookie is a small information file that is stored on the user’s device (e.g.: Computer, cell phone) and allows to remember previous choices, dates and visits. That is, they save the user’s preferences regarding the use of the website, personalizing his/her experience so that it is not necessary to reconfigure the website in each visit.

Some cookies are essential to access specific areas of the website. They allow you to browse the website and use its applications, such as accessing safe areas of the website through login.  Without such cookies, the services that require them cannot be provided.

Analytical cookies gather information regarding your use of the website, such as the pages you visit the most.  Such data can be used to help optimize our Internet pages and make browsing easier.

These cookies do not collect information related to your identity. All information collected by these cookies is aggregated and, therefore, anonymous.

The functional cookies allow the website pages to save the options made by the user while browsing. That is, they save the user’s preferences regarding the use of the website, so that it is not necessary to reconfigure the website in each visit.

Advertising cookies help measuring advertising effectiveness.  However, they do not identify the user.

In most cases, the cookies are deleted when you close your browser (session cookies).  Some cookies are more persistent and remain in your browser until they expire or until you delete them.

You can change the definitions of your browser to block or delete cookies, or to warn you every time a new cookie is stored on your computer, enabling you to decide if you accept it or not.  If you decide to block or delete our cookies, you may not be able to access all our services and it may have some impact on the performance of our website in your system.

Please find more information regarding the setting of each type of browser (e.g.:  Firefox, Chrome, Explorer, Opera) in the corresponding institutional websites.

Here is a list of the cookies we use. We list them so that you can chose if you want or not to opt for cookies:

- ShoppingBag
- NetUsers

Section 9 - Consent age
For the purpose of item 1 of article 8 of the GDPR, i.e., with regard to the direct service offering of the so-called information society, CP ensures that no personal data is requested from persons under 16, except if the prior express consent of the corresponding representatives – whether they are parents, tutors or guardians - had been obtained. Such representatives shall be aware of this Personal Data Privacy Policy.

Section 10 - Changes to this Privacy Policy
We have the right to change this privacy policy at any moment so you are strongly advised to analyze it frequently.

Changes and clarifications are applicable immediately after its publication in the website.

If we make alterations to this policy we will notify them here, to inform you about the data we collect, how we use it and under which circumstances.

If our website is acquired or merged with another company, your information may be transferred to the new owners, so that they may continue this activity.

Sction 11 - Questions and contact information
In case you wish to: access, correct, change or exclude any personal information, register a complaint or obtain more information, please contact our team through the following email address: