1. Controller
Bobiset — Eletricidade e Bobinagem, Lda.
Estrada Vale de Mulatas, Lote 10, Arm. 4
2910-737 Setúbal, Portugal
Tax ID (NIF/NIPC): 514 193 433
Email: geral@bobiset.pt
Phone: +351 964 015 371
2. Data we collect
We collect only the data strictly necessary to respond to inquiries submitted through the site:
- Contact form: name, email address, and message.
- Automatic technical data: IP address and HTTP headers, used solely for abuse detection and prevention (rate-limiting and spam protection).
We do not collect special categories of personal data (Article 9 GDPR).
3. Purpose of processing
- To respond to information, quote, or support requests sent via the form.
- To keep a record of customer-supplier communication (accounting and commercial records where applicable).
- To prevent and mitigate abusive use of the form (rate-limiting, honeypot).
4. Legal basis
- Your consent, when you voluntarily submit the form (Article 6(1)(a) GDPR);
- Legitimate interest of Bobiset to answer commercial inquiries and protect its systems against abuse (Article 6(1)(f) GDPR);
- Legal obligation, whenever the communication originates accounting or commercial documents subject to mandatory retention (Article 6(1)(c) GDPR).
5. Third parties
Your data is shared only with providers indispensable to the site's operation:
- Resend (Resend, Inc.) — transactional email service. Receives name, email, and message to deliver the communication to the Bobiset team. Data may be processed in the United States under the European Commission's standard contractual clauses.
- Vercel (Vercel Inc.) — hosting and CDN. May access technical data such as IP addresses and HTTP headers to serve pages and protect against abuse.
We do not sell or share your data with third parties for marketing purposes. We do not perform automated profiling.
6. Retention
- Contact-form messages: retained for as long as strictly necessary to respond and follow up commercially, up to 3 years after the last contact, unless longer periods are imposed by law (tax, accounting).
- Technical/abuse logs: retained for up to 30 days.
7. Your rights
Under the GDPR you have the right to:
- Access your personal data;
- Request rectification of inaccurate data;
- Request erasure ("right to be forgotten");
- Restrict or object to processing;
- Request portability of your data;
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, contact us at geral@bobiset.pt.
8. Complaints
If you believe the processing of your data infringes the GDPR, you may file a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.
9. Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, or destruction. The site is served exclusively over an encrypted connection (HTTPS).
10. Changes to this policy
This policy may be updated to reflect legal or operational changes. The date of the latest version is shown at the top of this document.