How we handle your data.

Data controller

Data collected, purpose and legal basis

We collect the data you give us in the contact form (name, email and, if you wish, company and phone), by email or by phone, in order to:

• Reply to requests for quotes and technical information about our pieces — on the basis of the pre-contractual steps you ask us to take;
• Manage the business relationship and process orders — on the basis of the performance of the contract;
• Meet legal obligations, namely tax and accounting obligations — on the basis of a legal obligation.

We do not use your data for advertising, nor do we sell or pass it on to third parties for that purpose.

Technical data

To stop repeated automated submissions, the contact form stores the IP address of the sender for a maximum of one hour — on the basis of our legitimate interest in protecting the website against abuse. As with any website, the hosting server logs page visits (IP address, date and page requested), for security and operation.

Who has access to the data

Your data is processed by Alusape and, only to the extent necessary, by those who provide services to us:

• The website hosting company, where the website and the sending of contact form emails run;
• Our email providers;
• Our accounting services, for billing data.

The map on the contact page is from Google Maps and is only loaded if you click «Load map» or «Street View»; from then on, the Google privacy policy applies.

Data retention

• Quote and information requests that did not lead to an order: up to 2 years;
• Customer, order and billing data: 10 years, the period required by tax law;
• Contact form IP address: one hour at most.

Cookies

The website does not use advertising or visitor analytics cookies. It only uses what is strictly necessary for it to work:

• A session cookie on the contact page, to show whether your message was sent; it is deleted when you close the browser;
• A note stored in your browser that you agreed to load the map, so we do not ask you again.
• A cookie with the language you viewed the website in (Portuguese, English, Spanish or French), so we do not switch language without you asking; on your first visit, the language is chosen from your browser settings. It lasts one year.

If you load the map, Google may set its own cookies.

Rights of the data subject

You have the right, at any time, to ask Alusape for:

• Access to your personal data;
• Correction of inaccurate information;
• Erasure of your data («right to be forgotten»);
• Restriction of, or objection to, the processing of your data;
• Portability of the data you have given us.

To exercise these rights, contact us at alusape@gmail.com or geral@alusape.pt. We reply within one month.

You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD).

Security

We implement technical security measures to protect your data against unauthorised access or loss of information, such as an encrypted connection (HTTPS) across the whole website.