When using the contact form on our website espiritoazul.com, Water & Wind collects and processes the personal data you voluntarily provide — Name, Email, Subject, and Message — solely to respond to your request or inquiry.

1. Data Controller

Espírito Azul

Email: info@espiritoazul.com

Phone: +351 914 898 352

2. Personal Data Collected

Through the contact form we collect only:

Name

Email

Subject

Message

This information is provided directly by you.

3. Purpose and Legal Basis

Your data is processed exclusively to:

Respond to your contact request

Provide clarifications or information you have requested

Follow up on communications related to your request

The legal basis for this processing is:

Art. 6(1)(b) GDPR – Processing necessary for pre-contractual steps when you contact us for information

Art. 6(1)(f) GDPR – Legitimate interest in ensuring proper management of communications

4. Data Retention

Your personal data is stored only as long as necessary to answer your inquiry, typically up to 12 months.

After this period, your data is securely deleted unless a legal obligation requires otherwise.

5. Data Sharing

Your data is not shared with third parties, except:

Service providers essential for website operation (e.g., hosting)

When required by law or competent authorities

All service providers operate in compliance with GDPR.

6. International Transfers

We do not transfer your data outside the European Union.

If such a transfer becomes necessary in the future, GDPR safeguards will be applied.

7. Your Rights

Under GDPR and Portuguese Law 58/2019, you have the right to:

Access your personal data

Request correction of inaccurate data

Request deletion (“right to be forgotten”), when applicable

Request restriction of processing

Object to processing

Request data portability

To exercise your rights, contact us at info@espiritoazul.com.

You may also lodge a complaint with the CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt).

8. Security

We implement appropriate technical and organizational measures to protect your data against loss, misuse, unauthorized access, and disclosure.