Privacy policy

Scope

Please read this Privacy Policy carefully before sending us your personal data. It describes how PremiWeb Design collects, processes and protects the personal data collected or provided by visitors anywhere on the website, and the rights they have as data subjects.

This policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, GDPR), by Portuguese Law 58/2019 of 8 August, which implements it in Portugal, and by Portuguese Law 41/2004 of 18 August, as currently in force, on privacy in electronic communications.

Data controller

The data controller is Miguel Alexandre Silva Lopes, sole trader, who operates under the trade name PremiWeb Design, tax number (NIF) 249977885, registered address in Santa Marta do Pinhal, Corroios, municipality of Seixal, district of Setúbal, Portugal.

Email: [email protected]. Mobile: +351 936 545 288. For questions about personal data or this policy, please write “Data Protection” in the subject line.

Data we collect

PremiWeb Design only collects the data strictly needed for the purposes below, in line with the data minimisation principle in Article 5(1)(c) GDPR. The data is collected namely through the quote and contact forms, job applications, the newsletter sign-up or while a service contract is performed.

a) Identification and contact data: name, business name, email address, phone number and, where applicable, address and town.

b) Contract and tax data: tax number (NIF), tax address, billing details and proof of payment.

c) Message content: sector, service requested, text, attachments and any other information you send.

d) Browsing data: device type, operating system, browser and pages visited, collected by Google Analytics only if you accept analytics cookies, as described in the Cookie Policy.

e) Application data: qualifications, experience level, CV, portfolio and introduction sent by people applying for opportunities.

The agency does not ask for special categories of data (health, religious beliefs, political affiliation and the others listed in Article 9 GDPR). If you include them in a message of your own accord, PremiWeb Design will process them in accordance with the applicable law, including erasing them where appropriate.

Purposes and legal bases

Personal data is processed for the following purposes, with the legal bases in Article 6 GDPR:

a) Answering contact requests and preparing proposals, as steps taken at your request before a contract, where applicable (Article 6(1)(b)).

b) Performing the service contract, managing the relationship, invoicing and collecting payment (Article 6(1)(b)).

c) Complying with legal obligations, namely tax and accounting, under the Portuguese personal income tax and VAT codes and other applicable law (Article 6(1)(c)).

d) Sending marketing communications and the newsletter, based on your consent (Article 6(1)(a) GDPR and Article 13-A of Law 41/2004).

e) Statistical analysis of website use through analytics cookies, based on consent (Article 6(1)(a) GDPR and Article 5 of Law 41/2004).

f) Assessing job applications, based on consent or on steps taken at your request before a contract (Article 6(1)(a) and (b)).

PremiWeb Design does not take decisions based solely on automated processing that have legal or similarly significant effects on you, under Article 22 GDPR.

Retention periods

Personal data is kept only for as long as needed for the purpose it was collected for, and is then deleted or anonymised, in line with the storage limitation principle in Article 5(1)(e) GDPR.

a) Contact data and proposals that do not lead to a contract: up to 24 months after the last contact.

b) Contract and tax data: while the contract is in force and for the legal periods that apply, including, where applicable, the 10-year period for certain tax documents.

c) Data processed on the basis of consent (newsletter and marketing): until consent is withdrawn.

d) Application data: up to 12 months after the selection process ends, unless you expressly agree to a longer period for future opportunities.

Sharing and processors

Within the agency, personal data is only accessed by people who need it for the purposes described. The agency uses service providers that may act as processors, depending on the processing operations and the applicable agreements, under Article 28 GDPR:

a) Website hosting: Cloudflare.

b) Sending the forms by email: Web3Forms.

c) Statistics, only with consent: Google Analytics.

d) External web design services and image capture, editing and processing (photography and video).

Providers acting as processors are bound by confidentiality and security obligations and process the data only on the instructions of the agency. Where data is transferred outside the European Economic Area, the transfer relies on a European Commission adequacy decision or on other safeguards under Articles 44 et seq. GDPR. Data may also be disclosed to public authorities where the law requires it, namely to the Portuguese Tax Authority.

PremiWeb Design does not sell, transfer or share personal data with third parties for their own commercial purposes.

Your rights

Under Articles 15 to 22 GDPR, you have the right of access (Article 15), rectification (Article 16), erasure (Article 17), restriction of processing (Article 18), data portability (Article 20), objection (Article 21) and not to be subject to automated decisions (Article 22), as well as the right to withdraw consent at any time, without affecting the lawfulness of earlier processing (Article 7(3)).

Exercising these rights is, as a rule, free and is done through the contacts under “Data controller”. The agency replies within 4 working days.

Newsletter

PremiWeb Design offers a newsletter with news, articles and services. You sign up by entering your email address in the form on the website, with specific consent to receive the communications and with this Privacy Policy made available to you.

Processing is based on your consent (Article 6(1)(a) GDPR and Article 13-A of Law 41/2004). You can withdraw consent at any time, through the unsubscribe link in every email or by email, without affecting the lawfulness of earlier processing.

Cookies

The website uses essential cookies and, only if you accept them in the cookie notice, Google Analytics cookies. You can change your choice under “Manage cookies” in the footer. More information in the Cookie Policy.

Complaints

Without prejudice to contacting the agency directly, you have the right to lodge a complaint with the competent supervisory authority, the Portuguese data protection authority (Comissão Nacional de Proteção de Dados, CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.

For consumer disputes arising from the contract, PremiWeb Design provides the electronic Complaints Book, under Decree-Law 156/2005 of 15 September, at www.livroreclamacoes.pt, and informs clients that they may use the alternative dispute resolution mechanisms under Law 144/2015 of 8 September, the ADR entity indicated being the National Consumer Arbitration and Information Centre (CNIACC).

Changes to this policy

PremiWeb Design may revise this policy following changes in the law, guidance from the competent authorities or changes to the services and technologies used. The current version will be available on this page. If a new purpose requires consent, it will be requested under the applicable terms.