PRIVACY & DATA PROTECTION

Privacy Policy

ENGIPOR respects your privacy and handles your personal data in a transparent, secure and responsible way.

Last updated: 27 August 2026

This Privacy Policy explains how personal data belonging to visitors of www.engipor.com, and to people who contact ENGIPOR, is collected, used, retained and protected.

Processing is carried out in accordance with Regulation (EU) 2016/679 — the General Data Protection Regulation (GDPR) — and applicable Portuguese law.

1. Data controller

The controller responsible for processing personal data is:

COMPANYMALHEIRO E CUNHA, LDA.
TRADE NAMEENGIPOR — Engineering Services
TAX ID (NIF)513204580
ADDRESSRua da Nora, n.º 40, 4700-857 Merelim (São Pedro), Braga, Portugal

2. Personal data we collect

ENGIPOR may collect data that you provide directly through the contact form, by email or by phone, namely:

  • Name
  • Email address and phone number
  • Service required
  • Information about the works, property or project included in your message or in any documents you send
  • Other data necessary to prepare a reply, a proposal, or to provide the service

While browsing, technical data may also be processed, such as IP address, device and browser type, date and time of access, and server security logs.

Please do not send personal data belonging to third parties, or particularly sensitive data that is not strictly necessary to assess your request.

3. Purposes and legal basis

Personal data may be processed for the following purposes:

  • Responding to requests for information or contact, based on ENGIPOR's legitimate interest in managing the communications it receives
  • Reviewing a request and preparing a proposal, based on pre-contractual steps requested by the data subject
  • Entering into and performing contracts and providing services, where processing is necessary for the performance of the contract
  • Complying with legal, tax and accounting obligations applicable to ENGIPOR
  • Protecting the site, preventing misuse and resolving technical issues, based on the legitimate interest in keeping our systems secure and operational
  • Establishing or exercising rights in administrative, out-of-court or judicial proceedings, when necessary

Where processing relies on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out beforehand.

4. Data retention

Data associated with contact requests that do not result in a contractual relationship is, as a rule, kept for as long as necessary to handle the request and for up to 12 months after the last contact.

Where a proposal, contract or service is in place, data is kept for the duration of that relationship and, afterwards, for the period required to comply with legal obligations and to establish, exercise or defend rights.

Technical and security logs for the site are kept only for as long as necessary for the security and operation of the service, in accordance with our hosting provider's settings.

5. Sharing your data

ENGIPOR does not sell or transfer personal data for commercial purposes.

Data may be processed by service providers that support the site, hosting, email, IT support, accounting or archiving, acting on ENGIPOR's instructions and bound by confidentiality and security obligations.

Data may also be disclosed to public authorities, courts or regulatory bodies where there is a legal obligation to do so, or where necessary to protect the rights of ENGIPOR or third parties.

6. International transfers

Some technology providers may process data outside the European Economic Area. When this happens, ENGIPOR will seek to use a transfer mechanism recognised under the GDPR, such as an adequacy decision or standard contractual clauses, together with appropriate safeguards.

7. Fonts

The fonts used on this site are hosted directly on our own server, rather than on third-party servers. This means that viewing the site does not involve any request to external servers (such as Google's) for this purpose.

8. Cookies

In its current version, this site does not use its own analytics, advertising or profiling cookies. Should tools that use non-essential cookies be introduced in future, this policy will be updated and your consent will be requested before they are installed, where legally required.

9. Your rights

Under applicable law, and within its respective limits, you may exercise the following rights:

  • Access to your personal data
  • Rectification of inaccurate or incomplete data
  • Erasure of your data
  • Restriction of processing
  • Objection to processing based on legitimate interests
  • Data portability, where applicable
  • Withdrawal of consent, where processing is based on it

To exercise these rights, send a request to geral@engipor.com. ENGIPOR may request additional information strictly necessary to confirm your identity.

You also have the right to lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados), Portugal's data protection authority.

10. Security

ENGIPOR adopts appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or disclosure. Despite these measures, no electronic transmission or storage system can be considered completely secure.

11. Automated decisions

ENGIPOR does not use data collected through this site to make decisions based solely on automated processing that produce legal effects or significantly affect users.

12. Changes to this policy

This policy may be updated to reflect legal, technical or service changes. The version in force will always be available on this page, together with the date it was last updated.

Questions about privacy? Contact us at geral@engipor.com.