Last updated: 13 de abril de 2026

Why we process your personal data

The personal data we process is always collected for a specific purpose, in accordance with Article 5 of the GDPR, and for a specific processing operation, after which it is anonymized or destroyed. The purposes of the processing are as follows:

1. Compliance with legal obligations that apply to us—whether regarding customers, suppliers, or our employees—pursuant to Article 6(1)(c) of the GDPR;
2. The performance of contracts or for pre-contractual measures in the course of our business activities, pursuant to Article 6(1)(b) of the GDPR;
3. To perform the services we provide, based on the data subject’s consent, pursuant to Article 6(1)(a) of the GDPR;
4. Based on a legitimate interest, pursuant to Article 6(1)(f) of the GDPR, specifically in relation to communication with customers and potential customers, suppliers, and the recruitment of employees.

Legal basis for the processing of your personal data

Fidalgas de Santar’s business activities involve the processing of personal data whenever it provides services. The lawfulness of these processing operations is ensured in accordance with Article 6 of the GDPR and may take the following forms:

1. As a subcontractor for a client, where the client, as the data controller, provides us with personal data so that we can contact you;
2. In cases where Fidalgas de Santar is itself responsible for processing the data, it obtains the data subject’s prior and documented consent.

What we do with your data once processing is complete

The personal data used is intended solely for the purposes described; therefore, once the processing operation is complete, we anonymize the records or destroy them entirely, in accordance with Article 5(1)(e) of the GDPR.

Retention period

We retain personal data only for as long as is necessary to fulfill the purposes for which it was collected, in accordance with Article 5(1)(e) of the GDPR. In cases where a longer retention period is required by law, the data will be anonymized.

Security

Information security and the protection of personal data are a priority for Fidalgas de Santar, in accordance with Article 32 of the GDPR. We ensure appropriate safeguards are in place and guarantee that third parties we engage are contractually bound to ensure adequate data protection. Access to personal data is limited to employees directly involved in processing operations. All personal data is stored in secure systems that are audited and subjected to periodic testing.

In the event of a personal data breach, Fidalgas de Santar will notify the National Data Protection Commission (CNPD) within 72 hours of becoming aware of the incident. Where the breach is likely to result in a high risk to data subjects, they will also be informed without undue delay, in accordance with Article 34 of the GDPR.

We respect the confidentiality of the personal data we process, ensuring that we do not disclose, distribute, or make it available to third parties, except when specifically required to provide a contracted service in support of the services we offer.

Exercise of data subjects' rights

Pursuant to Articles 15 through 22 of the GDPR, as a data subject, you may exercise the following rights:

• Access — You may request access to the information we hold about you;
• Correction — may request the correction of inaccurate or incomplete information;
• Deletion — You may request the erasure of your data when it is no longer necessary for the purpose for which it was collected, in accordance with Article 17 of the GDPR;
• Withdrawal of consent — You have the right to withdraw your consent at any time, without this affecting the lawfulness of the processing carried out prior to such withdrawal;
• Restriction and objection to processing — Under Articles 18 and 21 of the GDPR, you may request the restriction of processing or object to the processing of your data under certain circumstances.

The data subject may also, at any time, request the deletion of their user account, which will result in the deletion of all associated personal data, except for data that must be retained by law.

Requests may be submitted via the contact information provided on this website and will be processed within a maximum of 30 days, as provided for in Article 12 of the GDPR; this period may be extended by an additional two months in particularly complex cases. You may be asked to provide proof of identity to ensure that data is shared only with the data subject.

You also have the right to file a complaint with National Data Protection Commission (CNPD), located at Rua de São Bento, No. 148, 3rd Floor, 1200-821 Lisbon, via the website www.cnpd.pt.

Cookies

This section of the policy is developed under the Law No. 41/2004, of August 18, as amended by Law No. 46/2012, of August 29, which transposes the ePrivacy Directive into national law, as well as the GDPR.

What are cookies?

Cookies are small text files that are stored on your device (computer, tablet, or smartphone) when you visit a website. These files allow the website to recognize your device on future visits and remember certain information about your browsing, such as preferences or items added to your shopping cart. Cookies do not contain viruses and cannot access other files on your device.

What types of cookies are there?

Cookies can be classified based on their origin, duration, and purpose:

As for origin:

• First-party cookies — installed directly by the website you are visiting;
• Third-party cookies — installed by third-party entities, such as analytics platforms or social media sites, through the website you visit.

As for duration:

• Session cookies — temporary cookies are automatically deleted when you close your browser;
• Persistent cookies — remain on your device for a set period of time, even after you close your browser, until they expire or are manually deleted.

As for purpose:

• Strictly necessary cookies — essential for the basic functioning of the website, such as maintaining your session or shopping cart. They do not require consent under Law No. 41/2004;
• Preference cookies (functional) — allow the website to remember your preferences, such as language or region, to provide a personalized experience;
• Analytical or performance cookies — collect anonymous information about how users navigate the site, with the aim of improving its performance;
• Marketing and advertising cookies — used to display relevant ads based on the user’s interests and to measure the effectiveness of advertising campaigns;
• Social media cookies — allow you to share content on social media and may track your visit to the site for advertising purposes.

Cookies We Use

Strictly necessary cookies — do not require the user’s prior consent under Law No. 41/2004:

• Session cookies (login) — keep the session active across pages and are removed when the session ends, ensuring the security of restricted areas;
• Shopping cart cookies — ensure that items added to the cart are retained while browsing, allowing the order to be processed correctly;
• Form cookies — temporarily store the information submitted in forms, preventing data loss in the event of an error;
• User account cookies — manage the registration, authentication, and general administration of the user’s account;
• Security cookies — used to detect and prevent fraudulent or malicious activity, protecting both the user and the website.

Non-essential cookies — require your prior, explicit, and informed consent, in accordance with Article 5 of Law No. 41/2004 and Article 6(1)(a) of the GDPR:

• Google Analytics — We use Google Analytics to understand how the website is used and to improve the user experience. These cookies may track, for example, the time spent on the site or the pages visited. The data collected is anonymous and aggregated. For more information, please see Google’s privacy policy at policies.google.com;
• Newsletter cookies — used to manage the subscription status for newsletters and email communications, showing or hiding notifications based on the user’s subscription status;
• Preference cookies — store user preferences, such as language or content layout, to provide a personalized experience on future visits;
• Conversion and performance cookies — collect statistics related to purchases and browsing behavior to support marketing, advertising, and pricing decisions;
• Testing and improvement cookies — used during testing of new features or design changes, ensuring a consistent experience and allowing us to measure which changes users value most;
• Survey cookies — used to track who has already completed satisfaction surveys or to ensure consistent results when navigating between pages.

How to manage cookies

Pode gerir ou desativar os cookies a qualquer momento através das definições do seu navegador. Consulte a secção de “Ajuda” do seu navegador para instruções específicas. Tenha em atenção que a desativação de determinados cookies poderá limitar funcionalidades deste site, nomeadamente ao nível da autenticação, do carrinho de compras ou da personalização da experiência de navegação.

Pode também optar por não ser rastreado pelo Google Analytics acedendo a tools.google.com/dlpage/gaoptout.

Concluding Remarks

A presente Política de Privacidade e Cookies pode ser atualizada a qualquer momento, sendo as alterações publicadas nesta página com indicação da data de última atualização. Recomendamos a consulta periódica deste documento. Para qualquer questão relacionada com o tratamento dos seus dados pessoais ou com a utilização de cookies, pode contactar a Fidalgas de Santar através dos contactos disponíveis neste site.