Privacy Policy
Woven Horizon Consultoria, Unipessoal Lda respects your privacy and is committed to protecting the personal data you share with us. This policy explains what data we collect, for what purposes, on what legal basis, with whom we share it, and what your rights are.
Data controller
Woven Horizon Consultoria, Unipessoal Lda, registered office at Parque Industrial das Carrascas, EN 252, km 11, no. 439, 2950-402 Palmela, Portugal, VAT number 518980880. For any question regarding personal data or the exercise of your rights, contact us at info@wovenhorizon.com.
Personal data collected
We collect the following data when you fill in the contact form: name, email address, company (optional) and the content of your message. We also collect your language preference to reply in the correct language. We do not collect location data, financial data or special categories of personal data (health, ethnicity, political opinions, etc.).
Processing purposes
We process your data exclusively to: (i) respond to your contact and initiate a commercial conversation about the services we offer; (ii) manage and maintain the commercial relationship if one is established; (iii) comply with legal obligations to which we are subject. We do not use your data for profiling, automated decision-making, unsolicited direct marketing, nor do we share it with third parties for commercial purposes.
Legal basis
The processing of your data is based on the following legal grounds of the General Data Protection Regulation (GDPR): (i) consent [art. 6(1)(a) GDPR] — given when you fill in and submit the contact form; (ii) legitimate interest [art. 6(1)(f) GDPR] — to reply to your contact and manage subsequent communications.
Recipients and processors
Your data is processed internally by the Woven Horizon team. To actually send the contact email, we rely on an email service provider — currently our hosting provider. We do not share your data with third parties for commercial, marketing or sales purposes. If we engage other processors in the future (e.g. a CRM service), we will update this policy.
International transfers
Your data is processed within the European Economic Area (EEA). Should any processor entail transfers outside the EEA, we will ensure appropriate safeguards as provided in the GDPR (Standard Contractual Clauses issued by the European Commission or equivalent mechanisms).
Retention period
We retain your contact data for 2 years from the last contact between the parties, unless a commercial relationship is established during this period, in which case data will be retained for the duration of the contractual relationship and applicable legal obligations. After this period, data is securely deleted.
Your rights
Under the GDPR, you have the right to: (i) access your personal data; (ii) rectify incorrect or outdated data; (iii) request erasure of your data ("right to be forgotten"); (iv) request restriction of processing; (v) object to processing; (vi) request data portability; (vii) withdraw consent at any time, without affecting the lawfulness of processing previously carried out.
How to exercise your rights
To exercise any of these rights, send us an email at info@wovenhorizon.com clearly stating which right you wish to exercise. We will reply within 30 days, which may be extended when justified by the complexity of the request.
Complaint to the supervisory authority
If you believe the processing of your data infringes the GDPR or other applicable legislation, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD) — Portugal's supervisory authority — at www.cnpd.pt.