Privacy & Data Security Policy

1. Who is responsible

The data controller for this website and its online shop is:

2. Data we collect

2.1 When you visit the site

• Server logs: your IP address, browser type, the pages requested, time and referring page. Kept for security and abuse prevention only.
• Cloudflare: the site is served through Cloudflare's network, which sees the same connection data in order to deliver the pages and block attacks.
• We run no analytics and no advertising trackers on this website.

2.2 When you contact us

The contact form sends your name, email address and message to our mailbox. The form is protected by Cloudflare Turnstile (an anti-bot check that does not identify you) and by a short-lived session cookie. We use what you send only to answer you.

2.3 When you sign in to the shop

The shop has no passwords of its own: you sign in with your DMD HUB account. The shop keeps your HUB account id, your display name and your email address, and the delivery and invoice addresses you choose to save.

2.4 When you place an order

• Order data: your name, email, phone number, delivery address, invoice address and company name when given, the products, quantities, prices, VAT applied, shipping method, order status and the history of your order.
• Payment: payments are taken on the payment provider's own secure page (Viva Wallet for cards and wallets, PayPal). Your card number never reaches our servers. We receive and keep only a payment reference, the method used and the amount.
• VAT number and VIES check: if you enter an EU VAT number, we send it, together with your delivery address, to the European Commission's VIES service to confirm it is valid and matches the registered company. We keep the answer (consultation number, date, registered name and address, match result) with the order, because the law requires us to hold proof of every VAT-exempt intra-EU sale.
• Invoicing: every order is invoiced in our accounting system; the invoice carries your name, address and, for companies, your VAT number.
• Delivery: your name, address, phone number and email are passed to the carrier so the parcel can be delivered and tracked.

2.5 Resellers

For reseller accounts we also keep the company name, country, VAT number (and its VIES status), the contract discount and payment terms.

3. Why we use it, and on what legal basis

• To fulfil your order — take payment, ship, invoice, handle returns and warranty claims (GDPR Art. 6(1)(b), performance of a contract).
• To meet legal obligations — tax and accounting law, which requires us to keep invoices and the proof behind VAT exemptions (Art. 6(1)(c)).
• To keep the site and shop secure — logs, abuse prevention, fraud checks on orders (Art. 6(1)(f), legitimate interests).
• To answer you — support and contact requests (Art. 6(1)(b) and (f)).
• With your consent — nothing on this site requires consent beyond the essential cookies below. We do not send marketing emails unless you asked for them, and you can opt out at any time.

4. Who processes it for us

We do not sell personal data. The following service providers process data on our behalf, each under a contract that limits what they may do with it:

We may also disclose data when the law requires it — to tax or customs authorities, or to protect our rights.

5. Where it is stored

Our servers are in the European Union (OVH, France) and we do not transfer your data outside the EU/EEA ourselves. Cloudflare, PayPal and the carrier operate worldwide; where they move data outside the EU they do so under the European Commission's standard contractual clauses or an adequacy decision.

6. How long we keep it

• Orders, invoices and VAT proofs: 10 years after the end of the year of the sale, as Portuguese tax law requires.
• Shop account data and saved addresses: while you keep your DMD HUB account, or until you ask us to remove them.
• Contact messages: as long as needed to handle your request, then deleted.
• Server logs: up to 90 days.
• Cart and session: until you close the browser or the session expires.

7. Data security

We take the technical and organisational measures appropriate to the data we hold:

• HTTPS encryption on every page and every connection to our providers.
• Card data is never entered on, sent to or stored by our servers — only on the payment provider's PCI-DSS certified pages.
• The shop database and configuration are kept outside the web root; access is limited to the people who need it for their work.
• Servers are hardened, patched regularly, monitored for intrusion and file changes, and backed up daily.
• Sign-in to the shop is handled by the DMD HUB account system (hashed passwords, signed session tokens).
• If a breach ever affects your data, we will notify the Portuguese data protection authority within 72 hours and, where required, you.

8. Cookies

There are no analytics, advertising or social-media cookies on this website, so no cookie banner is needed. You can block cookies in your browser; the cart and the contact form then stop working.

9. Your rights

Under the GDPR you may ask us, at any time, to:

• access the personal data we hold about you and receive a copy;
• correct data that is wrong or incomplete;
• erase data we no longer need to keep (invoices and tax records must stay for their legal term);
• restrict or object to processing based on our legitimate interests;
• receive your data in a portable format;
• withdraw consent where processing rests on it.

Write to [email protected] or use the contact form; we answer within 30 days. You also have the right to lodge a complaint with the Portuguese data protection authority, the CNPD, or with the supervisory authority of your own country.

10. Children

The shop and the site are not intended for children under 16 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

11. Changes to this policy

We update this page when our practices or the law change. The date at the top tells you when it was last revised; material changes to how we treat order data are announced in the shop.

12. Contact

DMD Navigation Lda · [email protected] · +351 255 710 154 · Contact form. For questions about an order write to [email protected]. See also our Terms & Conditions.