Privacy Policy

Data Controller

The controller responsible for processing your personal data is:

• Name: Webmari.pt
• Controller: Mariana Alves Barbosa da Silva
• Tax ID: 311264557
• Address: Mafra, Portugal
• Contact email: geral@webmari.pt
• Phone: +351 925 928 900
• Website: https://webmari.pt

Personal Data Collected

2.1 — Contact form / quote request

When you fill in the contact form available on this site, we collect the following data:

• Required: full name, email address, service(s) of interest.
• Optional: phone number, company name, descriptive message, estimated budget, desired timeline, indication of an existing website.

This data is voluntarily submitted by you and is necessary for us to respond to your request.

2.2 — Browsing data

When you visit this site, the web server may automatically log technical information, namely:

• IP address (anonymized or truncated whenever possible);
• Date and time of access;
• Pages visited and referring URL;
• Browser type and operating system;
• HTTP response code.

This log is intended exclusively for security and technical diagnostic purposes.

2.3 — Cookies

We use essential cookies for the site to function and, with your consent, analytics cookies. For detailed information about the cookies used, see our Cookie Policy.

Purposes and Legal Bases for Processing

We process your personal data based on the following purposes and legal grounds set out in Article 6 of the GDPR:

We do not use your data for automated decision-making or profiling with significant legal effects, under Article 22 of the GDPR.

Data Retention Periods

Your personal data is retained only for as long as necessary for the purposes that led to its collection, respecting the following periods:

Once the retention period has elapsed, data is securely deleted or irreversibly anonymized.

Recipients and Processors

Your personal data may be shared with third parties under the following terms:

5.1 — Technology service providers (processors)

• Server / Web hosting (HostGator.com, based in the United States): the provider that hosts the site and its data. It processes data solely for technical hosting purposes, under a data processing agreement pursuant to Article 28 of the GDPR.
• Google LLC (Google Analytics): only if you accept analytics cookies. See the Google Privacy Policy. IP data is anonymized before transmission.
• Email service (SMTP): used to send internal notifications. It does not store message content beyond the time necessary for delivery.

5.2 — Authorities and legal obligations

Your data may be disclosed to competent authorities when required by law or by court order, namely for tax, judicial or public safety purposes.

We do not sell, give away for free, or trade your personal data to third parties for marketing purposes.

International Data Transfers

Some processors (such as HostGator.com, our web hosting provider, and Google LLC, in the case of Google Analytics) are based in the United States and may process personal data outside the European Economic Area (EEA). These transfers are carried out based on:

• Standard Contractual Clauses (SCCs) approved by the European Commission, which guarantee a level of protection equivalent to that required by the GDPR; and/or
• Adequacy decisions adopted by the European Commission, where applicable.

You can obtain information about the applicable safeguards by contacting us at geral@webmari.pt.

Data Subject Rights

Under the GDPR (Articles 15 to 22), you have the right to:

• Right of access (Art. 15): request a copy of the personal data we process about you;
• Right to rectification (Art. 16): request the correction of incomplete or inaccurate data;
• Right to erasure ("right to be forgotten") (Art. 17): request the deletion of your data, when applicable;
• Right to restriction of processing (Art. 18): request the temporary suspension of processing of your data;
• Right to data portability (Art. 20): receive the data you provided to us in a structured, commonly used format, when processing is based on consent or contract;
• Right to object (Art. 21): object to the processing of your data based on legitimate interest or for direct marketing purposes;
• Right to withdraw consent (Art. 7(3)): withdraw consent given at any time, without affecting the lawfulness of processing carried out based on consent given prior to its withdrawal.

How to Exercise Your Rights

To exercise any of the rights mentioned above, you can contact us through the following means:

To verify your identity, we may request additional information in a proportionate and appropriate manner.

Right to Lodge a Complaint with the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR or applicable national legislation, you have the right to lodge a complaint with the competent supervisory authority in Portugal:

This right does not prejudice any other administrative or judicial remedy.

Data Security

We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, namely:

• Encrypted communications via HTTPS / TLS;
• HTTP security headers (HSTS, X-Content-Type-Options, X-Frame-Options);
• Restricted access control to databases and files containing personal data;
• Anti-spam protection on forms (honeypot and server-side validation);
• Access to administrative data protected by authentication.

In the event of a data breach posing a high risk to your rights and freedoms, we will notify the CNPD within the legal deadline (72 hours) and will notify you directly without undue delay.

Cookies and Similar Technologies

We use cookies and similar technologies. For complete information about the cookies used, their purposes, duration and how you can manage or refuse them, see our Cookie Policy.

You can also manage your cookie preferences at any time using the button below:

⚙️ Manage cookie preferences

Links to Third-Party Sites

This site may contain hyperlinks to third-party websites. These links are provided for your convenience. Webmari.pt is not responsible for the privacy practices or content of such sites. We recommend reading their respective privacy policies before providing any personal data.

Changes to This Policy

This Privacy Policy may be updated periodically, namely in the event of legislative changes or new site features. The date of the last update is shown at the top of this document.

In case of significant changes, we will notify you through the site or by email, if we have your email address. We recommend checking this page periodically.