Privacy policy.
Last updated: 10 November 2026
We respect your privacy. This policy explains what personal data The Station collects through thestation.pt, why we use it, how long we keep it and what rights you have.
Who is responsible
The controller is The Station, Lda., company no. 514 030 780 · Avenida das Descobertas, nº59, 302, 2780-053 Oeiras, Portugal · [email protected] · +351 210 109 934. We also have an office in Porto, at Rua da Paz, nº 66, 46, 4050-461 Porto.
For any question about your personal data, write to [email protected] with the subject "Privacy".
What data we collect
This site has no user accounts and, for now, no analytics or marketing tools. We only collect personal data in these situations:
| Situation | Data | Purpose | Legal basis | How long we keep it |
|---|---|---|---|---|
| You request a quote through the form on this site | Name, company, email, phone, production lines, expected date, project description and any files you attach | To reply to your request, prepare a quote and, if the project goes ahead, manage production | Steps taken at your request before entering into a contract (GDPR, Art. 6(1)(b)) | Up to 2 years after our last contact, unless a contract or the law requires longer |
| You email us ([email protected]) or call us | Name, email address, phone, company and anything you include in your message | To reply and, where relevant, prepare a proposal or manage a working relationship | Steps taken at your request before a contract, or our legitimate interest in replying (GDPR, Art. 6(1)(b) and (f)) | Up to 2 years after our last contact, unless a contract requires longer |
| You visit the site | Technical data such as IP address, browser, device and pages requested, recorded in security and access logs | To deliver the site, keep it secure and prevent abuse, including automated form submissions | Our legitimate interest in keeping the site secure (GDPR, Art. 6(1)(f)) | For the short period set by our hosting provider, usually no more than a few days |
| You make a cookie choice | Your choice, stored on your device | To remember your preference | Legal obligation and legitimate interest | 6 months (see our cookie policy) |
Please do not send us sensitive data (for example about health, religion or political opinions), or other people's personal data in attachments, unless it is needed for the project.
Who we share it with
We do not sell your data or share it for advertising. We only share it with service providers who help us run the company and act on our instructions:
- Website hosting and security: Cloudflare, Inc., which delivers thestation.pt, processes the form and protects the site against attacks.
- Delivery of form requests: Resend, Inc., which delivers quote requests submitted on the site to our inbox.
- Email and file storage: Google Workspace (Google Ireland Limited), where we keep our emails and documents.
Where needed to quote or produce your project, we may share the project's technical information with suppliers and production partners, keeping personal data to what is strictly necessary (for example, a contact for deliveries or installation). We may also disclose data where the law requires it, for example to courts or public authorities.
Transfers outside the EU
Some of these providers may process data outside the European Economic Area, including in the United States. When that happens, the transfer is protected by an adequacy decision, such as the EU-US Data Privacy Framework, or by the European Commission's Standard Contractual Clauses.
Your rights
Under the General Data Protection Regulation, you have the right to:
- access the data we hold about you and get a copy;
- correct inaccurate or incomplete data;
- ask us to delete your data;
- restrict or object to how we use it;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting what was done before.
To exercise any of these rights, write to [email protected]. We will reply within one month. We may first ask you to confirm your identity.
Security
We use appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS) across the whole site, protection against automated form submissions and restricted access to our email and files.
Links to other sites
Our site links to Instagram, LinkedIn and Google Maps. Those sites have their own privacy policies and we are not responsible for how they handle your data. Our fonts, images and videos are hosted on our own site.
Changes to this policy
We may update this policy from time to time. The date at the top always shows the latest version.
Questions and complaints
If you are not happy with how we have handled your data, please tell us first at [email protected]. You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
We follow the General Data Protection Regulation (EU) 2016/679 and Law no. 58/2019 of 8 August, which implements it in Portugal.