New Perfil, Lda. respects users' privacy and processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law. This policy explains what data we collect, for what purposes, and the rights of data subjects.
Data controller
The controller of the personal data collected through this website is:
- Company name
- New Perfil, Lda.
- Tax ID (NIPC)
- 515089923
- Registered office
- Rua Quinta do Feital, Pav. 8 e 9
4700-110 Frossos - Commercial registry
- Reg. C. Braga
- Share capital
- 297.000 €
- geral@newperfil.pt
- Phone
- +351 253 323 139
What data we collect
We only process personal data that you provide voluntarily or that is strictly necessary for the site to work:
- Contact and catalogue request forms: name, email address, company and telephone (optional), subject and message.
- Newsletter subscription: email address.
- Technical browsing data (IP address, browser type, pages visited), processed by the infrastructure serving the site for security, operation and aggregate statistics.
- Language and cookie preferences, stored on your device (see the Cookie Policy).
Purposes and legal basis
We process data for the following purposes, with the corresponding legal basis (Art. 6 GDPR):
- Responding to contact and catalogue requests and to questions sent to us — pre-contractual steps or legitimate interest in responding.
- Sending the newsletter — your consent, which you may withdraw at any time.
- Telling people apart from automated programs on the forms (anti-bot verification) — legitimate interest in preventing abuse.
- Ensuring the security, integrity and proper operation of the website and measuring its use in aggregate — legitimate interest.
- Complying with legal obligations to which we are subject — compliance with a legal obligation.
Recipients and processors
We do not sell personal data. Messages sent through the forms are not stored on the website: they are delivered to New Perfil by email. We use providers that process data on our behalf under data-processing agreements (Art. 28 GDPR) and with appropriate security guarantees:
- Cloudflare, Inc. — hosting and delivery of the website and of the content management system, anti-bot verification on the forms (Turnstile) and aggregate usage statistics, without cookies.
- Microsoft (Microsoft 365) — New Perfil's email, where form messages are received and kept.
- Benchmark Email — newsletter management: subscriptions, confirmations and mailings.
- Google (Google Maps) — location map, loaded only if you allow the corresponding category in the cookie manager.
International transfers
Data is processed preferably within the European Union. Some of the providers listed are based or have infrastructure outside the European Economic Area (Cloudflare and Benchmark Email in the United States; Microsoft and Google with global infrastructure). In those cases, transfers rely on appropriate safeguards — the European Commission's adequacy decision for companies certified under the EU-US Data Privacy Framework and/or standard contractual clauses — and are limited to what is necessary to provide each service.
Retention periods
We keep data only for as long as necessary for the purposes for which it was collected:
- Contact and catalogue requests: messages are received in New Perfil's email and kept for as long as necessary to respond, handle the request and, where applicable, the subsequent business relationship. The website does not store them.
- Newsletter: until you unsubscribe.
- Technical data and logs: for a limited period, for security and diagnostics. Usage statistics are aggregated and do not identify individuals.
Data subject rights
Under the GDPR, you have the right, at any time, to:
- Access your data and request its rectification.
- Request erasure of your data (right to be forgotten).
- Request restriction of processing or object to it.
- Request data portability, where applicable.
- Withdraw consent, where processing is based on it, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at the email above. You also have the right to lodge a complaint with the competent supervisory authority — the Portuguese Data Protection Authority (CNPD), at www.cnpd.pt.
Cookies
This website uses cookies and similar technologies. To find out which ones and how to manage your preferences, see the Cookies Policy.
Security
We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure. The website is served exclusively over an encrypted connection (HTTPS) through Cloudflare's network, and access to the content management system is restricted to authorised users. Even so, no system is entirely free of risk.
Minors
This website is not directed at minors and we do not knowingly collect minors' data. If you become aware that this has occurred, please contact us so the data can be deleted.
Changes to this policy
We may update this Privacy Policy periodically. The current version will always be available on this page, with its update date.