Privacy policy
Last updated:
- customer.service@vilmontech.com
- Viseu and Lisbon
This policy explains what personal data we receive through this website, what we use it for, who we share it with, how long we keep it and how you can exercise your rights. The website has no user accounts and no database: the forms send e-mails and keep nothing on the server.
Data controller
The controller of your data is the entity identified at the top of this page, with the legal name, tax number and e-mail address shown there. For any privacy question, or to exercise your rights, write to that e-mail address.
Data we collect, purposes and legal basis
We only receive the data you send us in a form. Fields marked as optional can be left blank.
| Form | Data | Purpose |
|---|---|---|
| Contact | Name, e-mail, phone (optional) and message | Answering your request |
| Quote request | Answers about the project, name, company (optional), e-mail, phone (optional), preferred contact channel, attachments and file link (optional) | Assessing the project, replying and preparing a proposal |
| Website check | Website address, areas to check, name, e-mail, phone and message (optional) | Checking the website you name and replying with the findings |
Legal basis. We process form data to answer a request you make before any contract exists: steps taken at the data subject's request prior to entering into a contract (Article 6(1)(b) GDPR). Visitor statistics (Google Analytics) only run if you accept them, based on your consent (Article 6(1)(a) GDPR).
How the forms work. Each request is sent by e-mail to the studio's mailbox, and you receive a confirmation e-mail in the language of the page. The confirmation only lists the choices you made in the form: it does not repeat your free text, any web addresses (URLs) you entered or the content of attachments (it may show file names, shortened). Attachments are forwarded by e-mail and are not kept on the server.
Abuse protection. The forms use Cloudflare Turnstile to tell people apart from automated programs. It is a security measure strictly necessary for the forms to work, loaded only on pages with a form, and it does not depend on your cookie choice. There is more in the cookie policy.
We make no decisions based solely on automated processing of your data, including profiling.
Recipients
To run the website we use these service providers, who process data on our behalf and only for the stated purpose:
| Provider | Service |
|---|---|
| Mailgun | Sending the form e-mails (EU region) |
| mycloud.pt | Website hosting and the studio mailbox (Portugal) |
| Cloudflare | Turnstile, bot protection for the forms (strictly necessary) |
| Google Analytics 4, visitor statistics (only with consent) |
Beyond these providers, we only disclose data to third parties when the law requires it, for example at the request of a competent authority.
International transfers
Mailgun sends the e-mails from its European Union region and the website and the studio mailbox are hosted in Portugal. Cloudflare and Google may process data in the United States. Those transfers rely on the EU–US Data Privacy Framework and on standard contractual clauses approved by the European Commission.
Retention periods
| Data | Period |
|---|---|
| Form data on the website | Not kept: each request is sent by e-mail and does not stay on the server |
| Technical server logs (no personal data) | 30 days |
| E-mails with enquiries and proposals | Up to 2 years after the last contact when no contract follows; client records are kept for as long as tax law requires |
| Google Analytics 4 data | 14 months |
Cookie that stores your cookie choice (vt_consent) |
6 months |
Cookie that stores your chosen language (vt_lang) |
12 months |
Your rights
Under the GDPR you have the right to:
- access your data and get a copy of it;
- have inaccurate or incomplete data corrected (rectification);
- have your data erased;
- restrict the processing;
- object to the processing;
- receive the data you gave us in a structured, commonly used format (portability);
- withdraw your consent at any time, without affecting processing carried out before. For statistics, use the “Cookie settings” link in the footer of any page.
To exercise these rights, send an e-mail to the address shown at the top of this page.
If you believe the processing of your data breaks the law, you can lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
Cookies
The cookies the website uses, what they are for and how long they last are listed in the cookie policy. You can change your choice at any time with the “Cookie settings” link in the footer.
When this policy changes, we update the last-updated date at the top of the page.