Privacy policy

This privacy policy explains how Sousasantos Arquitectos ("we") processes personal data when you visit this website or contact us, in accordance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019.

Data controller

The data controller is Sousasantos Arquitectos, with registered office at the address indicated below. For any question related to personal data please write to the e-mail address indicated in the contact section.

Data we process

This website does not use cookies, analytics or tracking technologies and does not collect personal data automatically. We only process the personal data that you voluntarily send to us by e-mail or telephone (such as your name, e-mail address, telephone number and the content of your message).

Purpose and legal basis

Your data is used exclusively to answer your request, to prepare proposals and to manage our professional relationship. The legal bases are pre-contractual and contractual measures (article 6(1)(b) GDPR) and our legitimate interest in replying to messages sent to us (article 6(1)(f) GDPR).

Retention

Messages are kept for as long as necessary to handle your request and, when a professional relationship exists, for the legal retention periods applicable to architectural projects and accounting records.

Sharing

We do not sell or transfer your data to third parties. Data may be processed by service providers strictly necessary to run our activity (e-mail hosting), always within the European Economic Area or under adequate safeguards.

Your rights

You have the right to access, rectify, erase and port your data, to restrict or object to its processing, and to withdraw consent at any time. To exercise these rights contact us by e-mail. You may also lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

Hosting and images

Project photographs are served from content delivery networks. Server logs required for security purposes (IP address, date and time of the request) are kept by the hosting provider for a limited period.