RAITEC3D RAINHA TECNOLOGIES 3D UNIPESSOAL, LDA. ("Raitec 3D", "the Company", "we") respects the privacy of everyone it deals with and processes personal data lawfully, fairly and transparently.
This Privacy Policy explains what personal data we collect, for what purposes, on what legal basis, how long we keep it, who we share it with and what rights data subjects can exercise.
It applies to the processing of personal data of:
This Policy is complemented by our Cookie Policy, which describes in detail the storage technologies used on the Website.
We process personal data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR"), Portuguese Law no. 58/2019 of 8 August (which implements the GDPR in Portugal), Portuguese Law no. 41/2004 of 18 August (privacy in electronic communications) and Decree-Law no. 7/2004 of 7 January (electronic commerce).
RAITEC3D RAINHA TECNOLOGIES 3D UNIPESSOAL, LDA.
Tax number (NIF): 513752153
Registered office: Rua do Casal, 667, 4745-427 São Mamede do Coronado, Trofa, Portugal
Email: [email protected]
Telephone: +351 939 606 299
Business hours: Monday to Friday, 9:00-18:00
The Company has not appointed a Data Protection Officer, as the conditions set out in Article 37 GDPR are not met. All data protection queries should be addressed to the contact details above.
We do not collect more data than is necessary for each purpose. We do not process special categories of data (health data, political or religious beliefs, biometric data, among others) and we ask that no such data be sent to us through the contact form.
| Data subject | Data processed | Source |
|---|---|---|
| Website visitor | IP address (truncated or anonymised where the configuration allows), browser type and version, operating system, device type, language, country/city of access, pages visited, date and time of access, referring page, record of cookie choices. | Collected automatically by the Website, by server logs and by the technologies described in the Cookie Policy. |
| Prospective client (contact form, email, telephone) | Name, telephone number, email address, content of the message and any data the data subject chooses to include (for example company, job title, project description, attachments). Additionally: IP address, date/time of submission and the record of acceptance of the Privacy Policy, as proof of consent and to prevent abuse. | Provided directly by the data subject. |
| Client and client contact persons | Name, job title/role, business contact details, company name, tax number, billing and delivery address, order data, technical specifications and files (CAD/3D models, drawings, requirements), correspondence, invoicing and payment data. | Provided by the client or generated in the course of performing the contract. |
| Supplier, partner or service provider | Name and role of the contact person, business contact details, company name, tax number, invoicing data and bank details. | Provided by the data subject or obtained from publicly available sources (for example a corporate website). |
Contact form submissions are received by email and, where submission logging is enabled, stored in the Website database. In either case, access is limited to Company staff who need the information in order to respond to the enquiry.
Each processing operation has a specific purpose and a legal basis under Article 6 GDPR:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries and preparing quotations | Steps taken at the data subject's request prior to entering into a contract, under Art. 6(1)(b); and consent given through the mandatory acceptance checkbox in the form, under Art. 6(1)(a) | 1 year from the last contact, where no contractual relationship is established |
| Contacting the data subject and sending information about the service or product covered by the enquiry: technical clarifications, proposals, terms, lead times and supporting documentation | Consent given through the acceptance checkbox in the form, under Art. 6(1)(a); and pre-contractual steps, under Art. 6(1)(b) | Until consent is withdrawn and, at most, 1 year from the last contact |
| Evidence of acceptance of the Privacy Policy: record of the ticked box, date, time and IP address | Compliance with the legal obligation to demonstrate consent (Art. 7(1) GDPR), under Art. 6(1)(c) | For as long as the data it relates to is retained and, after its deletion, for as long as necessary to demonstrate compliance |
| Managing the contractual relationship: project execution, production, delivery and client support | Performance of a contract, under Art. 6(1)(b) | For the duration of the contractual relationship and, thereafter, for as long as necessary to comply with applicable legal obligations |
| Invoicing, accounting and compliance with tax obligations | Compliance with a legal obligation, under Art. 6(1)(c) | 10 years, as required by Portuguese tax and accounting law (in particular Art. 123(4) of the Corporate Income Tax Code and Art. 52 of the VAT Code) |
| Supplier and procurement management | Performance of a contract and compliance with a legal obligation, under Art. 6(1)(b) and (c) | Duration of the relationship and 10 years for documents of tax relevance |
| Ensuring the security, availability and integrity of the Website; preventing spam and abuse of the contact form | Legitimate interest in protecting our systems and our users, under Art. 6(1)(f) | Server logs and anti-fraud data: up to 12 months |
| Measuring and improving use of the Website (aggregate statistics) | Consent given through the cookie banner, under Art. 6(1)(a) | Aggregate statistical data: up to 14 months. Cookies: periods stated in the Cookie Policy |
| Recording and demonstrating cookie choices | Compliance with a legal obligation (Art. 7(1) GDPR), under Art. 6(1)(c) | 365 days from the date consent was given |
| Establishing, exercising or defending legal claims in judicial, administrative or arbitral proceedings | Legitimate interest and compliance with a legal obligation, under Art. 6(1)(f) and (c) | Until the applicable limitation periods have expired |
We do not send newsletters or unsolicited commercial communications. By accepting this Policy in the contact form, you consent to the Company contacting you, by email or by telephone, in order to respond to your enquiry and to provide information about the service or product to which that enquiry relates. Your data is not used for prospecting directed at third parties, is not disclosed for marketing purposes and is not added to mailing lists.
Any commercial communication going beyond the scope of the enquiry submitted (for example, information about other services, campaigns or events) requires separate, optional consent given through a distinct checkbox, refusal of which does not prevent the form from being submitted. Every such communication includes a simple, free means of objecting.
Once the stated periods have elapsed, data is securely deleted or irreversibly anonymised.
In the contact form, the fields marked as required are indispensable for us to identify who is contacting us and to respond to the enquiry; without them the message cannot be sent. All other information the data subject chooses to include in the message is optional.
The form includes a mandatory acceptance checkbox, not pre-ticked, by which you declare that you have read this Privacy Policy and consent to the processing of your data in order to be contacted and to receive information about the service or product requested. The form cannot be submitted without that acceptance, since the processing is indispensable to the very purpose you are pursuing: obtaining a reply to your enquiry. If you prefer not to tick the box, you can contact us directly by telephone or email.
Within a contractual relationship, providing identification and billing data is necessary in order to enter into and perform the contract and to comply with the Company's legal obligations; failure to provide it makes contracting impossible.
Where processing is based on consent, that consent is freely given, specific, informed and unambiguous, and is expressed through a positive act: ticking the acceptance box in the contact form or accepting cookie categories in the banner. No box is pre-ticked, and merely submitting data without express acceptance is not treated as consent.
We record the date, time and IP address associated with the acceptance, solely so that we can demonstrate consent under Article 7(1) GDPR.
You may withdraw your consent at any time, as easily as you gave it:
Withdrawing consent does not affect the lawfulness of processing carried out previously on that basis, nor processing based on another legal basis, in particular statutory obligations to retain tax documents.
Personal data is processed directly by Raitec 3D and only by those employees who need it to perform their duties, subject to a duty of confidentiality.
We do not sell, rent or otherwise transfer personal data to third parties for commercial or advertising purposes. Nevertheless, in order to operate our systems we rely on service providers acting as processors (Article 28 GDPR), contractually bound to process data solely on our instructions:
| Category of recipient | Service provided | Capacity |
|---|---|---|
| [HOSTING]: web hosting and email provider | Hosting of the Website and database, email accounts, backups | Processor |
| Cloudflare, Inc. | Content delivery network, security, attack mitigation and protection of email addresses published on the Website | Processor |
| Google Ireland Ltd. / Google LLC | Google Analytics and Google Tag Manager (statistics, with consent), reCAPTCHA (form protection), Google Maps and YouTube (embedded content, with consent) | Processor and, as regards Google's own purposes, independent controller |
| Complianz B.V. | Consent management platform installed on the Website | Processor |
| Certified accountant / accounting services provider | Accounting processing and compliance with tax obligations | Processor |
| Carriers and logistics operators | Dispatch and delivery of parts, prototypes and orders | Independent controller |
| Credit institutions and payment service providers | Processing of payments and transfers | Independent controller |
| Lawyers, auditors and consultants | Legal advice, auditing and defence of legal claims | Processor or independent controller, as the case may be |
| Portuguese Tax and Customs Authority, courts and other public authorities | Compliance with legal obligations and binding decisions | Independent controller |
See the Cookie Policy for detailed information about the third-party services activated on the Website and their respective privacy policies.
We give preference to providers established in the European Union. Whenever a service is provided by an entity established in a third country (in particular Cloudflare, Inc. and Google LLC, both based in the United States), data may be transferred outside the European Economic Area.
Such transfers rely on appropriate safeguards under Chapter V GDPR, namely:
You may request further information about these safeguards using the contact details in section 2.
The Website uses cookies and local storage technologies. Items that are not strictly necessary (statistics and embedded third-party content such as Google Maps and YouTube) are only activated after consent has been given through the consent banner.
The full inventory, identifying each cookie together with its purpose, type and retention period, is set out in the Cookie Policy. Consent may be changed or withdrawn at any time through the "Manage consent" panel.
We implement technical and organisational measures appropriate to the risk, in accordance with Article 32 GDPR, including:
Clients' technical files and intellectual property. The CAD models, drawings, prototypes and specifications entrusted to us are treated as confidential client information: they are used exclusively to perform the contracted project, are not disclosed to third parties without authorisation, and are not reused for our own, promotional or portfolio purposes without prior express consent. At the client's request, we enter into specific non-disclosure agreements.
In the event of a personal data breach likely to result in a risk to the rights and freedoms of data subjects, we will notify the Comissão Nacional de Proteção de Dados within 72 hours and, where the risk is high, will also inform the affected data subjects, in accordance with Articles 33 and 34 GDPR.
We do not take decisions based solely on automated processing, including profiling, which produce legal effects concerning the data subject or similarly significantly affect them, within the meaning of Article 22 GDPR.
The Website and Raitec 3D's services are intended for professionals and businesses and are not directed at minors. We do not knowingly collect data from minors. Under Article 16 of Portuguese Law no. 58/2019, the processing of data of children under 13 on the basis of consent requires authorisation from their legal representatives. If we become aware that we have received a minor's data without such authorisation, we will delete it.
You may exercise the following rights at any time, free of charge:
| Right | What it means | Basis |
|---|---|---|
| Information | To be clearly informed about the processing carried out, which is the purpose of this Policy | Arts. 13 and 14 |
| Access | To know what data we process and obtain a copy of it | Art. 15 |
| Rectification | To correct inaccurate data and complete incomplete data | Art. 16 |
| Erasure | To have data deleted where it is no longer necessary, where you withdraw consent, or where you object on justified grounds | Art. 17 |
| Restriction | To suspend processing in certain situations, for example while the accuracy of the data is verified | Art. 18 |
| Portability | To receive your data in a structured, commonly used format, or to have it transmitted to another controller | Art. 20 |
| Objection | To object to processing based on legitimate interest | Art. 21 |
| Withdrawal of consent | To withdraw, at any time, consent previously given | Art. 7(3) |
| Not to be subject to automated decisions | Not to be subject to solely automated decisions with significant effects | Art. 22 |
Requests should be submitted in writing to [email protected] or by post to Rua do Casal, 667, 4745-427 São Mamede do Coronado, Portugal, indicating which right you wish to exercise. We may request additional information solely to confirm the identity of the requester, where there are reasonable doubts.
We will reply within one month of receipt of the request, extendable by a further two months in particularly complex cases or where multiple requests are received, in which case you will be informed of the extension and the reasons for it.
If you consider that the processing of your data infringes applicable law, you may lodge a complaint with the competent supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisbon, Portugal
www.cnpd.pt · [email protected] · +351 213 928 400
Data subjects resident in another EU Member State may also lodge a complaint with the supervisory authority of the country where they reside, work or where the alleged infringement took place.
Without prejudice to your right to complain, we would be grateful if you would contact us first at [email protected], so that we can try to resolve the matter promptly.
We reserve the right to update this Policy whenever there are changes to our processing activities, to the technologies we use or to applicable law. The version in force is always the one published on this page, identified by the date and version number shown at the top.
Where a change is material, we will inform data subjects by means of a prominent notice on the Website and, where processing is based on consent, we will request fresh consent. Continued use of the Website after changes are published does not in any circumstances replace legally required consent.
For any question, request or complaint regarding this Privacy Policy or the processing of your personal data:
RAITEC3D RAINHA TECNOLOGIES 3D UNIPESSOAL, LDA.
Registered office: Rua do Casal, 667, 4745-427 São Mamede do Coronado, Trofa, Portugal
Email: [email protected]
Telephone: +351 939 606 299
Business hours: Monday to Friday, 9:00-18:00