01
Data controller.
OMBA Creative Agency, referred to in this policy as “OMBA”, is the controller of personal data processed through this website and in the commercial relationships established through it.
For any privacy or data protection matter, contact us at geral@ombaagency.pt.
02
Data we may process.
We collect only data that is appropriate and necessary for each purpose. Depending on how you interact with us, this may include:
- identity and contact details, such as name, email address and telephone number;
- professional details, including company, role and project or proposal information;
- commercial and contractual information required for proposals, services and billing;
- basic technical data, such as IP address, device, browser and security logs.
Directly through the website form, email, telephone or meetings, during a commercial relationship, or automatically when basic technical information is generated by use of this website.
03
Why we process your data.
| Purpose | Legal basis |
|---|---|
| Respond to enquiries, meeting requests and proposals | Pre-contractual steps and legitimate interests |
| Provide contracted services and manage the relationship | Performance of a contract |
| Issue documents and meet tax or legal duties | Compliance with a legal obligation |
| Protect the website, prevent abuse and resolve technical issues | Legitimate interests in service security |
| Send marketing communications, where applicable | Consent or another permitted legal basis |
Where processing relies on consent, you may withdraw it at any time. Withdrawal does not affect processing lawfully carried out before that date. OMBA does not make solely automated decisions producing legal or similarly significant effects for website visitors.
05
How long we retain data.
We retain personal data only for as long as necessary for the purpose for which it was collected. Enquiries and proposals are kept while relevant to commercial follow-up; contractual, accounting and tax records are kept for legally required periods; marketing data remains until consent is withdrawn or an objection is made.
At the end of the applicable period, data is deleted or anonymised unless it must be retained to establish, exercise or defend legal claims.
06
Your rights.
Under the General Data Protection Regulation, and depending on the circumstances, you may exercise rights of access, rectification, erasure, restriction, portability, objection and withdrawal of consent.
Send requests to geral@ombaagency.pt. We may request only the additional information needed to confirm your identity and will respond within the legally applicable period.
You may also lodge a complaint with Portugal’s National Data Protection Commission.
07
Security, external links and changes.
We apply technical and organisational measures appropriate to the risk to protect data against loss, alteration, unauthorised access or disclosure. No system is completely invulnerable, so these measures are reviewed as our services evolve.
This website may link to external pages whose privacy practices are not controlled by OMBA. We may update this policy when processing, services or legal duties change. The date at the top identifies the version currently in force.
08
Contact us.
If you have any questions about this policy or how we process personal data, email geral@ombaagency.pt.
Read the Cookie Policy