Privacy policy

Who handles the data

Gomes, Mois — Engenharia e Gestão LDA (trading as Construsud and Sudstudio), Portuguese tax number 517554038, registered office at Avenida do Atlântico, n.º 16, 14 E8, 1990-019 Parque das Nações, Lisbon, Portugal.

For any question about your data: geral@construsud.com or +351 939 553 803.

What data we collect

From the quote request form: name, email, phone number (optional) and the description of what you want done. On the Sudstudio form, also the type of service, whether you already have a design, the location of the works and your preferred timeframe — all optional.

Any files you attach (images, PDF or DWG), which are kept in private storage.

Technical data about the submission: the page the request was sent from, the campaign parameters of the link you followed (for example, if you arrived from an advert), your browser, and a protected technical identifier derived from your IP address — used only to stop automated bulk submissions. It is an irreversible summary (a hash); we do not store your IP address in the clear.

On the feedback page: your name, email, a rating from 0 to 10, the answers you give to the questions about your experience, any testimonial you choose to write, and your choice about whether that testimonial may be published.

What data you need to give us

The fields marked as required on the quote request are necessary for us to review and respond to your request. Without them, we may not be able to prepare or answer the quote. The phone number and the other fields marked as optional may be left blank.

Filling in the feedback form is entirely voluntary, as is the permission to publish a testimonial.

What it is used for

The data from the quote request is used to reply to you, prepare the quote you asked for, and contact you about that request. We do not use it to send you unsolicited marketing, and we do not sell it to anyone.

We use feedback responses to assess the quality of our work and improve the service we provide.

If you write a testimonial, we only publish it on the website with your name if you give us permission to do so. That permission is entirely optional, and refusing has no consequence for you or for any relationship you have with us.

On what legal basis

We process quote request data in order to take steps prior to entering into a contract, at your request — Article 6(1)(b) GDPR.

The technical data used to protect the form against abuse, such as the identifier derived from your IP address and the browser data used to detect anomalous submissions, relies on our legitimate interest in protecting the website against misuse — Article 6(1)(f).

The originating page and the campaign parameters rely on the same legitimate interest, so that we can understand where requests come from and assess our pages. We do not use this data to make automated decisions about you.

Processing feedback in order to assess and improve our services also relies on our legitimate interest — point (f).

Publishing a testimonial with your name relies on your consent — Article 6(1)(a). You may withdraw it at any time by writing to geral@construsud.com; withdrawal does not affect the lawfulness of publication carried out up to that point.

When someone contacts us on behalf of a company, we process the necessary contact data on the basis of our legitimate interest in responding to and managing that professional relationship.

Who has access to it

Besides the members of our team who need the data to handle your request, we use technical providers who process data on our behalf, only as far as necessary to provide their services: Vercel Inc. (website hosting), Supabase Inc. (database and storage of attachments, hosted in the European Union — Ireland), Resend (delivery of the messages generated by the website) and the provider that hosts our email.

If we activate Google measurement or advertising tools, Google may also receive data — but only in line with the choice you make in the cookie settings.

We may also disclose data to public authorities, courts or professional advisers where necessary to comply with a legal obligation or to exercise or defend our rights. We do not sell your data.

Transfers outside the European Economic Area

Some of the providers we use are based in, or may process data in, the United States — namely Vercel and Resend. The database and the attachments stored in our Supabase project are hosted in the Ireland region.

Where there is an international transfer of data, we rely on the mechanisms provided for in the GDPR that apply to the provider in question — namely adequacy decisions, such as the EU-US Data Privacy Framework where applicable, and/or standard contractual clauses approved by the European Commission. You can ask us for more information about these safeguards at geral@construsud.com.

For how long

We keep requests that do not lead to work for a maximum of 2 years from the last communication relating to the request. While the quote is being prepared and discussed, the data is processed in order to follow up on the steps requested by the client; once the request is closed, keeping it for that period relies on our legitimate interest in maintaining a limited history of communications and picking the matter up again if you contact us in future. We delete the data earlier if it is no longer needed, including attachments.

Where a request leads to actual works, we keep the necessary data for the duration of the contract. After that, we keep only the data needed to meet tax, accounting and legal obligations, manage guarantees and respond to any complaints, for the periods applicable to each type of document.

The technical identifier derived from your IP address is stored alongside the request for as long as the request is kept, but it is only actually used in the minutes following submission, to detect abuse — it is not consulted after that.

We keep feedback responses for 2 years from the date they are sent. Where you authorise publication of a testimonial, we keep the testimonial and your name for as long as they remain published and consent is maintained; if you withdraw it, we take the testimonial off the website and keep only the minimum record needed to show that we respected your decision.

Your rights

You may ask us for access to your data, its correction, its erasure, restriction of processing, portability, and you may object to processing. Simply write to geral@construsud.com; we reply within the legal deadline.

If you believe we have not handled the matter as we should, you may lodge a complaint with the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (www.cnpd.pt).

Language of this policy

This is a translation of the Portuguese version, provided for your convenience. In the event of any discrepancy between the two, the Portuguese version prevails.