Privacy & cookies
Updated 16 September 2026
1. Who is responsible?
D&A PLV, Unipessoal Lda., Rua Parque da República, n.º 122, 4430-164 Vila Nova de Gaia, Portugal, tax/company number 519529960, is responsible for the personal data described here. For privacy questions and requests: contact@daplv.net.
2. Data and purposes
The contact form collects your name, email address, optional company name, message and any files you choose to attach. We use them to answer your enquiry, prepare a quotation and follow up the business relationship. Name, email and message are required to submit the form; attachments are optional. Please only include information relevant to your project and avoid sensitive personal information. Technical connection and browser data are also processed to deliver and secure the website and prevent automated abuse.
3. Legal grounds
When you contact us for yourself, the basis is taking steps at your request before entering a contract, or performing that contract (GDPR Article 6(1)(b)). For contacts on behalf of a business, it is our legitimate interest in answering professional enquiries and managing business relationships (Article 6(1)(f)). Security processing relies on our legitimate interest in protecting the website and its users. Sending an enquiry does not subscribe you to marketing. We do not use this form for automated decisions with legal or similarly significant effects.
4. Service providers
Cloudflare hosts and protects the website. Its Turnstile service checks technical signals, including IP address and browser information, to detect bots; Cloudflare also uses signals to improve detection. FormSubmit forwards the form and attachments to contact@daplv.net. Google Workspace handles our business email. These services receive the data needed for their role; authorised D&A PLV personnel handle your enquiry. If you provide a WeTransfer or other download link, that service has its own privacy rules.
5. International processing
These providers use international infrastructure, which can involve processing outside the European Economic Area. Cloudflare and Google publish data-processing terms and transfer safeguards, linked below. FormSubmit’s public policy does not specify its processing locations or the applicable transfer safeguards. You can contact us for the information available about these arrangements or choose to email us directly, which avoids FormSubmit but still uses our email provider.
6. Retention
We assess retention according to the time needed to handle the enquiry, follow up a quotation or project, meet legal obligations and establish, exercise or defend legal claims. Information that is no longer needed for those purposes should be deleted. This is separate from any statutory retention of contracts and accounting records. FormSubmit states that submissions are retained for 30 days and uploaded files are not retained in its submission archive. The copy delivered to our mailbox is subject to our own retention criteria.
7. Cookies and browser storage
This website does not include advertising trackers or audience-measurement tools. Fonts are hosted here. The form uses necessary security checks and, for attachment submissions, a temporary sessionStorage marker containing a random identifier and time—not your message or files. The marker is used to recognise the return from the delivery service; it is removed after a valid return or when the tab session ends, and is accepted for at most one hour. Turnstile loads when the form opens. Necessary technical mechanisms do not require an “accept all” banner. Any future non-essential trackers must be assessed and, where required, blocked until you consent.
8. Your rights
Subject to the conditions in the GDPR, you can request access, correction, deletion, restriction or portability of your data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. Write to contact@daplv.net; we may request proportionate information to verify your identity. We normally respond within one month, with any legally permitted extension explained. You may complain to the Portuguese supervisory authority, CNPD, or another competent authority.
9. Provider information
The links below explain the providers’ own practices. They do not replace this notice.