Skip to content
Flowlab

Privacy Policy

Last updated:

This policy explains how Flow Cs, Lda processes the personal data of visitors to flowlab.pt and of people who contact us through it, under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and Portuguese Law no. 58/2019 of 8 August.

1. Data controller

Flow Cs, Lda, tax number (NIF) 518216144, registered office at Edifício Sinçães Terrace, Rua José da Silva e Castro, 88, 4760-019 Vila Nova de Famalicão, Portugal. For any question about your personal data, email geral.flowlab@gmail.com or call +351 923 188 643.

2. What data we process and why

  • Contact requests — name, email, subject and message sent through the form. We only use them to reply to your request and follow up on any appointments. Legal basis: steps taken at your request before entering into a contract and our legitimate interest in replying to enquiries (Article 6(1)(b) and (f) GDPR).
  • Newsletter — email address and chosen language. We only send news about the centre to people who subscribe. Legal basis: your consent (Article 6(1)(a)), which you can withdraw at any time via the link in every email or by contacting us.
  • Usage statistics — only if you accept them in the cookie notice: pages visited, device and browser type, where the visit came from and approximate location (city/country), collected through Google Analytics 4 with pseudonymised identifiers. Used to understand how the website is used and improve it. Legal basis: your consent (Article 6(1)(a) GDPR and Article 5 of Law no. 41/2004), which you can withdraw at any time in the cookie preferences.
  • Technical data — IP address, browser type and date/time of access, logged automatically by the server. Used solely to keep the website secure and working and to prevent abuse (e.g. automated spam). Legal basis: legitimate interest (Article 6(1)(f)).

Health data: please do not send clinical information through the website form. Health information needed for treatment is collected in person, with the safeguards that apply to healthcare (Article 9 GDPR).

3. How long we keep data

  • Contact requests: up to 24 months after the last contact, after which they are deleted automatically.
  • Newsletter: while the subscription is active; after you unsubscribe, the address is deleted within 30 days.
  • Usage statistics (Google Analytics): up to 14 months.
  • Server logs: up to 30 days.

4. Who we share data with

We do not sell or share your data with third parties for marketing purposes. We only use service providers (processors) acting on our behalf with appropriate safeguards:

  • OVHcloud — website and database hosting in data centres within the European Union.
  • Google Ireland Limited — email service used to receive contact requests and, if you allow it, usage statistics (Google Analytics). This may involve transfers to the United States, carried out under the EU-US Data Privacy Framework (European Commission adequacy decision) and standard contractual clauses.

The location map (Google Maps) is only loaded if you explicitly ask for it — see our Cookie Policy. Online bookings are handled on an external platform with its own privacy policy.

5. Your rights

Under Articles 15 to 22 GDPR you may at any time request access to your data, its rectification or erasure, restriction of processing and data portability, object to processing based on legitimate interest, and withdraw your consent without affecting the lawfulness of earlier processing. Just email geral.flowlab@gmail.com; we reply within one month.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

6. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), encryption of newsletter email addresses, access to the management area restricted to authorised people with two-factor authentication, backups and regular updates.

7. Children

The website is aimed at adults. Under Article 16 of Law no. 58/2019, children under 13 need the authorisation of their legal guardians to subscribe to the newsletter.

8. Changes

We may update this policy to reflect legal changes or changes to our services. The date of the last update is shown at the top of this page.