Privacy Policy

Contact form or email enquiries: Email address Name (optional) Message content

Purpose: to respond to your message. Legal basis: consent (Article 6(1)(a) GDPR). Retention: 12 months after the last communication, unless a longer legal retention obligation applies.

Newsletter subscription: Email address Preferred language Subscription date

Purpose: sending editorial updates about mold, damp, and indoor air quality in Portugal. Legal basis: consent (Article 6(1)(a) GDPR). Retention: until unsubscribe + 30 days for technical processing.

Free content download (PDF / checklist): Email address

Purpose: delivering the requested document and automatically entering the user into the email sequence associated with that downloaded resource. Legal basis: consent and/or performance of pre-contractual or contractual steps, as applicable.

Purchases, bookings, or payments (if applicable): Name Email address Data necessary to complete the booking or purchase Limited transaction information

Payments are processed by third-party payment providers such as Stripe. MoldCheck.pt does not store full payment card details.

Traffic analytics (Plausible Analytics): MoldCheck.pt uses Plausible Analytics, an analytics tool that uses no cookies, collects no personally identifiable data, and creates no user profiles.

Data collected may include: pages visited, approximate country, referrer URL, and device type. None of this data is personally identifiable.

Plausible does not require consent under the GDPR or Portuguese Law 41/2004 because it does not process personally identifiable data.

Necessary cookies: Language preference cookie: stores the user’s selected language. Duration: 365 days. No consent required. Session cookie: technical session management. Duration: session. No consent required.

We do not use advertising cookies, third-party tracking cookies, social media pixels, or analytics tools that collect personal data without consent.

We do not sell, rent, or transfer your personal data to third parties for marketing purposes.

Your data may be shared with:

Technical service providers (data processors under Article 28 GDPR), such as:

website hosting provider

email / newsletter platform

Plausible Analytics

Stripe or other payment providers

other suppliers strictly necessary to operate bookings, downloads, or forms

Legal authorities: we will disclose personal data to competent authorities if legally required to do so (Article 6(1)(c) GDPR).

Personal data is processed preferably within the European Union. Where a service provider processes data outside the EU/EEA, we ensure that either:

a European Commission adequacy decision is in place, or

Standard Contractual Clauses (SCCs) approved by the European Commission are in force.

Under the GDPR and Portuguese Law 58/2019, you have the following rights:

— Right of access (Article 15 GDPR): to know what personal data we process about you and to obtain a copy.

— Right to rectification (Article 16): to request correction of inaccurate or incomplete data.

— Right to erasure (Article 17): to request deletion of your personal data ("right to be forgotten"), where applicable.

— Right to restriction of processing (Article 18): to request suspension of processing in certain circumstances.

— Right to data portability (Article 20): to receive your data in a structured, commonly used, machine-readable format, or to request its transfer to another controller, where technically feasible.

— Right to object (Article 21): to object to processing based on legitimate interests.

— Right to withdraw consent: at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights: privacidade@moldcheck.pt

We will respond within 30 days. In complex cases, this period may be extended to 60 days, and you will be informed of the extension.

If you believe our processing of your personal data violates the GDPR, you have the right to lodge a complaint with:

CNPD Comissão Nacional de Protecção de Dados Rua de São Bento, n.º 148, 3.º 1200-821 Lisbon Portugal www.cnpd.pt

geral@cnpd.pt

You may also lodge a complaint with the supervisory authority in your country of residence, where applicable.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, or destruction, including encrypted transmission (HTTPS/TLS), access controls, and regular backups.

No system is absolutely secure. In the event of a data breach posing risk to individuals, we will notify the CNPD within the applicable legal timeframe and, where necessary, affected individuals without undue delay.

This website is not directed at persons under 16 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided us with data, we will delete it as soon as reasonably possible.

This website contains links to external websites, including InspectOS.pt and PropCheck.pt. We are not responsible for the privacy practices of those websites. Please consult their respective privacy policies.

We may update this policy. The date of the latest update is shown at the top of this page. In the event of material changes, we will publish a visible notice on the website.

For any question about this policy or about the processing of your data: info@moldcheck.pt