Privacy Policy

Last updated · March 2026.

01. Data controller

The controller of your personal data is RETX, based in Braga, Portugal. For any question about how your data is processed, contact us at hello@retx.pt.

02. Principles

The processing of your personal data follows the principles set out in Article 5 of the GDPR: lawfulness, fairness and transparency; purpose limitation; data minimization; accuracy; storage limitation; integrity and confidentiality; and accountability.

03. Data collected

We only collect the data strictly necessary for the purposes set out in this policy:

• Identification and contact data: name, email, phone, company.
• Communication data: content of messages sent via form or email.
• Browsing data: IP address, browser, device and pages visited — only with your consent via cookies.
• Contract data: tax number (NIF) and billing address, only for clients with an active contract.

04. Purposes and legal bases

Your data is processed for the following purposes and on the following legal bases (Art. 6 GDPR):

• Responding to contact requests — pre-contractual steps.
• Performance of service contracts — performance of a contract.
• Invoicing and compliance with tax obligations — legal obligation.
• Statistical analysis and website improvement — consent.
• Direct marketing to existing clients — legitimate interest, with the right to object.

05. Retention periods

• Contact requests not converted: 12 months.
• Contract and billing data: 10 years, due to tax obligations.
• Commercial communications: until the data subject objects.
• Browsing data (analytics): 14 months.

Once these periods end, data is securely deleted or anonymized.

06. Recipients and processors

Your data may be shared, solely for the purposes stated, with hosting providers (cloud infrastructure in the European Union), email providers, payment processors, certified accountants and public authorities when legally required. All processors are contractually bound to comply with the GDPR.

07. International transfers

As a rule, your data is processed within the European Economic Area (EEA). Where that isn't possible, we ensure transfers are made with appropriate safeguards, namely Standard Contractual Clauses approved by the European Commission.

08. Your rights

Under Articles 15 to 22 of the GDPR, you have the right of access, rectification, erasure, restriction, portability and objection to processing, the right not to be subject to automated decisions, and the right to withdraw consent at any time. To exercise any of these rights, email hello@retx.pt. We reply within 30 days at most.

09. Right to complain

Without prejudice to any other remedy, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa · geral@cnpd.pt · www.cnpd.pt.

10. Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, destruction or accidental loss — namely TLS encryption, access controls, regular backups and periodic audits.

11. Minors

This website is not intended for anyone under 16. We do not knowingly collect personal data from minors. If you become aware that a minor has given us data, contact us so we can delete it immediately.

12. Cookies

The use of cookies on this website is governed by our Cookie Policy, which details the types of cookies used, their purposes and how to manage your preferences.

13. Changes to this policy

This policy may be updated from time to time. The version in force is always the one published on this page, identified by its last-updated date.