Terra y Tierra
Privacy policy
Terra y Tierra respects your privacy and handles personal data transparently, for the purposes described in this policy.
1. Controller and contact
Terra y Tierra is the name of this website. Terra Forma Lda is responsible for personal data it receives directly when handling enquiries and business relationships. For privacy questions or rights requests, telephone Portugal: +351 919 397 272; Spain: +34 684 770 081. Please do not send identity documents or sensitive information unless necessary and requested through an appropriate channel.
2. Personal data
When you contact us, we may receive your name, contact details, project location and information you choose to share about your space and requirements. Website hosting may produce technical logs, including IP address, time, requested pages and browser information, depending on its configuration.
3. Purposes and lawful bases
Enquiries, visits and proposals are handled to take steps at your request before entering a contract or to perform a contract under GDPR Article 6(1)(b). Tax, accounting and other legal duties rely on Article 6(1)(c). System security and communication management may rely on legitimate interests under Article 6(1)(f), subject to balancing your rights. Where required, optional purposes use specific consent under Article 6(1)(a), which may be withdrawn without affecting earlier lawful processing. Enquiry details are not automatically used for advertising.
4. How the current form works
The contact form prepares a message with your name, location, selected services and, where relevant, the paving design, in the language of the page. Continuing opens WhatsApp with that message. This website does not send or store the enquiry. Paving personalisation is processed only in the browser.
5. WhatsApp, telephone and external links
WhatsApp buttons open the external service only when selected; no message is sent automatically. Messages you choose to send are handled by WhatsApp under its privacy policy and by Terra Forma Lda to respond. The provider may process data outside the European Economic Area under its published transfer arrangements. This website embeds no WhatsApp tracking scripts. Calls use your telephone service.
6. Recipients and international transfers
Access to data received by the company is limited to those who need it to handle your request or meet legal duties. Where necessary, communications, hosting, support or accounting providers and project professionals may be involved, with appropriate confidentiality obligations and safeguards. Transfers outside the EEA require a valid mechanism, such as an adequacy decision or standard contractual clauses and supplementary measures where necessary. We do not sell personal data.
7. Retention
Data is retained as necessary to answer an enquiry, follow up a proposal or perform a contract. Further retention depends on legal duties, periods for exercising or defending rights and documented operational need. Data should then be deleted or anonymised. The website form does not create an enquiry archive at the company: the message reaches Terra Forma Lda only if you send it on WhatsApp.
8. Cookies and similar technologies
This implementation uses no advertising or audience analytics cookies and no persistent storage for form details. Fonts and images are served with the site’s own resources. Hosting may process technical data required to deliver and secure the service. Future non-essential technologies will be accompanied by information and consent where required by applicable law.
9. Your rights
Under the GDPR you may request access, rectification, erasure, restriction and, where applicable, portability or objection. You may withdraw consent. Legal conditions and exceptions apply. We normally respond within one month; any legally permitted extension and its reasons will be communicated. We may request only information necessary to verify identity. We do not make solely automated decisions producing legal or similarly significant effects.
10. Complaints and security
You may complain to the competent supervisory authority, including Portugal’s Comissão Nacional de Proteção de Dados at www.cnpd.pt or Spain’s Agencia Española de Protección de Datos at www.aepd.es. We seek to apply technical and organisational measures appropriate to risk, including limited access and data minimisation. No communication or storage method guarantees absolute security.
11. Policy changes
This policy describes the features currently available. It will be reviewed when services, providers or legal requirements materially change. The update date appears at the top of this page.