Privacy Policy
We explain how we process your personal data - why, for how long, with whom we share it and what your rights are under the General Data Protection Regulation (GDPR).
Quick summary
- We process data to provide services, respond to enquiries, fulfil legal obligations and improve the digital experience.
- Legal basis: contract performance, legal obligation, consent and legitimate interests - always linked to a specific purpose.
- We retain data only for as long as legally necessary, then securely delete or anonymise it.
- You may access, rectify, erase, object to, restrict and request portability of your data. We respond within 1 month.
- We do not carry out automated decision-making or profiling with legal effects.
- We do not transfer data outside the European Economic Area without appropriate safeguards.
1. Data Controller
Barrinho Transportes S.A.
Rua Central nº 252 - Loureira - 2495-122 Santa Catarina da Serra, Portugal
Email: geral@barrinhotransportes.com
Phone: +351 249 530 910
2. Data we process and Purposes
We collect only the data strictly necessary for each purpose (data minimisation principle - Art. 5(1)(c) GDPR). The table below shows the data processed, the purpose and the applicable legal basis:
| Data processed | Purpose | Legal basis (Art. 6 GDPR) |
|---|---|---|
| Name, email, phone, company | Responding to contact requests | Legitimate interests - Art. 6(1)(f) |
| Contractual and billing data | Performance of transport contracts | Contract performance - Art. 6(1)(b) |
| Tax ID, fiscal data | Compliance with tax and legal obligations | Legal obligation - Art. 6(1)(c) |
| CV, application data | Recruitment and application management | Consent - Art. 6(1)(a) |
| Email address | Sending communications (newsletters) | Consent - Art. 6(1)(a) |
| IP address, device, pages visited | Security and website improvement | Legitimate interests - Art. 6(1)(f) |
3. Retention periods
We retain data only for as long as strictly necessary for the purposes and applicable legal deadlines (Art. 5(1)(e) GDPR). After that period, data is securely deleted or anonymised.
| Data category | Retention period |
|---|---|
| Contact data (form submissions) | 3 years after last contact |
| Contractual and billing data | 10 years (tax and legal obligation) |
| Job application data | 1 year after application (unless consent given for longer) |
| Technical data (logs, IP) | 6 months |
| Cookie preferences | 12 months (renewed with new consent) |
4. Sharing and transfers
We may share personal data with service providers supporting our operations (IT suppliers, accounting, audit), always ensuring data processing agreements are in place in compliance with Art. 28 GDPR.
We may also disclose data to public authorities when legally required.
International transfers: We do not transfer personal data to countries outside the European Economic Area (EEA) without ensuring appropriate safeguards, namely Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR).
5. Automated decision-making and profiling
Barrinho Transportes S.A. does not carry out any automated decision-making or profiling with legal or similarly significant effects on data subjects, as defined under Art. 22 GDPR.
6. Your rights
Under Arts. 15–21 GDPR, you have the following rights, which you may exercise at any time. We will respond within a maximum of 1 month (Art. 12(3) GDPR).
Access (Art. 15)
Know which of your data we process and obtain a copy.
Rectification (Art. 16)
Correct inaccurate or incomplete data.
Erasure (Art. 17)
Request deletion of your data when no longer necessary.
Restriction (Art. 18)
Limit processing in certain circumstances.
Portability (Art. 20)
Receive your data in a structured, machine-readable format.
Objection (Art. 21)
Object to processing based on legitimate interests or for direct marketing.
Withdraw consent
Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
To exercise any right, contact us at: geral@barrinhotransportes.com. You also have the right to lodge a complaint with the national supervisory authority: Comissão Nacional de Proteção de Dados (CNPD).
7. Cookies and consent
We use essential cookies for the website to function and, with your prior consent, cookies for additional features. You can manage your preferences at any time.
8. Information security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, pursuant to Art. 32 GDPR, including:
- Access controls and secure authentication
- Data encryption in transit (HTTPS/TLS)
- Regular backups and recovery plans
- Internal information security policies
- Staff training and awareness programmes
9. Frequently asked questions
How do I withdraw my consent?
You can withdraw consent at any time via the "Manage preferences" button (for cookies) or by emailing geral@barrinhotransportes.com (for other consent-based processing). Withdrawal does not affect the lawfulness of prior processing.
Can I request a copy of my data?
Yes, you have the right of access (Art. 15 GDPR). Please request via geral@barrinhotransportes.com. We respond within a maximum of 1 month.
Is my data shared with third parties?
Only with service providers necessary to our operations (e.g. IT services, accounting), always under appropriate data processing agreements. We never sell data to third parties.
Last updated: April 2026