Legal

Privacy policy

This policy explains how Marques & Silva, Lda. handles personal data collected through this website in line with the GDPR transparency principles and related EU digital-services disclosure obligations.

Contact Downloads

Controller

The controller for the processing described in this policy is Marques & Silva, Lda., Apartado 34, Rua Zona Industrial Nascente/Poente n.º 102, Barrô 3750-353, Águeda, Portugal.

You can contact us about privacy matters at jose.marques@msilva.com.pt or by telephone at +351 234 610 130.

What data we collect

We collect the information you actively provide when you submit a contact or quotation request, subscribe to the newsletter, or submit a whistleblowing report. Depending on the form, this may include identification details, company details, contact details, project information, and the message or documents you send us.

We also process limited technical and usage information needed to keep the site secure, rate-limit forms, and understand page usage through our first-party analytics setup.

Contact and quote forms: name, company, email, phone, role, project details, selected products, message content, locale, and referral context.
Newsletter: email address, locale, signup source, and subscription status.
Whistleblowing: report content and any supporting files or contact details you choose to provide.
Technical data: IP-related security context, browser context, consent status, page path, and analytics event metadata.

Purposes and legal bases

We process personal data only when we have a lawful basis under Article 6 GDPR and, where applicable, Article 9 or specific legal obligations.

To answer enquiries and prepare quotations at your request: pre-contractual steps and contract performance.
To operate the website, prevent abuse, secure forms, and maintain service reliability: legitimate interests.
To send newsletter communications: consent, which you can withdraw at any time.
To keep records required by law, including whistleblowing or compliance-related records where applicable: legal obligation and legitimate interests.
To understand how public pages perform and improve the site experience: consent where required and legitimate interests for strictly necessary operational measurements.

Recipients and service providers

Personal data may be processed by trusted service providers acting on our instructions, including providers that support website hosting, content management, transactional email delivery, rate limiting, and security operations.

Based on the current site implementation, this includes WordPress-based CRM/storage services and the email delivery tools used for transactional responses and newsletter communications.

International transfers

Where a service provider processes data outside the European Economic Area, we expect that transfer to rely on a lawful transfer mechanism, such as an adequacy decision or the European Commission standard contractual clauses, where applicable.

Retention

We keep personal data only for as long as needed for the purpose for which it was collected, for legitimate follow-up, or to meet legal and compliance obligations.

Newsletter data is kept until you unsubscribe or object. Contact, quotation, and compliance records are reviewed against operational need and legal retention requirements.

Your rights

Subject to the GDPR and applicable law, you may request access, rectification, erasure, restriction, portability, or objection, and you may withdraw consent at any time for processing based on consent.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD, if you believe your data has been handled unlawfully.

Cookies and analytics

This site uses technical storage needed for security, session handling, and analytics preference management. When analytics consent is required by the site configuration, analytics collection is controlled through the consent banner and stored preference state.

Updates

We may update this policy when our processing activities, vendors, or legal obligations change. The latest version published on this page applies from the date it is made available.