When using the contact form on our website www.waterandwind.eu, Water & Wind collects and processes the personal data you voluntarily provide — Name, Email, Subject, and Message — solely to respond to your request or inquiry.

1. Data Controller

Water & Wind

Email: info@waterandwind.eu

Phone: +351 912 533 509

2. Personal Data Collected

Through the contact form we collect only:

• Name
• Email
• Subject
• Message

This information is provided directly by you.

3. Purpose and Legal Basis

Your data is processed exclusively to:

• Respond to your contact request
• Provide clarifications or information you have requested
• Follow up on communications related to your request

The legal basis for this processing is:

• Art. 6(1)(b) GDPR – Processing necessary for pre-contractual steps when you contact us for information
• Art. 6(1)(f) GDPR – Legitimate interest in ensuring proper management of communications

4. Data Retention

Your personal data is stored only as long as necessary to answer your inquiry, typically up to 12 months.

After this period, your data is securely deleted unless a legal obligation requires otherwise.

5. Data Sharing

Your data is not shared with third parties, except:

• Service providers essential for website operation (e.g., hosting)
• When required by law or competent authorities

All service providers operate in compliance with GDPR.

6. International Transfers

We do not transfer your data outside the European Union.

If such a transfer becomes necessary in the future, GDPR safeguards will be applied.

7. Your Rights

Under GDPR and Portuguese Law 58/2019, you have the right to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (“right to be forgotten”), when applicable
• Request restriction of processing
• Object to processing
• Request data portability

To exercise your rights, contact us at info@waterandwind.eu.

You may also lodge a complaint with the CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt).

8. Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, and disclosure.