Privacy Policy
1. Identification of the Controller
This Privacy Policy applies to the processing of personal data collected through the website www.ambiene.pt.
• Data Controller (Controller): Ambiene – Ambiente e Energia, Lda.
• Headquarters: Av. Major Botelho Moniz, 170 – Bl. 2, 1st floor right, 4405-661 Vila Nova de Gaia.
• State Registration: 507940164
• GDPR/DPO Contact Point: mail@ambiene.pt
2. Personal Data Collected, Purpose, and Legal Basis
Our company collects and processes only the personal data strictly necessary for the purposes identified below:
Personal Data Category, Purpose of Processing, Legal Basis (Legal Basis)
Contact Form (Name, Email, Phone, Message) Respond to requests for information and clarification. Pre-Contract Due Diligence/Legitimate Interest (Response to Questions).
Browsing Data (IP address, location, device/browser type) Improve website user experience, statistical analysis, and security (via Google Analytics or similar). Legitimate Interest (Website management and improvement) and Consent (for non-essential cookies).
3. Cookies and Other Technologies
Our website uses cookies to improve performance, personalize navigation, and analyze traffic.
The use of non-essential cookies requires your prior and explicit consent. You can manage or revoke your consent at any time through our Cookie Consent Banner and Cookie Policy [INSERT LINK IF SEPARATE].
4. Data Retention Period
We retain your personal data only for the period strictly necessary to fulfill the purposes for which it was collected or for the period required by law. • Contact Requests: Data will be retained for up to 1 year after your inquiry is resolved or for the duration of the business relationship.
• Contract Data: Data is retained for the legal period of 10 years for tax and accounting purposes.
5. Data Recipients and Transfers
Your personal data is processed internally by our duly authorized and trained team. We may, however, share your data with:
• Subcontractors: Entities that provide us with services (e.g., web hosting, billing software, email marketing platforms) and that act strictly under our instructions and under contracts that ensure compliance with the GDPR.
• Competent Authorities: Under legal obligation (e.g., Tax and Customs Authority).
If data transfers are made to countries outside the European Union (EU) or the European Economic Area (EEA), we guarantee that these will only occur if an adequate level of protection is ensured, namely through Standard Contractual Clauses (SCC) approved by the European Commission.
6. Your Rights as a Data Subject
At any time and upon written request to the privacy contact indicated in point 1, you have the right to exercise the following rights:
1. Right of Access: Obtain confirmation that your data is being processed and access it.
2. Right to Rectification: Request correction of incomplete or incorrect data.
3. Right to Erasure (Right to be Forgotten): Request the erasure of your data, in certain circumstances.
4. Right to Restriction of Processing: Suspend data processing in certain situations.
5. Right to Portability: Receive data in a structured, commonly used, and machine-readable format and transmit it to another controller.
6. Right to Object: Object to the processing of your data, especially when processing is based on legitimate interest.
You also have the right to withdraw your consent at any time, without affecting the lawfulness of the processing carried out prior to its withdrawal.
7. Right to Complain
If you believe that our company’s processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:
• National Data Protection Commission (CNPD)
• Address: Av. D. Carlos I, 134, 1st Floor, 1200-651 Lisbon
• Website: www.cnpd.pt
8. Security and Confidentiality
Ambiene – Ambiente e Energia, Lda. adopts appropriate technical and organizational security measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. We implement data encryption (SSL/HTTPS), access control, and backups.
9. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy at any time. The date of the last revision will be indicated at the end of this document. We recommend that you periodically review this policy to stay informed about how we are protecting your data. ________________________________________
Date of Last Revision: October 13, 2025