Privacy Policy
Last updated: January 10, 2026
1. Data Controller
Cresvante, Lda., with registered office at Av. da Liberdade 110, 3.º Dto., 1250-146 Lisbon, Portugal, Tax ID 516 847 231, is the entity responsible for the processing of your personal data collected through this website. For data protection queries, you may contact us at privacidade@cresvante.com.
2. Personal Data Collected
We collect the following personal data when you interact with our website: identification data (name) and contact data (email address) voluntarily provided through the contact form; browsing data collected automatically, including IP address, browser type, operating system, pages visited, visit duration and referral source; and cookie data as described in our Cookie Policy. We do not collect sensitive data, personal financial information or data from minors under 16.
3. Purposes and Legal Basis of Processing
Your personal data is processed for the following purposes: responding to messages sent via the contact form (legal basis: consent, Article 6(1)(a) GDPR); improving the browsing experience and optimising website content (legal basis: legitimate interest, Article 6(1)(f) GDPR); complying with legal and regulatory obligations applicable in Portugal (legal basis: legal obligation, Article 6(1)(c) GDPR); and aggregated and anonymous statistical analysis of website traffic (legal basis: legitimate interest).
4. Retention Period
Data collected through the contact form is retained for a maximum period of 12 months after the last interaction, unless there is a legal basis for longer retention. Browsing data and cookies are retained according to the timeframes indicated in the Cookie Policy. Data required for compliance with legal obligations is retained for the periods provided by applicable Portuguese legislation.
5. Data Sharing
We do not sell, rent or share your personal data with third parties for commercial purposes. Data may be shared with: essential service providers for website operation (hosting, analytics), always under sub-processing agreements with adequate safeguards; and competent authorities when required by Portuguese or European law. All service providers are located within the European Economic Area or in countries with an adequacy decision from the European Commission.
6. Your Rights
Under the General Data Protection Regulation (GDPR) and Portuguese Law No. 58/2019, you have the following rights: right of access to your personal data; right to rectification of inaccurate or incomplete data; right to erasure of your data ("right to be forgotten"); right to restriction of processing; right to data portability; right to object to processing; and right to withdraw consent at any time. To exercise any of these rights, contact us at privacidade@cresvante.com. We will respond within a maximum of 30 days. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
7. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including SSL/TLS encryption in all communications, restricted access controls and periodic security assessments. Despite these measures, no system is completely secure and we cannot guarantee the absolute security of internet transmissions.
8. Changes to This Policy
We reserve the right to update this Privacy Policy periodically to reflect changes in our practices or applicable legislation. Significant changes will be communicated through the website. The date of the last update can be found at the top of this document. We recommend periodic review of this policy.