Privacy policy

Privacy Policy

Last updated: 12 August 2026.

This Privacy Policy explains how CertiAmb (“we”) collects, uses and protects the personal data you provide through this website, in accordance with the General Data Protection Regulation (GDPR: Regulation (EU) 2016/679) and applicable Portuguese law.

1. Data controller

The controller of your data is CertiAmb, operating in Lisbon, Grândola and Cartaxo (Portugal). For any privacy or data protection matter, you can contact us at geral@certiamb.com.

2. What data we collect

We only collect the data you voluntarily provide when filling in the contact form on this site, namely:

  • Name;
  • Email address;
  • Phone number (optional);
  • Project location (optional);
  • The content of the message you send us.
  • Documents, plans and photographs relating to the property that you voluntarily send us by email.

We do not collect special categories of data (sensitive data) and we do not carry out automated decision-making or profiling of visitors.

3. Purposes and legal basis

We use your data solely to respond to your enquiry, clarify your question and follow up on a possible project, as well as to keep the communication history needed to handle the matter. The legal basis is your consent when submitting the form and our legitimate interest in responding to professional enquiries (Article 6(1)(a) and (f) GDPR).

4. Sharing data with third parties

We do not sell or share your personal data for marketing purposes. Besides the contact details, we process the content of the message and, when you voluntarily send them by email, documents, plans or photographs relating to the property, solely to frame and answer the request. Data submitted through the form is processed by the Web3Forms service, which forwards the form content to our email, acting as a processor and only for the purpose of delivering the message. We may disclose data where legally required to do so by a competent authority.

5. Data retention

We keep contact data only for as long as necessary to respond to your request and manage any relationship arising from it. When no longer needed, the data is deleted, unless there is a legal obligation to retain it.

6. Your rights

Under the GDPR, you have the right to access your data, request its rectification, erasure (“right to be forgotten”), restriction of or objection to processing, as well as the right to data portability. You can exercise these rights at any time at geral@certiamb.com. You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

7. Cookies and visit statistics

We use a simple, privacy-friendly visit-statistics tool (Vercel Web Analytics) that does not use cookies and does not personally identify visitors. It collects only aggregated, anonymous data, such as page views, country and device type.

We also use Google Analytics 4 to better understand how the site is used. This tool relies on analytics cookies and is therefore only activated with your consent: when you enter the site, analytics cookies are disabled by default (Google Consent Mode v2), and no Google Analytics cookies are set. Technical signals may still be sent without cookies and without a persistent identifier, in line with Google Consent Mode. Once you accept in the cookie notice, Google Analytics starts collecting data with cookies. You can decline or accept at any time; declining does not affect browsing. IP addresses are anonymised and no advertising or cross-site tracking cookies are used.

The legal basis for these analytics cookies is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time by clearing your browser cookies.

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure. Nevertheless, no method of transmission over the Internet is completely secure, so we cannot guarantee absolute security.

9. Changes to this policy

We may update this Privacy Policy whenever necessary. The version in force is always the one published on this page, showing the date of the last update.

10. Complaints

If you believe that the processing of your data does not comply with applicable law, you have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), www.cnpd.pt.