Privacy Policy (GDPR)

Last updated: 8 February 2026

1. Data controller

DecAlloy – Soluções de Decapagem, Lda.
Tax ID: 518909964
Address: Rua do Concelho, N.º 475, 3780-356 Avelãs de Caminho, Portugal
Phone: +351 919 256 468
Email: geral@decalloy.pt

2. Data we collect

• Contact form: name, email, phone (if provided), message, IP address and approximate location (city, region and country, derived from the IP) — collected at submission time, for security, spam prevention and request context.
• Technical data: device/browser identifiers, visited pages and usage metrics (only if optional cookies are accepted).

3. Purposes & legal bases

• Responding to inquiries — pre-contractual steps and/or legitimate interests.
• Commercial relationship management — contract performance and legal obligations.
• Website analytics & improvement — consent (non-essential cookies).
• Marketing — consent (when applicable).

4. Sharing & processors

We may use service providers (hosting, email, analytics) acting on our behalf under contract and appropriate safeguards. The IP address collected via the contact form is also sent to an IP geolocation service (ip-api.com) solely to obtain the approximate location. We do not sell personal data.

5. Retention

• Contacts: as long as needed to respond and keep communication history (typically up to 24 months), unless otherwise required by law.
• Contract/invoicing data: for the legal retention period.
• Cookies: as described in the Cookie Policy.

6. Your rights

You may request: access, rectification, erasure, restriction, portability and objection. You may withdraw consent at any time.

To exercise rights: geral@decalloy.pt.

7. Complaints

You may lodge a complaint with the supervisory authority: CNPD (Portugal).

8. Security

We apply appropriate technical and organizational measures to protect personal data.