TRANSATTIVA – Transportes e Terraplanagens, Lda. respects your privacy and processes your personal data transparently and securely, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Portuguese GDPR implementation act (Lei n.º 58/2019 of 8 August). This policy explains what data we collect through this website, why, for how long, and what your rights are.
1. Data controller
TRANSATTIVA – Transportes e Terraplanagens, Lda.
Registered office: Av. da Praia, n.º 1, 7630-017 Longueira-Almograve, Portugal
Company / tax no. (NIPC): 518160505
Email: [email protected]
Given the size and nature of its activity, the company is not required to appoint a Data Protection Officer. For any question about personal data, please email [email protected].
2. What personal data we process
We only process the data strictly necessary for the purposes set out in this policy:
- Contact and quote request form: name, email, phone (optional), service required, site location and the content of your message.
- Direct contact by email, phone or WhatsApp: the data you share with us in that communication.
- Customers and suppliers: identification, contact and billing data needed to enter into and perform contracts.
- Technical browsing data: server logs (IP address, date and time of access, page requested, browser type), processed by our hosting provider to keep the website running and secure.
We do not intend to process special categories of data (such as health data). Please do not include them in your messages.
3. Purposes, legal bases and retention periods
| Purpose | Legal basis (GDPR) | Retention period |
|---|---|---|
| Replying to contact and quote requests | Steps taken at your request prior to entering into a contract (Art. 6(1)(b)) and consent (Art. 6(1)(a)) | Up to 12 months after the last contact if no contract is concluded |
| Entering into and performing service contracts | Performance of a contract (Art. 6(1)(b)) | For the duration of the contract and thereafter for the applicable statutory periods |
| Compliance with legal obligations (tax, accounting and other) | Legal obligation (Art. 6(1)(c)) | 10 years, under Portuguese tax and accounting law |
| Website security and abuse prevention | Legitimate interests (Art. 6(1)(f)) | Only as long as strictly necessary, in line with the hosting provider’s policy |
| Establishing, exercising or defending legal claims | Legitimate interests (Art. 6(1)(f)) | Until the applicable limitation periods expire |
After these periods, the data is securely deleted or anonymised.
4. Consent
Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Simply email us at [email protected].
5. Recipients of your data
We never sell your data or share it with third parties for marketing purposes. Access is limited, to the extent strictly necessary, to:
- Service providers acting on our behalf (processors), such as our website host, email provider and, where applicable, form-handling service — all contractually bound to comply with the GDPR;
- The company’s certified accountant, for invoicing and bookkeeping;
- Public authorities, courts or regulators, where required by law.
6. International transfers
We favour providers that process data within the European Economic Area. If a processor handles data outside the EEA, the transfer only takes place on the basis of a European Commission adequacy decision (such as the EU-U.S. Data Privacy Framework) or Standard Contractual Clauses approved by the Commission, in accordance with Articles 45 and 46 GDPR.
7. Your rights
Under the GDPR you have the right to:
- Access your personal data (Art. 15);
- Rectification of inaccurate or incomplete data (Art. 16);
- Erasure (“right to be forgotten”) (Art. 17);
- Restriction of processing (Art. 18);
- Data portability (Art. 20);
- Object to processing based on legitimate interests (Art. 21);
- Withdraw consent at any time;
- Not be subject to solely automated decision-making — we do not carry out automated decisions or profiling (Art. 22).
To exercise these rights, send your request to [email protected]. We will reply within one month, extendable by two further months for complex requests, in line with Art. 12 GDPR. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests. We may ask for additional information to verify your identity.
8. Complaints to the supervisory authority
If you believe the processing of your data breaches the applicable law, you have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt — or with the supervisory authority of the EU Member State where you habitually reside. We would, however, appreciate the chance to resolve your concern first, so please contact us.
9. Security
We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access, alteration or disclosure, including encrypted connections (HTTPS), access restricted to those who need it, and the selection of providers offering sufficient security guarantees.
10. Minors
This website and our services are not aimed at minors. We do not knowingly collect personal data from anyone under 18 without the consent of their legal guardians.
11. Cookies
Information on our use of cookies and similar technologies is available in our Cookie Policy.
12. Changes to this policy
We may update this policy to reflect legal changes or changes to how the website works. The date of the latest update is shown at the top of this page. We recommend checking it from time to time.