The controller of the personal data collected through the website iddigital.pt (the «Website») is Marco P. C. G. Ferreira, trading as «ID Digital», VAT number 204 436 346, with registered address at Rua da Chaparra, n.º 20, 3810-828 Oliveirinha, Portugal, reachable by email at info@iddigital.pt.
This Privacy Policy describes how ID Digital collects, uses, stores and protects the personal data of Website users (the «Users»), in compliance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — «GDPR»), and Portuguese Law No. 58/2019 of 8 August.
ID Digital is committed to respecting Users' privacy and to processing their personal data in a lawful, fair and transparent manner. Personal data collected through the Website may include, depending on the type of interaction: name; email address; phone or mobile number; postal address; VAT number; browsing data (IP address, browser type, operating system, pages visited, date and time of access); any other data voluntarily provided by the User through contact forms, quote requests or registration.
Users' personal data is processed for the following purposes: responding to contact, information or quote requests; providing and managing contracted services (web hosting, development, maintenance and other ID Digital services); invoicing and compliance with tax and accounting obligations; sending commercial or promotional communications, only where the User has given prior consent; improving the Website's performance and browsing experience; complying with legal obligations applicable to ID Digital; pursuing ID Digital's legitimate interests, including fraud prevention and Website security.
The processing of personal data is based, as applicable, on the following grounds set out in Article 6 of the GDPR: Consent — where the User expressly authorises processing for one or more specific purposes (e.g. receiving commercial communications); Performance of a contract — where processing is necessary for the performance of a contract to which the User is a party, or for pre-contractual steps taken at the User's request; Legal obligation — where processing is necessary for compliance with a legal obligation to which ID Digital is subject; Legitimate interests — where processing is necessary for the purposes of ID Digital's legitimate interests, provided these do not override the User's fundamental interests, rights and freedoms.
ID Digital does not sell, transfer or rent personal data to third parties. Personal data may be shared with third parties only where strictly necessary for the purposes described in this Policy, namely with: service providers acting on behalf of ID Digital who require access to the data in order to deliver their services (e.g. hosting services, email services or invoicing platforms), bound by confidentiality and data processing agreements; public authorities or regulatory bodies, where required by law or court order.
Where personal data is transferred outside the European Economic Area, ID Digital ensures that such transfer is carried out in compliance with the GDPR, using appropriate safeguards such as European Commission adequacy decisions or standard contractual clauses.
Personal data is retained only for as long as strictly necessary to fulfil the purposes for which it was collected, unless a longer retention period is required or permitted by law. As a general guide: data relating to contact or quote requests is retained for as long as necessary to handle the request and any resulting engagement; data relating to contracts and invoicing is retained for the applicable statutory period (currently 10 years for tax purposes); browsing data collected via cookies is retained in accordance with the periods set out in the Cookie Policy. Once the applicable retention period has expired, data is deleted or irreversibly anonymised.
Under the GDPR, Users have the following rights regarding their personal data: Right of access — to obtain confirmation that their data is being processed and to access it; Right to rectification — to request the correction of inaccurate data or the completion of incomplete data; Right to erasure — to request the deletion of their data where it is no longer necessary for the purposes for which it was collected, or where they withdraw their consent; Right to restriction of processing — to request that processing be restricted in certain circumstances provided for by law; Right to data portability — to receive their data in a structured, commonly used and machine-readable format, and to transmit it to another controller; Right to object — to object to the processing of their data, including for direct marketing purposes; Right to withdraw consent — to withdraw, at any time, previously given consent, without affecting the lawfulness of processing carried out prior to that withdrawal.
To exercise any of these rights, Users may contact ID Digital by email at info@iddigital.pt, stating the right they wish to exercise and providing a valid means of identification. ID Digital will respond to the request within a maximum of 30 days; this period may be extended by a further two months where requests are complex or numerous, in which case the User will be notified. Without prejudice to any other remedy, Users have the right to lodge a complaint with the competent supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134 — 1.º 1200-651 Lisboa Telefone: (+351) 213 928 400 Website: www.cnpd.pt
ID Digital implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, accidental or unlawful destruction or alteration, taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing, as well as the risks to Users' rights and freedoms. The Website and ID Digital's services are not intended for individuals under the age of 16. ID Digital does not knowingly collect personal data from anyone under 16. Should ID Digital become aware that data has been collected from a minor without the consent of their legal guardian, it will delete such data as soon as possible.
ID Digital reserves the right to amend this Privacy Policy at any time; any changes will be published on the Website. The date of the last update will always be shown at the top of this document. Users are encouraged to check this page periodically to stay informed of any changes. For any questions regarding this Privacy Policy or the processing of your personal data, please contact ID Digital by email at info@iddigital.pt.
Last updated: 03/07/2026