Privacy Policy

Data Controller

The data controller responsible for your personal data is the entity identified below, which operates the website carscompany.pt:

Data We Collect

We only collect data strictly necessary for the operation of the website and to provide you with the best possible service.

Automatically collected data

• IP address (anonymized in server logs)
• Browser type and operating system
• Pages visited and time spent
• Cookie preferences

Data you provide

• Email address (when using login)
• Contact details (when you contact us by phone, email, or WhatsApp)

Purpose and Legal Basis

Your data is processed for the following purposes:

• Website operation — ensuring navigation and website functionality (legitimate interest)
• Authentication — managing access to the administration area via magic link (contract performance)
• Statistical analysis — understanding how the site is used to improve it (consent)
• Communication — responding to vehicle information requests (legitimate interest)

The processing of your data is based on your consent (Art. 6(1)(a) GDPR), contract performance (Art. 6(1)(b)), and legitimate interest (Art. 6(1)(f)), as applicable to each purpose.

Cookies

This website uses cookies — small text files stored on your device. You can manage your cookie preferences at any time using the cookie preferences button available on all pages.

Necessary Cookies

Essential for the website to function. These cannot be disabled.

• PHPSESSID — User session (expires when browser is closed)
• cookie_consent — Record of your cookie choice (1 year)

Analytics Cookies

Used only with your consent. They help us understand how visitors use the site. We currently do not use third-party analytics services.

Data Retention

Your personal data is retained only for the period necessary for the purposes for which it was collected. Session data is deleted when you close your browser. Account data is retained while the account is active. After account deletion, data is erased within 30 days.

Data Sharing

We do not sell, rent, or share your personal data with third parties for marketing purposes. Your data may be shared with the web hosting provider (for website operation) and with competent authorities when required by law.

Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — know what data we hold about you
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request the deletion of your data
• Right to portability — receive your data in a structured format
• Right to object — object to the processing of your data
• Right to withdraw consent — withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us by email at geral@carscompany.pt. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.

Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction, including SSL/TLS encryption on all communications, passwordless authentication (magic link), and regular backups.

Changes to This Policy

We reserve the right to update this Privacy Policy. Any changes will be published on this page with the update date. We recommend checking this page periodically.