Privacy Policy
Last updated: [date]
This policy explains what personal data Next Vision collects through this site, for what purpose, on what legal basis, and what rights you have as a data subject, under the General Data Protection Regulation (GDPR) and applicable Portuguese law.
1. Who is responsible for processing your data
The data controller for the personal data collected through this site is [Full legal company name], tax number (NIPC) [tax identification number], registered at [full address, postcode and city], Portugal.
For any question about this policy or your personal data, you can contact us at [contact email].
We are not legally required to appoint a Data Protection Officer (DPO), as we do not carry out large-scale processing or systematic monitoring of data subjects. Any data-protection request is still handled directly by us, through the contact above.
2. What data we collect
We collect personal data in the following situations:
- Contact form: name, email, phone (optional), company (optional), subject and the message you send us.
- Technical browsing data: server access logs (IP address, date and time, pages visited), automatically generated by our hosting infrastructure and used only for security and technical diagnostics.
- Cookies and similar technologies: see our Cookie Policy for full detail. At the moment this site does not place any analytics or advertising cookies.
3. What we use your data for
| Purpose | Legal basis |
|---|---|
| Responding to your contact or quote request | Steps taken at your request prior to entering a contract (Art. 6(1)(b)) and consent |
| Aggregate site-usage analysis (once we enable Google Analytics) | Consent, collected before any cookie is placed |
| Targeted advertising (once we enable Meta Ads) | Consent, collected before any cookie is placed |
| Site security and abuse prevention | Legitimate interest (Art. 6(1)(f)) |
4. Who we share your data with
Your data may be processed by the following providers, acting as data processors:
- Site hosting and infrastructure (e.g. Vercel Inc.)
- Contact form submission service: [form provider name]
- Once active: Google LLC (Google Analytics) and Meta Platforms, Inc. (Meta Ads / Pixel)
We do not sell or share your data with third parties for purposes other than those described here.
5. International transfers
Some of the providers above (namely Google and Meta) are based outside the European Economic Area. Where that applies, the transfer is safeguarded by the Standard Contractual Clauses approved by the European Commission, included in those providers' data processing agreements.
6. How long we keep your data
Data submitted through the contact form is kept for [period, e.g. 24 months] after your last contact with us, unless the law requires a longer retention period. Analytics and advertising cookie data, once active, follows the periods listed in the Cookie Policy.
7. Your rights
As a data subject, you have the right to:
- Access the data we hold about you;
- Request correction of inaccurate or incomplete data;
- Request erasure of your data;
- Request restriction of processing;
- Request data portability;
- Object to processing;
- Withdraw consent at any time, without affecting the lawfulness of prior processing;
- Lodge a complaint with the Portuguese data protection authority (CNPD) — www.cnpd.pt.
To exercise any of these rights, contact us at [contact email].
8. Security
We apply technical and organisational measures appropriate to the risk of processing, including encryption in transit (HTTPS) and restricted access to the data we collect.
9. Changes to this policy
We may update this policy from time to time, particularly when we enable new analytics or advertising tools. The date of the last update is shown at the top of this page.