Data Protection
Privacy Policy
How we collect, use and protect your personal data, under the General Data Protection Regulation (GDPR).
How we collect, use and protect your personal data, under the General Data Protection Regulation (GDPR).
Last updated:
The entity responsible for processing your personal data is EPALFER — Serralharia de Moldes, Cunhos e Cortantes, Lda., with registered office at Zona Industrial das Barrosinhas, Rua do Lameiro, 230, 3750-740 Trofa — Águeda, Portugal.
For any question regarding personal data, contact us at [email protected] or +351 234 639 010.
We only collect the data you voluntarily provide through the contact form or by email:
The IP address is not requested from you: it is recorded automatically for the sole purpose of detecting and preventing abuse of the form, such as automated spam. It is included in the notification email we receive and is stored, in encrypted form, in a temporary anti-abuse record. The legal basis for this specific processing is our legitimate interest in the security of the service, under Article 6(1)(f) of the GDPR.
We do not collect special categories of personal data, nor do we use your data for automated decision-making or profiling.
The data collected is used solely to respond to your enquiry, prepare commercial proposals and maintain contact within a pre-contractual or contractual relationship. The legal basis is your consent and, where applicable, steps taken at your request prior to entering into a contract, under Article 6 of the GDPR.
Data is kept only for as long as necessary for the purpose for which it was collected. Enquiries with no commercial follow-up are deleted within a maximum of 24 months. Data linked to contractual relationships is kept for the legal periods applicable under tax and commercial law.
The temporary anti-abuse record described in section 2 is deleted automatically as soon as its verification window expires, which by default is one hour after submission.
We do not sell, rent or transfer your personal data to third parties. Data may be processed by service providers acting as processors (for example, website hosting and email services), always contractually bound to comply with the GDPR and not authorised to use it for their own purposes.
This website uses no advertising or analytics cookies. Browser local storage is used only to remember your chosen language (Portuguese or English), which does not allow you to be identified.
The contact page embeds a Google Maps map. When that map loads, Google may collect data about your use of it, under the privacy policy of Google itself. The site fonts are also loaded from Google Fonts.
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or improper disclosure.
Under the GDPR, you have the following rights:
To exercise these rights, contact us at [email protected].
If you believe the processing of your data infringes applicable law, you have the right to lodge a complaint with the competent supervisory authority — the Portuguese Data Protection Authority (CNPD).
This policy may be updated whenever necessary. The date of the latest update is shown at the top of this page.