Data Controller
The controller of your personal data is RETX.PT.
- Email: hello@retx.pt
- Headquarters: Braga, Portugal
For any question regarding the processing of your data, contact us by email.
Principles
Processing of your personal data respects the principles set out in Article 5 of the GDPR:
- Lawfulness, fairness and transparency
- Purpose limitation
- Data minimisation
- Accuracy
- Storage limitation
- Integrity and confidentiality
- Accountability
Data Collected
We only collect data strictly necessary for the identified purposes:
- Identification and contact data: name, email, phone, company
- Communication data: content of messages sent via form or email
- Browsing data: IP address, browser, device, pages visited (only with consent via cookies)
- Contractual data: tax ID, billing address (clients only)
Purposes and Legal Bases
Your data is processed for the following purposes and legal bases (Art. 6 GDPR):
- Responding to contact requests — pre-contractual steps (Art. 6(1)(b))
- Performance of service contracts — contract performance (Art. 6(1)(b))
- Invoicing and tax compliance — legal obligation (Art. 6(1)(c))
- Statistical analysis and website improvement — consent (Art. 6(1)(a))
- Direct marketing to existing customers — legitimate interest (Art. 6(1)(f)), with right to object
Retention Periods
- Unconverted contact requests: 12 months
- Contractual and billing data: 10 years (tax obligation)
- Marketing communications: until objection by the data subject
- Browsing data (analytics): 14 months
After these periods, data is securely deleted or anonymised.
Recipients and Processors
Your data may be shared, exclusively for the indicated purposes, with:
- Hosting providers: cloud infrastructure within the European Union
- Email providers: sending and receiving communications
- Payment processors (Stripe): processing online payments
- Certified accountants: tax and accounting obligations
- Public authorities: when legally required
All processors are contractually bound to comply with the GDPR (Art. 28).
International Transfers
Your data is, as a rule, processed within the European Economic Area (EEA). Whenever this is not possible, we ensure that transfers are made with appropriate safeguards, namely Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
Your Rights
Under Articles 15 to 22 of the GDPR, you have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erasure ("right to be forgotten")
- Restrict processing
- Data portability
- Object to processing
- Not be subject to automated decisions, including profiling
- Withdraw consent at any time (without affecting the lawfulness of prior processing)
To exercise any of these rights, send an email to hello@retx.pt. We will respond within 30 days.
Right to Lodge a Complaint
Without prejudice to any other remedy, you have the right to lodge a complaint with the competent supervisory authority:
- CNPD — Portuguese Data Protection Authority
- Av. D. Carlos I, 134, 1.º — 1200-651 Lisbon
- Tel: +351 213 928 400 · Email: geral@cnpd.pt
- Website: www.cnpd.pt
Security
We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, destruction or accidental loss — namely TLS encryption, access controls, regular backups and periodic audits (Art. 32 GDPR).
Minors
This website is not intended for minors under 16. We do not knowingly collect personal data from minors. If you become aware that a minor has provided us with data, contact us so that we may delete it immediately.
Changes to the Policy
This Policy may be updated periodically. The version in force is always the one published on this page, identified by the date of the last update.
Contact · hello@retx.pt