Privacy policy

We process only the data you send us through the quote request form or by email, and the technical data that our hosting provider records when you visit the website. The website has no advertising and no visitor statistics software.

Data controller

Transportes Talhadas, Lda, with its registered office at Rua da Urbanização de Agrelos, n.º 184, 4625-556 São Lourenço do Douro, Portugal. If you have any questions about your data, write to talhadas@transportestalhadas.pt.

What data we process

• Through the form: your name, email address, phone number, loading and unloading points, type of service and preferred date. Your company and the description of the goods are optional. The service that receives the form also records your IP address and the time you sent it.
• By email: the data you include in your message.
• When you visit the website: the hosting provider automatically records your IP address, the date and time, the page requested, the page you came from and your browser type.

We do not need sensitive data, such as health data, to prepare a quote. Please do not include any.

What we use the data for and on what legal basis

• Replying to your request and preparing the quote. If you ask for the quote for yourself or as a sole trader, the legal basis is taking pre-contractual steps at your request (Article 6(1)(b) of the General Data Protection Regulation). If you ask for it on behalf of a company, the legal basis is our legitimate interest in replying to business customers (Article 6(1)(f)).
• Organising and carrying out the transport, if you go ahead with the job: performance of the contract (Article 6(1)(b)) or, if you are acting on behalf of a company, our legitimate interest in fulfilling the contract with that company (Article 6(1)(f)).
• Keeping the transport and invoicing documents: compliance with legal obligations under tax and accounting law (Article 6(1)(c)).
• Filtering spam, keeping the website secure and running using the technical data about visits, and keeping requests that did not lead to a job for up to 12 months after our last contact, so that we can follow them up: our legitimate interest in the security and operation of the website and in following up requests (Article 6(1)(f)).

We do not use the data for marketing and we do not sell it.

Who processes the data on our behalf

• The form service, run by a company based in India. It is our processor: it receives each request, checks whether it is spam, stores it and forwards it to our email address. It automatically deletes each request after three years at most, or within 90 days if we stop using the service. To filter spam, it sends your IP address and email address to anti-spam services in the United States. It also uses cloud providers in the European Union, the United States and other countries.
• The company that hosts the website, based in the United States. It delivers the pages from data centres in several countries and records the technical data about visits, which it uses to protect the website against attacks and to show us traffic statistics.
• The company that hosts our email, in a data centre in Portugal.

If you ask, we will tell you the names of these companies. We only disclose data to other parties when the law requires it, for example to the Autoridade Tributária (the Portuguese tax authority), through invoicing.

Transfers outside the European Economic Area

The form service processes the data in India and uses providers in the United States and other countries. India does not have an adequacy decision from the European Commission. These transfers are protected by the European Commission's standard contractual clauses (Commission Implementing Decision (EU) 2021/914), which are part of that service's data processing agreement.

The company that hosts the website is based in the United States and has data centres in several countries. It participates in the EU-US Data Privacy Framework. The European Commission has decided that the United States ensures an adequate level of protection for data transferred to organisations that participate in that framework (Commission Implementing Decision (EU) 2023/1795). For countries without an adequacy decision, or if that participation is no longer valid, that company's data processing agreement provides for the same standard contractual clauses.

You can ask us for a copy of the clauses by writing to talhadas@transportestalhadas.pt.

How long we keep the data

• Requests that did not lead to a job: we delete them within 12 months of our last contact.
• Requests that led to a job: the data becomes part of the transport and invoicing documents, which tax and accounting law requires us to keep for 10 years.
• Copy held by the form service: no more than three years, as stated above.
• Technical data about visits: the hosting provider keeps it while it is needed to provide the service, and no longer than the end of our contract with it.

Your rights

You can ask for access to your data, or for its rectification, erasure, restriction of processing or portability. To do so, write to talhadas@transportestalhadas.pt. We will reply within one month.

If you believe your data has not been processed in accordance with the law, you can lodge a complaint with Portugal's data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the data protection authority of the European Union country where you live or work.

Right to object

When we process data on the basis of our legitimate interest, you can object to that processing at any time, on grounds relating to your particular situation.

Do you have to give us your data?

You are not required to do so by law or by contract. Without the information in the form's required fields, we cannot prepare the quote.

Automated decisions

We do not make decisions based solely on automated processing. The spam filters may block a genuine request by mistake. If you do not receive a reply, write to us at talhadas@transportestalhadas.pt.

Cookies and browser storage

This website does not use cookies, with one exception. If our hosting provider needs to confirm that a visitor is not an automated program, for example during an attack on the website, it shows a verification page, which may store cookies in your browser. One of them, cf_clearance, stores proof that the check was passed, so that it is not repeated.

If you choose the Light or Dark theme, your browser stores that choice on your device (local storage), only to remember it on future visits. This information is not sent to us. To delete it, choose the System option or clear the site data in your browser.

Links to external services, such as Google Maps or the Livro de Reclamações Eletrónico (the official Portuguese online complaints book), open websites that have their own policies.

Changes

If we change how we process data, we will update this page and the date at the top.

Credits

The contour lines at the top of the home page: “produced using Copernicus WorldDEM-30 © DLR e.V. 2010-2014 and © Airbus Defence and Space GmbH 2014-2018 provided under COPERNICUS by the European Union and ESA; all rights reserved”. The organisations in charge of the Copernicus programme by law or by delegation do not incur any liability for any use of the Copernicus WorldDEM-30.