1. Who is responsible
PMELP – Soluções Digitais e Desenvolvimento de Negócios, Unipessoal Lda (“PMELP”, “we” or “us”) is the controller for personal data described in this notice. Our registered office is Rua dos Amores, Lote 6, R/C Esq., 6300-811 Guarda, Portugal.
This policy applies to pmelp.pt, temporary PMELP preview domains, and communications sent directly to PMELP. A client project may require a separate contract, data-processing agreement or privacy notice.
2. Data we process
Website and security data
When you request a page, our hosting and security provider may process your IP address, request date and time, requested URL, referring page, browser and device information, HTTP headers, and security signals. This is standard technical data needed to deliver and protect the website.
Information you send us
If you contact PMELP by email or telephone, we process the details you provide, such as your name, contact details, organisation, message, project information and our correspondence with you.
Client and supplier information
Where we enter a business relationship, we may process professional contact details, contract and project records, billing information and information required for accounting or legal compliance.
3. Why we use data
| Purpose | Typical legal basis |
|---|---|
| Deliver, maintain and secure the website | Legitimate interests in operating a reliable and secure service |
| Answer enquiries and prepare requested proposals | Steps before a contract and legitimate interests in responding |
| Provide contracted services and manage the relationship | Performance of a contract |
| Accounting, tax and other mandatory records | Compliance with legal obligations |
| Establish, exercise or defend legal claims | Legitimate interests and applicable legal obligations |
| Send optional marketing communications | Consent, or another basis permitted by applicable law; every message will offer an opt-out |
Where we rely on legitimate interests, we consider the need for the processing, its impact and your rights. PMELP does not use this website for solely automated decisions or profiling with legal or similarly significant effects.
4. Providers and recipients
PMELP uses service providers only where needed to operate its business. For the current website these include Cloudflare for Pages hosting, content delivery and security, and our email provider for messages sent to PMELP addresses. Accountants, legal advisers, public authorities or other suppliers may receive limited data where necessary and lawful.
We do not sell personal data. We do not allow advertising networks or third-party analytics to track visitors on the current website.
5. International transfers
Some providers may process data outside Portugal or the European Economic Area. Where GDPR transfer rules apply, PMELP relies on a valid mechanism such as an adequacy decision, the European Commission's Standard Contractual Clauses, or another safeguard permitted by law. You may ask mail@pmelp.pt for information about the safeguard relevant to your data.
6. Retention and security
PMELP does not maintain a separate visitor-profile database for this website. Hosting and security logs are retained under the provider's service settings for the shortest period reasonably needed for delivery, troubleshooting and abuse prevention.
Enquiries that do not become projects are normally deleted or anonymised within 24 months of the last meaningful contact. Client and supplier records are kept for the relationship and then for applicable limitation and record-keeping periods; Portuguese accounting and tax records are generally retained for 10 years. Optional marketing contact data is kept until consent is withdrawn, an objection is made, or the address has been inactive for 24 months. A record may be kept longer where a legal hold, dispute or statutory duty requires it.
PMELP and its providers use proportionate technical and organisational measures intended to protect data. No internet service can guarantee absolute security; please avoid sending unnecessary sensitive information by ordinary email.
8. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction or portability of your personal data; object to processing based on legitimate interests or direct marketing; and withdraw consent at any time without affecting earlier lawful processing.
Send a request to mail@pmelp.pt. We may ask for information needed to verify your identity. We normally respond within one month, subject to extensions allowed by law.
You may also complain to Portugal's supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or another competent EEA authority.
9. Changes and contact
We may revise this policy when the website, providers or legal requirements change. The effective date above identifies the current version.
Questions about this policy or PMELP's use of personal data can be sent to mail@pmelp.pt.