CARAVELA SAGAZCARAVELA SAGAZ

CARAVELA SAGAZ

Privacy Policy

Last updated: 1 October 2026

Introduction

CARAVELA SAGAZ, UNIPESSOAL LDA (“CARAVELA SAGAZ”, “we”, “us” or “our”) respects your privacy and is committed to protecting personal data in accordance with applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Portuguese legislation.

This Privacy Policy explains how we process personal data when you visit our website.

www.caravelasagaz.pt

1. Data Controller

The data controller responsible for the processing of personal data is: CARAVELA SAGAZ, UNIPESSOAL LDA NIPC: 519599810 Rua Fialho de Almeida, nº 14 2º Esqº Escrit. FN Nº 12 1070-129, Avenidas Novas, Lisboa, Portugal Email: contact@caravelasagaz.pt Phone: +351 30 8807126

2. Personal Data We Process

Our website does not contain a contact form, registration system, customer account or online purchasing functionality.

Personal data may be provided voluntarily when you contact us by email. Depending on the nature of your communication, this may include: - name; - email address; - telephone number; - company name and professional information; - information contained in your message; - information contained in attachments or other documents you choose to send to us.

We do not request special categories of personal data through this website.

3. Purposes of Processing

Personal data received through email may be processed for the following purposes: - responding to enquiries and requests; - communicating with existing or potential customers, suppliers and business partners; - discussing and preparing transport or other business services; - taking steps at the request of a person or organisation prior to entering into a contract; - managing business communications; - complying with legal obligations where applicable; - protecting our rights, security and legitimate business interests.

4. Legal Bases

Depending on the circumstances, processing may be based on: - Article 6(1)(b) GDPR — where processing is necessary to take steps at the request of the data subject prior to entering into a contract or to perform a contract; - Article 6(1)(c) GDPR — where processing is necessary to comply with a legal obligation; - Article 6(1)(f) GDPR — where processing is necessary for our legitimate interests, such as responding to business enquiries, maintaining business communications and protecting our systems and rights.

Where consent is required by law, we will rely on consent in accordance with Article 6(1)(a) GDPR.

5. Website Technical Data

Our website is hosted using infrastructure provided by Vercel.

When you access the website, technical information may be processed by the hosting and infrastructure provider as necessary to deliver, maintain, secure and operate the website. This may include information such as IP address, request information, timestamps, browser and device information, technical logs and related diagnostic information.

The website does not intentionally use this technical information for advertising, behavioural profiling or marketing purposes.

6. Analytics and Tracking

The website does not use Google Analytics, Google Tag Manager, Meta Pixel, advertising pixels, behavioural tracking systems or similar third-party marketing technologies.

CARAVELA SAGAZ does not intentionally use website analytics to create profiles of visitors.

7. Cookies

The website does not currently use non-essential cookies for analytics, advertising, marketing, profiling or personalised advertising.

The website may use strictly necessary technical mechanisms that are required for the operation, security and delivery of the website.

For further information, please see our Cookie Policy.

8. Email Communications

If you contact us by email, your message and any personal data contained in it will be processed in order to respond to your communication and, where applicable, manage the resulting business relationship.

Our business email infrastructure is provided by Zoho Mail.

Depending on the configuration and applicable contractual arrangements, service providers may process data on our behalf or as otherwise permitted by applicable law.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected.

The retention period may depend on: - the nature of the communication; - whether a business relationship is established; - applicable legal or regulatory obligations; - the need to establish, exercise or defend legal claims.

When personal data is no longer required, it will be deleted, anonymised or otherwise securely disposed of, where appropriate.

10. Recipients of Personal Data

Personal data may be accessed by: - authorised personnel of CARAVELA SAGAZ; - service providers supporting our website and business email infrastructure; - professional advisers where necessary; - public authorities or other recipients where disclosure is required by law.

We do not sell personal data.

11. International Transfers

Where personal data is processed by service providers involving transfers outside the European Economic Area, such processing will be carried out in accordance with applicable GDPR requirements and appropriate safeguards.

12. Your Rights

Subject to the conditions established by applicable law, you may have the right to: - access your personal data; - request correction of inaccurate or incomplete data; - request erasure of your personal data; - request restriction of processing; - object to certain processing; - request data portability where applicable; - withdraw consent where processing is based on consent.

You may exercise your rights by contacting: contact@caravelasagaz.pt We may request sufficient information to verify your identity before processing a request.

You also have the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados (CNPD) Av. D. Carlos I, 134, 1º 1200-651 Lisboa, Portugal

13. Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.

However, no transmission or storage system can be guaranteed to be completely secure.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, website, technology or applicable legal requirements.

The latest version will be published on this page together with the applicable “Last updated” date.

15. Contact

For any privacy-related questions or requests, please contact: CARAVELA SAGAZ, UNIPESSOAL LDA contact@caravelasagaz.pt +351 30 8807126