Privacy Policy

1. Introduction

This Privacy Policy describes how Enbiente — Energia e Ambiente, Lda., as data controller, collects, uses and protects the personal data gathered in the context of the EnbiCare service and through the website on which this policy is presented.

By using this website or by contacting Enbiente for information about EnbiCare, you accept the practices described in this document.

2. Data controller

Enbiente — Energia e Ambiente, Lda.
Rua Santa Isabel Lote 2, Cave, Repeses, 3500-726 Viseu, Portugal
Email: geral@enbiente.com
Phone: +351 232 099 900

3. Personal data collected

Within the EnbiCare public website we collect the following data, exclusively when you fill in the contact form:

• Contact person's name;
• Institution name;
• Business email address;
• Phone number (optional);
• Content of the message you send.

We do not collect sensitive data (health, beliefs, etc.) through this website.

4. Purposes of the processing

Data is processed for the following purposes:

• To reply to the contact request you sent us;
• To prepare and send commercial proposals regarding the EnbiCare service;
• To comply with applicable legal obligations (for instance tax and accounting, if a contract is later signed).

5. Legal basis

Processing of your data is based on the consent given upon submitting the form (article 6(1)(a) GDPR) and, where applicable, on Enbiente's legitimate interest in following up your commercial information request (article 6(1)(f) GDPR).

6. Data retention

Contact data is kept only for the period strictly necessary to follow up on your request. If no contract is signed, data is deleted within a maximum of 24 months after the last contact.

If a contract is signed, data is kept for the duration of the contract and for the legal periods applicable after its termination.

7. Sharing with third parties

Enbiente does not share your data with third parties for commercial purposes. Data may be shared with processors acting on Enbiente's behalf (for example email or technical hosting providers) and with public authorities when required by law.

8. Data subject rights

Under the GDPR, you may exercise the following rights over your personal data:

• Right of access, rectification and erasure;
• Right to restriction and objection to processing;
• Right to data portability;
• Right to withdraw consent at any time, without affecting the lawfulness of prior processing;
• Right to lodge a complaint with the Portuguese data protection authority (CNPD).

Requests regarding these rights should be sent to geral@enbiente.com.

9. Security

Enbiente adopts appropriate technical and organisational measures to protect your data against unauthorised access, disclosure, alteration or destruction.

10. Cookies

This website uses only cookies strictly necessary for its operation (language and theme preferences). No marketing cookies or behaviour profiling are used.

11. Changes to this policy

Enbiente may update this Privacy Policy. The date of the latest update is shown at the top of this document. The most recent versions prevail over previous ones.

12. Contact

For any question about the processing of your data, contact Enbiente at geral@enbiente.com.