1. Who we are

‍

This website is operated by [full legal name of the operating company] (“WDE”, “we”, “us”), a structural steel engineering company with registered office at [registered address], Viana do Castelo, Portugal, registered under NIPC [number]. For the purposes of Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019, WDE is the controller of the personal data processed through this website.

For any question about this policy or about your personal data, you can contact us at [privacy contact email].

‍

‍

2. Scope

‍

This policy explains how we process personal data when you visit this website or contact us through it. It does not cover the processing of personal data in the context of our projects and contractual relationships, which is governed by the applicable agreements, nor the privacy practices of third-party websites we may link to.

‍

‍

3. Personal data we process

‍

Data you provide to us. When you contact us through the website form or by email, we process the data you submit: typically your name, email address, company, phone number and the content of your message.

Data collected automatically. Subject to your consent, we use Google Analytics to collect information about how visitors use the website: pages visited, session duration, approximate location derived from the IP address, device and browser type, and referral source. Our hosting provider also keeps technical logs (such as IP addresses) for security and service-integrity purposes.

‍

‍

4. Purposes and legal bases

‍

We process personal data for the following purposes:

• To respond to your inquiries and manage commercial contacts — legal basis: steps taken prior to entering into a contract (Art. 6(1)(b) GDPR) or our legitimate interest in responding to business communications (Art. 6(1)(f) GDPR);
• To measure and improve the performance of the website (analytics) — legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner and revocable at any time;
• To ensure the security of the website and prevent abuse — legal basis: our legitimate interest (Art. 6(1)(f) GDPR);
• To comply with legal obligations to which we are subject — legal basis: Art. 6(1)(c) GDPR.

Providing your data through the contact form is voluntary, but without it we will not be able to respond to your request. We do not use personal data for automated decision-making or profiling producing legal or similarly significant effects.

‍

‍

5. Cookies and Google Analytics

‍

This website uses two categories of cookies:

• Strictly necessary cookies, required for the website to function (including those set by our hosting platform, Webflow). These do not require consent;
• Analytics cookies, set by Google Analytics 4 (cookies “_ga” and “_ga_*”), which help us understand how the website is used. These are placed only after you give your consent through the cookie banner.

Google Analytics 4 does not log or store individual IP addresses, and usage data is retained in Google Analytics for a maximum of 14 months. You can withdraw your consent at any time through the cookie settings link on this website, by deleting cookies in your browser settings, or by installing Google’s opt-out browser add-on (tools.google.com/dlpage/gaoptout). Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

‍

‍

6. Who we share data with

‍

We do not sell personal data. We share it only with:

• Service providers acting as processors on our behalf: Webflow, Inc. (website hosting and content management) and Google (Google Ireland Ltd. / Google LLC, website analytics), under data-processing agreements;
• Competent authorities, courts or professional advisers, where required by law or to protect our rights.

‍

‍

7. International transfers

‍

Our processors may process data outside the European Economic Area, namely in the United States. Where this happens, transfers rely on an adequacy decision — including the EU–U.S. Data Privacy Framework, to which Google LLC and Webflow, Inc. are certified — and/or on the European Commission’s Standard Contractual Clauses (Art. 46 GDPR).

‍

‍

8. Data retention

‍

• Contact data: kept for as long as necessary to handle your inquiry and any follow-up, and no longer than [two] years after our last contact, unless a contractual relationship is established or a longer period is required by law;
• Analytics data: retained in Google Analytics for 14 months;
• Security logs: kept for the limited periods defined by our hosting provider.

‍

‍

9. Your rights

‍

Under the GDPR, you have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time (without affecting the lawfulness of prior processing). To exercise these rights, contact us at [privacy contact email]. We may ask you to verify your identity before acting on a request.

You also have the right to lodge a complaint with the Portuguese supervisory authority: CNPD — Comissão Nacional de Proteção de Dados (www.cnpd.pt).

‍

‍

10. Security

‍

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse. The website is served over HTTPS, and access to the data submitted through it is restricted to those who need it for the purposes described above.

‍

‍

11. Changes to this policy

‍

We may update this policy to reflect changes to the website or to applicable law. The current version, with its date of publication, will always be available on this page.