Privacy Policy and GDPR

This policy describes the processing carried out by the website and the customer area. The controller is Mihail Cantemir, a sole trader, tax number 267285752, tax address Rua José Saramago, n.º 5, 3.º A, 1675-180 Pontinha, Portugal.

Data kept for contractual proof: name, email, phone, service address, locality, order summary, price shown, chosen payment method, order status, holiday-rental plans and visits, acceptance of the Terms, confirmation that the privacy information was read, contractual version and date.
The account password is stored only as a hash. We do not ask for or store card numbers, MB WAY codes, bank-account details, marketing consents or the browser user-agent as contractual proof.
Purposes: creating and managing the account, receiving and performing requests, service communications, issuing tax documents when they exist, and meeting legal duties.
Legal bases: pre-contractual steps and contract performance; legal invoicing duties where they apply; legitimate interest in session security. Creating an account is not a marketing consent. There are no optional consents on this website.
Recipients actually used: website hosting (OVH), technical email delivery and, when the customer starts an automatic payment, Ifthenpay, with only the order reference, the amount and, for MB WAY, the phone number. Card numbers are not sent. No data is sent to GA4, Tag Manager, Clarity or advertising networks. Photos sent on WhatsApp stay outside this website.
Retention: order and acceptance data are kept for the life of the contract and the related legal duties. Invoicing documents follow, as a legal reference and not as an invented website period, the usual accounting and tax retention duty (as a rule, 10 years). The account can be erased on request without affecting those duties.
Rights: access, rectification, account erasure, restriction, objection and portability under the GDPR. You may complain to the Portuguese data-protection authority (CNPD).
Privacy contact: geral@fazdetudo.pt.