Privacy Policy

Last updated: April 2026

1. Data controller

Ennova — Engineering & Construction Management (hereafter "Ennova") is the entity responsible for processing personal data collected through this website (portfolio.ennova.pt).

Address: Rua da Sociedade Farmacêutica nº 30B, 1150-341 Lisbon, Portugal
Email: geral@ennova.pt
Phones: +351 919 535 438 · +351 937 214 336

2. Data collected

We collect only the data strictly necessary for the purposes described in this policy:

Contact data — name, email and message content, when the user voluntarily contacts us by email, WhatsApp or the contact form.
Aggregate navigation data — pages viewed, device, country and time on page. Collected only if the user consents to analytics cookies (see Cookie Policy). Data is anonymised and aggregated (via Vercel Analytics).

3. Purposes of processing

Responding to enquiries and commercial proposals.
Improving the site experience (aggregate data).
Complying with legal and accounting obligations where applicable.

4. Legal basis

Consent (Art. 6(1)(a) GDPR) — for analytics cookies.
Pre-contractual measures (Art. 6(1)(b) GDPR) — to respond to quote and information requests.
Legitimate interest (Art. 6(1)(f) GDPR) — site management and improvement.

5. Data sharing with third parties

Data is processed exclusively by Ennova. We use the following sub-processors who handle data on our behalf, all with GDPR-compliance safeguards:

Vercel Inc. (USA) — site hosting and aggregate analytics. International transfers covered by the European Commission's Standard Contractual Clauses (SCC).
Formspree (Cogo Labs Inc., USA) — receiving and forwarding messages sent via the contact form. Data (name, email, message) is transmitted via HTTPS and forwarded to our institutional email. Transfers covered by SCC.
GitHub Inc. (USA) — version control of the source code (does not process visitor personal data). Transfers covered by SCC.
Microsoft OneDrive (EU) — internal storage of operational files.

Data is not sold or shared for third-party marketing purposes.

6. Retention period

Contact messages: up to 3 years after last contact, or until deletion is requested.
Aggregate analytics: up to 24 months (Vercel default).
Data relating to executed contracts: for the legally applicable period (10 years for tax purposes under Portuguese law).

7. Data subject rights

You may exercise the following rights at any time by emailing geral@ennova.pt:

Access to your personal data.
Rectification of inaccurate or incomplete data.
Erasure ("right to be forgotten").
Restriction of processing.
Data portability.
Objection to processing and withdrawal of consent.
Lodging a complaint with the Portuguese Data Protection Authority (CNPD — cnpd.pt).

8. Security

We implement appropriate technical and organisational measures to protect data against unauthorised access, loss, destruction or alteration. All site communications are encrypted via HTTPS.

9. Changes to this policy

This policy may be updated. The most recent version will always be published on this page with the corresponding update date.