Hrvatska / Politika Privatnosti i Zaštita Podataka (GDPR)

Politika Privatnosti i Zaštita Podataka (GDPR)

VORTICEPACIFICO ENGENHARIA LDA strictly complies with the European Union General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and applicable national data protection legislation in Hrvatska.

1. Data Controller and Contact Details

The Data Controller responsible for personal data processed through this platform is:

Data Controller: VORTICEPACIFICO ENGENHARIA LDA (NIF PT518972895)
Address: Quinta do Feijó, Loja AK 48, 4905-511 Mujães, Viana do Castelo, Portugal
Data Protection Officer (DPO): legal@vorticepacifico.com

2. Purposes and Legal Basis of Processing

We process personal information under the following legitimate grounds specified in Article 6 of the GDPR:

Directory Enquiries and Customer Support: Processing messages, inquiries, or school listing updates submitted through contact forms (GDPR Art. 6(1)(b) - performance of a contract or pre-contractual steps).
Platform Security and Abuse Prevention: Technical server logs, IP addresses for rate limiting, DDoS mitigation via Cloudflare, and threat detection (GDPR Art. 6(1)(f) - legitimate interest in maintaining web security).
Compliance with Statutory Obligations: Fulfilling tax, fiscal, or regulatory disclosure duties required by judicial or governmental bodies (GDPR Art. 6(1)(c) - legal obligation).
Aggregated Anonymous Analytics: Privacy-focused performance measurement without cross-site profiling (GDPR Art. 6(1)(a) or Art. 6(1)(f)).

3. Data Retention Periods

Personal communication data is retained strictly for the duration necessary to resolve your request and for a maximum of 12 months thereafter, unless longer retention is required by tax or commercial regulations. Server security log files are automatically purged after 30 days.

4. Your Statutory Data Protection Rights

Under Chapter III of the GDPR, all users residing in Hrvatska and across the European Economic Area possess the following rights:

✓ Right of Access (Art. 15): Obtain confirmation and copies of your processed personal data.

✓ Right to Rectification (Art. 16): Correct inaccurate or incomplete personal records.

✓ Right to Erasure (Art. 17): Request deletion of your data when no longer required ('Right to be Forgotten').

✓ Right to Restriction (Art. 18): Restrict processing under specified legal grounds.

✓ Right to Object (Art. 21): Object to processing based on legitimate interests.

✓ Right to Data Portability (Art. 20): Receive your data in a structured, machine-readable format.

To exercise any of these rights, simply email our Data Protection Officer at legal@vorticepacifico.com. We respond to all verified requests within 30 calendar days.

5. Right to Lodge a Complaint with the Supervisory Authority

Without prejudice to any other judicial remedy, you have the right to lodge a formal complaint with the competent supervisory authority in Hrvatska:

Competent National Authority: Agencija za zaštitu osobnih podataka (AZOP)

Or with the lead European supervisory authority in Portugal: Comissão Nacional de Proteção de Dados (CNPD) — Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, Portugal (www.cnpd.pt).