Privacy and cookie policy

1. Data controller

ObraDiSa Construções, Lda

NIPC: 517 366 878

Registered office: R. Cel. António Santos Fonseca 23 8esq, 8000-257 Faro

Email: geral@obradisa.com

Phone: +351 914 547 474 (call to the national mobile network)

Website: https://obradisa.vibepreview.app

For any questions about your personal data, contact us at geral@obradisa.com.

2. What data we collect

Data you provide directly, through the quote request form, by email, phone or WhatsApp:

• name;
• mobile and/or email;
• project location;
• type of work and project status;
• project description and desired timelines;
• files you attach (projects, plans, photographs).

Navigation data, collected automatically when you visit the website: IP address, browser type and version, device type, pages visited, date and time and visit duration.

We do not intentionally collect data from minors under 18. The website is intended for adults wishing to hire construction or renovation services.

3. What we use the data for and on what basis

• Responding to your contact or quote request, carrying out the technical visit and preparing the proposal. Basis: pre-contractual steps at your request (Art. 6(1)(b) GDPR).
• Entering into and executing the works contract, if we proceed together. Basis: contract performance (Art. 6(1)(b)).
• Complying with legal obligations, namely tax and accounting. Basis: legal obligation (Art. 6(1)(c)).
• Contacting you subsequently about your request, if it did not proceed immediately. Basis: legitimate interest in following up on a request you made (Art. 6(1)(f)). You may object at any time.
• Measuring website usage and, if you authorise, analytics and marketing cookies. Basis: consent (Art. 6(1)(a)), which you may withdraw at any time.

We do not sell or transfer your data to third parties for commercial purposes.

4. How long we keep the data

• Quote requests that do not result in a contract: up to 24 months after the last contact, then deleted.
• Clients: during the contract term and, after its end, for the period necessary to comply with legal obligations (e.g. 10 years for tax documentation) and to exercise rights during the works warranty period.
• Navigation data and cookies: for the periods indicated in section 7.

5. Who we share data with

Your data is only shared with entities that provide services to us and process it on our behalf and under our instructions:

• website hosting, forms and contact management platform (HighLevel, Inc.);
• email and file storage provider;
• certified accountant, for tax purposes;
• when necessary for the execution of the works, designers or subcontractors involved in your project, only with the essential data.

We may also disclose data to public authorities when required by law.

If you contact us via WhatsApp or Instagram, that communication is also processed by Meta Platforms Ireland Limited, in accordance with its privacy policy.

6. Transfers outside the European Union

Some service providers (e.g. the HighLevel platform) are based in the United States of America. In such cases, the transfer is made under the EU-US Data Privacy Framework or standard contractual clauses approved by the European Commission, which ensure an adequate level of protection.

7. Cookies

Cookies are small files stored on your device when you visit a website. We use:

• Essential cookies: necessary for the website and form to function. No consent required. Duration: session.
• Preferences cookie: stores your cookie and language choice. Duration: up to 12 months.
• Analytics cookies: allow us to understand how the website is used. Only activated with your consent. Duration: up to 24 months.
• Marketing cookies: allow us to measure the effectiveness of our campaigns. Only activated with your consent. Duration: up to 13 months.

You may change or withdraw your consent at any time via the "Cookie settings" button in the footer, or delete cookies in your browser settings.

8. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, alteration or loss. No internet transmission is fully secure, so we cannot guarantee absolute security.

9. Your rights

Under the GDPR, you have the right to:

• access your personal data;
• request the rectification of incorrect or incomplete data;
• request the erasure of data when it is no longer necessary;
• request the restriction of processing;
• object to processing based on legitimate interest;
• receive the data you provided in a structured format (portability);
• withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise these rights, send a request to geral@obradisa.com. We respond within a maximum of one month.

If you believe your rights have not been respected, you may lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD): Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa · geral@cnpd.pt · www.cnpd.pt.

10. Links to other websites

Our website contains links to third-party sites (Instagram, WhatsApp, Electronic Complaints Book). We are not responsible for the privacy practices of those sites and recommend that you consult their respective policies.

11. Changes to this policy

We may update this policy whenever necessary. The current version is always published on this page, with the date of the last update at the top.