Privacy Policy

1. General information

Certiamb respects the privacy of visitors to the website certiamb.com and processes personal data in accordance with applicable European Union and Portuguese data protection, privacy and information security laws. If you have any questions about how we process personal data or wish to exercise your data protection rights, you can contact us at: geral@certiamb.com.

2. Personal data we may collect

For the purposes of this policy, “personal data” means any information relating to an identified or identifiable natural person, such as a name, email address, telephone number, online identifiers or location data. Through the website we may collect:

• data you actively provide via contact forms (name, email address, telephone number, message content);
• technical data generated when you browse the site (IP address, browser and device type, date and time of access, pages visited);
• information collected through cookies and similar technologies, as described below.

3. Purposes of processing

We only process personal data for specific, explicit and legitimate purposes, in particular to:

• respond to contact requests, queries and quotation requests submitted through the website;
• manage the pre contractual, contractual and post contractual relationship with clients and prospective clients;
• operate, maintain, secure and improve our website and online services;
• comply with legal obligations to which we are subject;
• perform statistical analyses of website use and, where applicable, carry out communication and marketing activities, subject to your prior consent where required.

We will use your data for direct marketing communications only where we have your consent or another valid legal basis, and you may object to such communications at any time.

4. Legal grounds

Depending on the context, Certiamb relies on the following legal grounds for processing personal data:

• performance of a contract or taking steps at your request prior to entering into a contract;
• compliance with legal obligations;
• our legitimate interests, for example in operating and improving the website, ensuring information security and managing our relationship with clients, provided that your fundamental rights and freedoms are not overridden;
• your consent, particularly for the use of certain categories of cookies, marketing activities or sharing data with third parties for specific purposes.

5. Cookies and similar technologies

Our website may use cookies, which are small text files stored by your browser on your device when you visit a website. Cookies enable the site to recognise your device on subsequent visits and improve your browsing experience.

We may use, among others:

• strictly necessary cookies – required for the basic functioning of the website and to enable features such as secure areas;
• functional cookies – used to remember your preferences (for example language settings) and enhance usability;
• analytics cookies – used for statistical purposes and to understand how users interact with the site, helping us to improve content and features; these cookies are not used to directly identify you.

You can configure your browser at any time to block or delete cookies. However, disabling certain categories of cookies may affect the correct functioning of some parts of the website.

6. Analytics and third party services

For statistical analysis and to improve our online services, we may use analytics tools such as Google Analytics, which rely on cookies and similar technologies to collect aggregated information about website usage. We may also use remarketing and interest based advertising features, including across devices, subject to your consent and to the privacy settings you have defined with those providers (for example, Google).

For more information on how Google processes personal data, please refer to Google’s Privacy Policy: https://policies.google.com/privacy https://policies.google.com/privacy

7. Sharing data with third parties

We do not sell or otherwise disclose your personal data to third parties for their own purposes, except where:

• it is necessary for the provision of services and we engage carefully selected service providers (such as hosting companies, IT support, email and analytics tools) who act as data processors on our behalf and under written data processing agreements;
• we are required to do so by law or by order of a competent public authority;
• you have given your explicit consent for a specific disclosure.

In all cases, we limit the data shared to what is strictly necessary and require appropriate confidentiality and security safeguards from our partners.

8. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected or to comply with applicable legal retention periods. Once these periods expire, the data will be securely deleted or irreversibly anonymised so that individuals can no longer be identified.

9. Your rights

Under applicable data protection law, you have, in particular, the following rights regarding your personal data:

• right of access to your data and to obtain information about how it is processed;
• right to rectification of inaccurate or incomplete data;
• right to erasure (“right to be forgotten”) in the situations provided by law;
• right to restriction of processing in certain circumstances;
• right to data portability, where applicable;
• right to object to processing based on legitimate interests or for direct marketing purposes;
• right to withdraw your consent at any time, where processing is based on consent, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at geral@certiamb.com, clearly indicating your request and providing any information necessary to confirm your identity. You also have the right to lodge a complaint with the competent data protection supervisory authority.

10. Security

Certiamb implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure, taking into account the state of the art, implementation costs and the nature, scope, context and purposes of processing. These measures are reviewed and updated regularly to reflect legal and technological developments.

11. Changes to this policy

We may update this Privacy Policy from time to time in order to reflect changes in our activities, legal requirements or the technologies we use. The updated version will always be available on certiamb.com. Where changes are significant, we may also provide additional notice, for example via a banner or dedicated message on the website.