Privacy Policy
Last updated: November 4, 2026
respects the privacy of everyone who visits the website quintamerouco.client.signed.dev and processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR), Law no. 58/2019 of 8 August and Law no. 41/2004 of 18 August. This policy explains what data we collect, what we use it for, on what legal basis, how long we keep it and how you can exercise your rights.
1. Data controller
The controller of your personal data is:
2. What personal data we collect
We only collect the data needed for each purpose:
- Contact or quote request form: name, email, phone, company, message and any other data you choose to include.
- Browsing data: IP address, device and browser type, pages visited and cookie identifiers, as described in our Cookie Policy.
The fields marked as mandatory in the forms are needed for us to reply to your request. If you do not fill them in, we cannot follow up on your request.
3. Source of the data
As a rule, personal data is provided directly by the data subject when filling in a form or contacting us.
Some technical and browsing data is collected automatically while you use the website, as described in the Cookie Policy.
If data is obtained from third parties or public sources, the data subject will be informed of this under the applicable law.
4. What we use the data for, on what basis and for how long
Once these periods end, the data is deleted or anonymised.
5. Who has access to the data
We do not sell your personal data. Personal data may be processed by service providers acting on our behalf as processors, under Article 28 GDPR. In certain situations, some recipients may act as independent controllers or joint controllers, depending on the nature of the service provided and the applicable law.
6. Transfers outside the European Economic Area
Some providers may process data outside the European Economic Area. In those cases, transfers are made through the mechanisms set out in Chapter V GDPR, namely European Commission adequacy decisions, including the EU-US Data Privacy Framework where applicable, standard contractual clauses or other legally provided mechanisms. You can ask for information about these safeguards at .
7. Security
We apply appropriate technical and organisational measures to protect data against loss, unauthorised access, alteration or disclosure, including an encrypted connection (HTTPS), access control and backups. In the event of a personal data breach likely to result in a risk to the rights and freedoms of natural persons, we notify the CNPD within the legally required terms and deadlines. Where the breach is likely to result in a high risk, we also inform the affected data subjects, unless one of the exceptions provided for in the GDPR applies.
8. Your rights
You can exercise the following rights free of charge, where applicable:
- Access: find out whether we process your data and obtain a copy.
- Rectification: correct inaccurate or incomplete data.
- Erasure: ask for your data to be deleted when it is no longer needed or there is no legal basis for processing it.
- Restriction: ask for processing to be suspended in certain situations.
- Portability: receive, in the cases provided for by law, the data you gave us in a structured, commonly used and machine-readable format, and ask for it to be sent to another controller where technically possible.
- Objection: object to processing based on legitimate interest and, at any time, to processing for direct marketing.
- Withdraw consent: without affecting the lawfulness of processing carried out before the withdrawal.
To exercise these rights, send a request to . We reply within one month, which may be extended by two further months for complex requests, in which case we will let you know. We may ask for additional information to confirm your identity.
We do not carry out processing based solely on automated decision-making, including profiling, that produces legal effects or similarly significantly affects the data subject.
9. Complaints to the supervisory authority
If you believe your data is not being processed lawfully, you can lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.
10. Minors
The website is not specifically intended for children under 13.
Where the processing of data of a child under 13 is based on consent and relates to the direct offer of information society services, it requires the consent of the child's legal representatives, under Article 8 GDPR and Article 16 of Law no. 58/2019.
11. Social networks and external links
We have pages or profiles on social networks, namely Facebook and Instagram. When you interact with these profiles, your data may be processed by us and by the operator of the platform, in accordance with their privacy policies.
For certain features, namely statistics services provided by the platforms, there may be joint controllership under the terms set by the operator.
The website may contain links to third-party sites. We are not responsible for the privacy practices of those sites, so we recommend reading their policies.
12. Changes to this policy
We may update this policy whenever there are relevant legal, technical or organisational changes. The version in force is always the one published on this page, with the date of the last update shown at the top.