Privacy Policy

1. Controller

EMERALDMIRROR – UNIPESSOAL, LDA (“EmeraldMirror”, “we”), a company incorporated in Portugal, is the data controller for the personal data processed through this website.

Contact for data protection matters: use the contact form available on this website.

2. Legal framework

We process personal data in accordance with Regulation (EU) 2016/679 (GDPR), Portuguese Law no. 58/2019 of 8 August (which implements the GDPR in Portugal) and Law no. 41/2004 on privacy in electronic communications.

3. Data we collect

• Contact form data: name, company, email, phone, country, request type and message.
• Technical data: IP address, browser and device information, pages visited (only where strictly necessary or consented).
• Correspondence you send us by email.

4. Purposes and legal bases

• Replying to your enquiry and preparing a possible contract — Art. 6(1)(b) GDPR (pre-contractual steps).
• Managing the commercial relationship and business communications — Art. 6(1)(f) (legitimate interest).
• Non-essential cookies and analytics — Art. 6(1)(a) (consent).
• Legal, accounting and tax obligations — Art. 6(1)(c).

5. Recipients

Data may be shared with service providers acting as processors (hosting, database, email delivery) bound by written data-processing agreements, and with public authorities where legally required. We do not sell personal data.

6. International transfers

Where a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses with appropriate supplementary measures.

7. Retention

Enquiry data is kept for up to 3 years from the last contact, unless a contractual or legal obligation requires a longer period (typically 10 years for accounting records under Portuguese law).

8. Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interest; where processing is based on consent, you may withdraw it at any time. Requests: use the contact form available on this website.

You also have the right to lodge a complaint with the Portuguese supervisory authority, CNPD (Comissão Nacional de Proteção de Dados) — www.cnpd.pt.

9. Security

We apply appropriate technical and organisational measures, including encrypted transport (HTTPS), access control and least-privilege database policies.

10. Updates

This policy may be updated; the version in force is the one published on this page.