O & M - Transportes, LDA respects your privacy and processes your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR) and Portuguese Law no. 58/2019 of 8 August. This policy explains what data we collect, why we use it and what your rights are.
01Data controller
The controller of your personal data is:
- Company name: O & M - Transportes, LDA
- Tax ID (NIF/NIPC): 519689100
- Registered office: Rua do Adeus Português, nº 4, 3º C, 1990-604 Lisboa, Portugal
- Email: [email protected]
Given the nature and scale of our processing activities, no Data Protection Officer has been appointed. For any privacy question, please contact us at the email address above.
02Personal data we process
We only process the data needed for the purposes described in this policy:
- Data you provide through the quote request form, by email or by phone: name, company, email address, phone number, origin and destination, service type, preferred date, cargo details and the content of your message.
- Customer and partner data needed to provide the transport service, such as contact persons, pickup and delivery addresses, consignee names and billing details.
- Technical data automatically generated by the server hosting the website (for example IP address, date and time of access, page requested and browser type), logged for security and operational reasons.
- Preferences stored in your browser’s local storage, such as your chosen language. See the Cookie Policy.
We do not ask for or intend to process special categories of data (such as health data). Please do not include them in your messages.
03Purposes and legal bases
| Purpose | Legal basis (Art. 6(1) GDPR) |
|---|---|
| Replying to contact and quote requests | Pre-contractual steps at your request (point b) and legitimate interest in replying to enquiries (point f) |
| Entering into and performing transport contracts | Performance of a contract (point b) |
| Invoicing, accounting and compliance with legal obligations | Legal obligation (point c) |
| Keeping the website secure and working properly | Legitimate interest (point f) |
| Establishing or defending legal claims | Legitimate interest (point f) |
We do not use your data to send marketing communications without your prior consent, nor for automated individual decision-making or profiling.
04Retention periods
- Contact and quote requests that do not lead to a contract: up to 2 years after the last contact.
- Data relating to transport contracts and accounting and tax records: for the statutory retention period, currently 10 years.
- Server technical logs: for as long as strictly necessary for website security, in line with the hosting provider’s policy.
After these periods, data is deleted or anonymised, unless it must be kept to defend rights in pending proceedings.
05Recipients
Your data is never sold or shared with third parties for commercial purposes. Where necessary, the following may have access to it:
- service providers acting on our behalf (processors), such as website hosting, email, form processing and accounting services, contractually bound to comply with the GDPR;
- transport partners and other parties involved in performing the service (for example at pickup or delivery locations), only when necessary;
- public authorities, courts and regulators, where required by law.
06International transfers
We favour providers with servers in the European Economic Area (EEA). If a provider processes data outside the EEA, the transfer only takes place with appropriate safeguards, such as a European Commission adequacy decision (including the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the Commission.
07Your rights
Under the GDPR, you have the right to:
- access your personal data and obtain a copy;
- request the rectification of inaccurate or incomplete data;
- request erasure where there is no ground for keeping the data;
- request restriction of processing;
- object to processing based on legitimate interest;
- receive the data you provided in a structured, commonly used format (portability);
- withdraw any consent at any time, without affecting the lawfulness of prior processing.
To exercise these rights, email us at [email protected]. We will reply within one month, which may be extended as permitted by law. Exercising your rights is free of charge; we may ask for additional information to confirm your identity.
08Right to lodge a complaint
If you believe the processing of your data breaches applicable law, you may lodge a complaint with the Portuguese supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal
www.cnpd.pt (opens in a new tab)
If you live in another EU Member State, you may also contact the supervisory authority in your own country.
09Security
We apply appropriate technical and organisational measures to protect personal data against loss, unauthorised access or disclosure, including encrypted connections (HTTPS) and access restricted to those who need it.
10Minors
This website is intended for businesses and adults. We do not knowingly collect personal data from minors.
11Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The current version is always available on this page, together with the date of the last update.