Privacy Policy

Last updated: 5 October 2026

This Privacy Policy explains how we process personal data collected through the nortewave.pt website, in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Portuguese Law no. 58/2019.

1. Data controller

Nortewave, with registered office at Lake Towers - Edifício D, R. Daciano Baptista Marques 245, 4400-617 Vila Nova de Gaia, Portugal.
Privacy contact: info@nortewave.pt.

2. Data we collect

  • Contact form: name, email, company, phone, customer type, country, brands of interest and the content of your message.
  • Newsletter: email, language, subscription date and the page where you subscribed.
  • Browsing: technical data logged by the server (IP address, browser type, pages visited) and cookies, as described in our Cookie Policy.

We do not collect special categories of data and only ask for the information needed for each purpose.

3. Purposes and legal bases

  • Replying to contact requests and partnership enquiries — pre-contractual steps taken at your request and our legitimate interest in answering business enquiries (Art. 6(1)(b) and (f) GDPR).
  • Sending the newsletter — your consent (Art. 6(1)(a)), which you may withdraw at any time.
  • Website usage statistics — consent given through the cookie banner.
  • Website security and operation — legitimate interest (Art. 6(1)(f)).
  • Compliance with legal obligations — Art. 6(1)(c).

4. Retention periods

  • Contact requests: up to 2 years after the last contact, unless they lead to a business relationship, in which case the legal retention periods for that relationship apply.
  • Newsletter: while your subscription is active; data is deleted once you unsubscribe.
  • Server logs: only for as long as strictly necessary for website security.

5. Recipients and processors

We do not sell your data or share it with third parties for marketing purposes. To run the website we rely on service providers acting as processors, bound by confidentiality and security obligations:

  • our website hosting provider (servers in the European Union);
  • Google Workspace, for receiving and managing email;
  • Weglot, for translating the website content;
  • Google Analytics, only if you consent to statistics cookies.

Where a provider processes data outside the European Economic Area, the transfer relies on a European Commission adequacy decision (such as the EU-U.S. Data Privacy Framework) or on standard contractual clauses.

6. Your rights

You may at any time exercise your rights of access, rectification, erasure, restriction of processing, data portability and objection, and withdraw any consent given, without affecting the lawfulness of prior processing. Simply send your request to info@nortewave.pt. We will reply within one month.

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.

7. Security

We apply appropriate technical and organisational measures to protect personal data, including encrypted connections (HTTPS), restricted access to the administration area and backups.

8. Children

This website is intended for businesses and professionals. We do not knowingly collect data from children under 16.

9. Changes

This policy may be updated to reflect legal changes or changes to our services. The date of the last update is shown at the top of this page.