Privacy Policy

The controller of your personal data is Ms Atlantida Constructions, Ltd. ("we"), a construction and outdoor services company working in Cascais, Sintra and the surrounding area.

You can reach us at: msatlantidaconstructions@gmail.com · R. Dr. Francisco Gentil 172, 2755-226 Alcabideche, or through the form on our contact page.

• Contact form and quote requests: name, email, phone (optional), the service you are interested in and your message.
• Job applications: name, email, phone (optional) and the message you send us.
• Clients: the details needed to prepare estimates and invoices, such as name, tax number (NIF), address and contact details.
• Usage statistics: only if you accept analytics cookies, Google Analytics collects data on how you use the site (pages visited, device type, approximate location).

We do not ask for, and do not want to receive, special categories of data (for example health data). Please do not include them in your messages.

• Replying to your request and preparing estimates — steps taken at your request before a contract (Art. 6(1)(b) GDPR).
• Carrying out works and services you order — performance of a contract (Art. 6(1)(b)).
• Meeting tax and accounting duties — legal obligation (Art. 6(1)(c)).
• Assessing job applications — pre-contractual steps (Art. 6(1)(b)).
• Site usage statistics — your consent (Art. 6(1)(a)), which you can withdraw at any time.
• Keeping the site secure and preventing abuse — legitimate interest (Art. 6(1)(f)).

We do not sell your data, do not use it for marketing without your consent and do not make automated decisions with legal effects about you.

• Contact messages that do not lead to work: up to 24 months after our last contact.
• Job applications: up to 12 months after the vacancy closes, unless you are hired or allow us to keep them longer.
• Client data, estimates and invoices: for as long as Portuguese tax law requires (usually 10 years).
• Google Analytics data: up to 14 months.

We use service providers that process data on our behalf, only as far as needed:

• Vercel Inc. — website hosting.
• Render Services, Inc. — application server hosting.
• Supabase, Inc. — database.
• Resend, Inc. — notification emails.
• Google Ireland Ltd. — Google Analytics (only with consent) and Google Maps (only when you open a map).

Some of these providers are based in, or store data, outside the European Economic Area, notably in the USA. Such transfers rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.

We may also disclose data to our accountants, public authorities or courts where the law requires it.

Under the GDPR you have the right to access, correct and erase your data, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting processing done before.

To exercise these rights, contact us using the details above. We reply within one month.

You may also lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.

We protect data with encrypted connections (HTTPS), restricted access to the admin area and providers that apply appropriate security measures. No system is perfectly secure, but we review our measures regularly.

We may update this policy when the site or the law changes. The date of the last update is shown at the top of this page.