The aim is to inform users of the website oportoflag.com about the general rules for the processing of personal data, which are collected and processed in strict compliance with the provisions of the applicable data protection legislation.

We are committed to protecting the confidentiality of personal data and have adopted measures we consider appropriate to ensure the accuracy, integrity, and confidentiality of personal data, as well as to guarantee all other rights of data subjects.

This privacy statement was last updated in June 2025.

In this privacy statement, we explain what we do with the data we obtain through this website. We recommend that you read this statement carefully.

We comply with the requirements of privacy legislation by:

Declaring the purposes for which we process personal data. We do this through this privacy statement;

Aiming to limit the collection of personal data to only what is necessary for legitimate purposes;

Requesting your explicit consent before processing your personal data in cases where consent is required;

Taking appropriate security measures to protect your personal data and requiring the same from parties processing data on our behalf;

Respecting your right to access, correct, or delete your personal data upon request.

If you have any questions or would like to know exactly what data we hold about you, please contact us via the email address mentioned in the final section of this Privacy Policy.

General Principles
We are committed to ensuring that personal data are:

Processed lawfully, fairly, and transparently in relation to data subjects, collected for specific, explicit, and legitimate purposes, and not further processed in a manner incompatible with those purposes;

Kept in a form which permits identification of data subjects only for as long as necessary for the purposes for which they are processed;

Processed in a way that ensures their security, including protection against unauthorized or unlawful processing and against accidental loss, destruction, or damage, using appropriate technical or organizational measures.

Purposes of Personal Data Collection
We may collect or receive personal information for various purposes related to our business operations, which may include contacting you via phone, mail, email, and/or web forms.

We use the following data: Name, Website, Address, Tax ID, Email, and Phone Number.

The legal basis on which we may process this data is:

Compliance with a legal or contractual obligation, for example, when we provide one of our services to you;

To provide you with our newsletter services, only when explicitly requested (name and email);

When the contact form is used, the data collected therein is solely to respond to the Client’s inquiry, manage their requests, and monitor the quality of the services provided (name, email, phone number);

Personal Data Retention Period
We retain personal data only for as long as necessary to fulfil the specific purposes for which it was collected. However, we may be required to retain some personal data for a longer period due to legal obligations.

During the processing period, we ensure personal data is treated in accordance with this Privacy Policy. Once the data is no longer needed, we will securely delete it.

With regard to consent, withdrawing consent does not affect processing already carried out based on prior consent.

Your Rights
You have the right to:

Be informed

Access, rectify, restrict, or delete your data

Data portability

Object to processing

File a complaint with the competent authorities

Disclosure Practices
Here is information about our disclosure practices:

We disclose personal information if required to do so by law or court order.

If our website or organization is acquired, sold, or involved in a merger or acquisition, your data may be disclosed to our advisers and any potential buyers and transferred to the new owners.

A Data Processing Agreement exists with Google, but Google may not use the data for any other Google services.

We block the inclusion of full IP addresses.

Security
We are committed to the security of personal data. We take appropriate security measures to limit misuse and unauthorized access to personal data.

Third-Party Websites
This privacy statement does not apply to third-party websites linked from our website. We cannot guarantee that these third parties handle your personal data reliably or securely. We recommend that you read their privacy statements before using those websites.

Changes to This Privacy Statement
We reserve the right to make changes to this privacy statement. It is advisable to review this statement regularly to stay informed of any changes. Additionally, we will actively inform you whenever possible.

Cookies
Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.

Contact Details
Name: Bandeira & Vieira de Sousa, Lda.
Address: Rua Fontaínhas, nº129, 3ºTraseiras
Postal Code: 4000-239 Porto
Country: Portugal
Tax ID: 517 772 507
Email: oportoflag@oportoflag.com