Privacy Policy
This policy explains how TekWeb 3D processes the personal data of its customers and visitors, in accordance with the General Data Protection Regulation (GDPR).
Draft — review with a lawyer
This text still has unfilled placeholders (in square brackets) and has not yet been reviewed by a lawyer. It should not be considered final before the company details are confirmed and the applicable tax and legal obligations are professionally validated.
1. Data controller
[NOME DA EMPRESA], Tax ID [NIF], registered at [MORADA], contact [EMAIL], is the controller responsible for processing the personal data collected through this site.
2. Data collected
Account data (email, hashed password, preferred language), shipping and billing addresses, order and payment history (no card data, which is handled exclusively by the payment provider), quote requests and attached files, and correspondence exchanged with customer support.
3. Purposes of processing
Creating and managing the customer's account, processing orders and payments, preparing and sending quote proposals, shipping orders, complying with legal and tax obligations, and sending essential information about the account, order or proposal by email.
4. Legal basis
Processing is based on the performance of the sales contract, compliance with legal obligations (in particular tax and invoicing obligations) and, where applicable, the data subject's consent.
5. Sharing data with third parties
The data needed to process payments is shared with the payment provider used at checkout. The shipping data needed is shared with CTT. Data is hosted on a private server (VPS) operated by TekWeb 3D or by a hosting provider under contract. Transactional messages are sent through an email provider. Personal data is never sold or shared for third-party advertising purposes.
6. Retention period
Order and invoicing data is retained for the period required by the applicable tax and commercial legislation. Account data is retained while the account is active; the data subject may request its deletion under the applicable legal terms.
7. Data subject rights
The data subject may request access, rectification, erasure, portability and objection to the processing of their data by contacting [EMAIL], and may also lodge a complaint with the Portuguese data protection authority (CNPD).
8. Security
The site uses an encrypted connection (TLS), securely hashed passwords and role-based access control. Quote request files are private and only accessible to the owning customer and authorised administrators.
9. Contact
For any question about this policy or your personal data, contact [EMAIL].