Last updated: 12 October 2026
1. WHO IS RESPONSIBLE FOR YOUR DATA
The controller of your personal data is Hidro Orfão - Hydraulic Solutions, Lda., Portuguese tax number (NIPC) 504050931, Rua Dionísio Rodrigues, n.º 110, 2415-801 Leiria, Portugal.
For any question about your personal data: info@hidraulica.pt, geral@hidroorfao.pt or +351 244 882 110 (call to the Portuguese landline network).
2. WHAT DATA WE PROCESS, WHY AND FOR HOW LONG
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Processing and delivering orders | Name, address, e-mail, telephone, tax number, company, items ordered | Performance of the contract | For as long as the business relationship lasts and, afterwards, for the time needed to comply with legal obligations and respond to complaints |
| Invoicing and tax obligations | Name, address, tax number, invoice data | Legal obligation | 10 years |
| Customer account | Name, e-mail, password (encrypted), addresses, order history | Performance of the contract | For as long as the account exists; the customer may ask for it to be deleted at any time |
| Contact requests and professional account requests | Name, company, tax number, e-mail, telephone, message, attachments | Pre-contractual steps at the request of the data subject | For the time needed to handle the request and follow it up |
| Newsletter | E-mail, name | Consent | Until you unsubscribe |
| Unfinished carts | Items in the cart; e-mail, if the customer is signed in | Legitimate interest in allowing the purchase to be resumed | For the time needed to allow the purchase to be resumed |
| Website usage statistics and campaign measurement | Browsing data, shortened IP address, cookie identifiers | Consent | See section 7 |
| Fraud prevention and website security | IP address, order data, anti-robot check (captcha) | Legitimate interest in protecting the shop and its customers | For the time needed to keep the shop secure |
The data marked as mandatory in the forms are necessary to enter into and perform the contract; without them the order cannot be processed.
We do not collect or store payment card data: payments are processed directly by the payment provider.
We do not take solely automated decisions that produce legal effects on customers, nor do we carry out profiling with that effect.
3. WHO WE SHARE YOUR DATA WITH
We share only the data that are necessary, with the following entities:
| Entity | What for | Data |
|---|---|---|
| Carriers: TNT (mainland Portugal), CTT (Azores and Madeira), UPS or Correos (Spain), UPS (rest of the European Union) | Delivery of orders | Name, address, telephone, e-mail |
| Ifthenpay, Lda. (Portugal) | Payment processing | Order reference and amount; mobile phone number in the case of MB WAY |
| Almouroltec - Serviços de Informática e Internet, Lda. (PTisp), Portugal | Hosting of the shop and of e-mail | All shop data |
| Mailchimp (Intuit Inc., USA) | Sending the newsletter | E-mail, name |
| Google Ireland Ltd. | Statistics (Google Analytics), tag management and anti-robot check (reCAPTCHA) | Browsing data, IP address |
| Microsoft Ireland Operations Ltd. | Website usage analysis (Microsoft Clarity) | Browsing data and interactions with the pages, such as clicks and scrolling |
| Meta Platforms Ireland Ltd. | Campaign measurement (Facebook pixel) | Browsing data |
| Portuguese Tax Authority and other public bodies | Compliance with legal obligations | Invoicing data |
We do not sell your data or pass them on to third parties for their own marketing purposes.
4. TRANSFERS OUTSIDE THE EUROPEAN UNION
Some of the providers listed (Google, Microsoft, Meta and Mailchimp) may process data in the United States of America. These transfers are based on the European Commission's adequacy decision on the EU-US Data Privacy Framework, for the companies certified under it, or on standard contractual clauses approved by the European Commission.
5. YOUR RIGHTS
You may, at any time:
- access your data and obtain a copy;
- ask for incorrect or incomplete data to be rectified;
- ask for your data to be erased, where there is no legal obligation to keep them;
- ask for processing to be restricted;
- object to processing based on legitimate interest;
- ask for the portability of the data you have given us;
- withdraw any consent you have given, for example for the newsletter or for cookies, without affecting the processing carried out until then.
To exercise these rights, write to info@hidraulica.pt. We reply within one month. In the "Your account" area you can also view and correct your data and obtain a copy.
You may also lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
6. SECURITY
Communication with the shop is encrypted (HTTPS). Passwords are stored in encrypted form and are not accessible to our team. Access to customer data is limited to the people who need it to process orders and provide support.
7. COOKIES
Cookies are small files stored on your device. We use three types:
| Type | What for | Examples | Requires consent |
|---|---|---|---|
| Necessary | Keeping your session, your shopping cart, your language and your cookie choice | Shop session cookie | No |
| Statistics | Understanding how the website is used, in order to improve it | Google Analytics, Microsoft Clarity | Yes |
| Marketing | Measuring advertising campaigns | Facebook pixel (Meta) | Yes |
Statistics and marketing cookies are only set after you give your consent in the cookie notice. You can accept, refuse or choose by category, and you can change your choice at any time under "Cookie preferences", in the website footer. Refusing these cookies does not prevent you from using the shop.
8. CHANGES TO THIS POLICY
We may update this policy. The date of the last update is shown at the top of the document. Relevant changes are announced on the website.