Legal document
Privacy policy
1. Data controller
The controller of the personal data collected through this website is IM-OAK Group, Lda., with registered office at Travessa Bouça do Monte, 66, 4445-357 Ermesinde, NIPC 519455860, contactable at jose.carvalho@imoak.pt.
2. Data collected
The contact form collects the name, the email address, the telephone number, the company name and the content of the message. Submitting the form is voluntary and none of this data is obtained by any other means.
This site also counts page views, so as to know which content is being looked for. Each view records four things only: the address of the page, the site it belongs to, the moment it was opened and the domain the visit came from, a search engine for instance. Only the domain name is kept, never the full referring address, which could carry search terms. No IP address, device type or identifier of any kind is collected, no cookies are used, and there is no way to link two views to the same person. The counting is done in the company's own database, referred to in point 5, with no third party involved. Whoever manages the site may exclude visits made from their own device from the count: a marker to that effect is then kept in that browser, is never sent to the server and identifies no one.
3. Purpose and lawful basis
The data is processed solely to answer the enquiry submitted and, if it is taken further, to prepare and present a proposal for services. The basis is the consent of the data subject and, at the pre-contractual stage, the taking of steps prior to entering into a contract.
4. Retention period
Contact data that does not lead to a contractual relationship is kept for one year from the last communication and deleted at the end of that period. Data associated with a contractual relationship follows the applicable statutory retention periods, as a rule ten years, counted under Portuguese tax and commercial law.
5. Processors and disclosure to third parties
The data is not passed to third parties for commercial purposes. It may be processed by technical service providers, namely Amen, which hosts the pages of this site, Supabase, which receives and stores the requests sent through the form, and Resend, which delivers the notification by email, each bound by a data processing agreement.
6. International transfers
Requests sent through the form are received and stored on servers located in Ireland, within the European Union. The email notification is delivered by Resend, a company established in the United States, so the data contained in that notification, the name, email address, telephone number and the content of the message, may be processed outside the European Economic Area. That transfer is subject to the safeguards required by the General Data Protection Regulation for transfers to third countries.
7. Rights of the data subject
The data subject may request access to, rectification, erasure, restriction of processing and portability of their data, and may object to the processing and withdraw consent at any time. Requests should be addressed to jose.carvalho@imoak.pt.
There is also the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (the Portuguese data protection authority).
8. Cookies
This site does not use its own analytics cookies, nor third-party cookies. The typefaces are served from this same server, so a visit does not communicate the visitor's IP address to any external party.
9. Changes
This policy may be updated. The version in force is the one published on this page. Last revised: 09/09/2026.