Privacy Policy — Zalvantez

Zalvantez, Lda. (hereinafter 'Zalvantez', 'we', or 'our'), headquartered at Rua Augusta, 274, 2nd floor, 1100-053 Lisbon, Portugal, NIPC 517 432 891, is committed to protecting the privacy of users of the website zalvantez.com. This Privacy Policy describes how we collect, use, store, and protect your personal data, in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and applicable Portuguese legislation, namely Law No. 58/2019 of 8 August.

1. Data Controller

The entity responsible for the processing of your personal data is Zalvantez, Lda., with the following contact details: Address: Rua Augusta, 274, 2nd floor, 1100-053 Lisbon Email: privacidade@zalvantez.com Telephone: +351 210 456 789

2. Personal Data We Collect

We collect the following personal data when you use our website: • Identification data: full name, provided through the contact form. • Contact data: email address, provided voluntarily. • Communication content: messages sent through the contact form. • Technical data: IP address, browser type, operating system, pages visited, date and time of access, collected automatically through cookies and similar technologies. • Preference data: selected language and cookie preferences.

3. Purposes and Legal Basis for Processing

We process your data for the following purposes: • Responding to contact requests — legal basis: performance of pre-contractual measures at the data subject's request (Article 6(1)(b) GDPR). • Improving the website and browsing experience — legal basis: legitimate interest (Article 6(1)(f) GDPR). • Statistical analysis of traffic — legal basis: consent (Article 6(1)(a) GDPR). • Compliance with legal obligations — legal basis: legal obligation (Article 6(1)(c) GDPR).

4. Data Sharing

Your personal data is not sold to third parties. We may share data with: • Technology service providers who ensure the operation of the website, bound by confidentiality agreements. • Competent authorities, when required by law or court order.

5. Data Retention Period

Contact data and messages are retained for 24 months after the last contact. Technical and browsing data are retained for 13 months. After the retention period, data is securely deleted or anonymised.

6. Your Rights

Under the GDPR, you have the right to: • Access your personal data. • Rectify inaccurate or incomplete data. • Request erasure of your data ('right to be forgotten'). • Restrict the processing of your data. • Data portability. • Object to the processing of your data. • Withdraw consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal. To exercise any of these rights, contact us at privacidade@zalvantez.com. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.

7. Data Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction, or alteration, including SSL/TLS encryption, firewalls, and access controls.

8. Changes to This Policy

We reserve the right to update this Privacy Policy. Any significant changes will be communicated through the website. We recommend periodically reviewing this page.