Privacy Policy
Last updated: 21 September 2026 · GDPR (EU) 2016/679 · Lei n.º 58/2019
1. Controller
The controller of the personal data processed through this website is:
Eclipsebay, Lda.
NIPC: 518 336 999
Address: P-1050-191 Lisboa, Portugal (full address on request)
E-mail: info.eclipse.bay@gmail.com
Telephone: coming soon
Website: eclipse-bay-group.com
For any question about the protection of personal data you can reach us at: info.eclipse.bay@gmail.com
2. Scope of this policy
This Privacy Policy explains how we collect, use, store and protect the personal data of users of this website.
We process personal data in accordance with Regulation (EU) 2016/679 of 27 April 2016 (“GDPR”), Portuguese Lei n.º 58/2019 of 8 August and other applicable Portuguese law.
3. Personal data we may collect
Depending on how you use the website, we may process the following categories of data:
- identification data, such as first and last name;
- contact data, such as e-mail address and telephone number;
- data sent through the contact form or information requests: company, country of residence or incorporation, legal form, goal of the enquiry, preferred package and content of the message;
- data relating to enquiries, contracts or requested services;
- technical data, such as IP address, device type, browser, date and time of access (server logs of the hosting provider);
- data necessary to ensure the security and technical operation of the website;
- other information the user chooses to send voluntarily.
We do not process special categories of personal data and ask you not to send us such data (for example health data or identity documents) through the form. We do not request excessive personal data in relation to the purposes described in this Policy.
4. Purposes of processing
Personal data may be processed for the following purposes:
- answering contact or information requests;
- preparing, concluding and performing contracts or requested services;
- sending communications relating to enquiries, contracts or services;
- managing the commercial relationship with clients and prospects;
- issuing invoices and complying with legal obligations;
- protecting the website against fraud, abuse, attacks and unauthorised access;
- improving the security, functionality and performance of the website;
- sending marketing communications, only where a valid legal basis exists and, where required, with the user’s consent;
- establishing, exercising or defending rights in administrative, judicial or out-of-court proceedings.
Data will not be used for purposes incompatible with those stated here without prior information and, where required, new consent.
5. Legal bases
Processing of personal data is based, as applicable, on the following legal bases:
- performance of a contract or pre-contractual steps at the data subject’s request (Art. 6(1)(b) GDPR);
- compliance with legal obligations (Art. 6(1)(c) GDPR);
- consent of the data subject (Art. 6(1)(a) GDPR);
- legitimate interests of the company, provided they are not overridden by the data subject’s fundamental rights and freedoms (Art. 6(1)(f) GDPR);
- establishment, exercise or defence of rights in legal proceedings.
Where processing is based on consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before.
6. Contact forms
When you press “send”, the data entered in the enquiry form is transmitted to our hosting provider Netlify, Inc. (USA), stored there and forwarded to us by e-mail (we use Google’s Gmail service). If direct submission is not possible, you can instead send your enquiry yourself via your e-mail program or webmail.
When you submit a form or contact us by e-mail, we process the data provided solely to answer the request, provide the information requested and, where applicable, start or manage a business relationship.
The data should be correct and up to date. Providing the strictly necessary data is required for us to be able to respond.
7. Data retention
We keep personal data only for as long as necessary for the purposes for which it was collected. Enquiries are kept for as long as needed to process them and for up to three years after the last contact.
Data may be kept for longer where necessary to:
- comply with legal, tax or accounting obligations;
- establish, exercise or defend rights;
- demonstrate compliance with applicable legal obligations;
- resolve complaints or disputes.
After the retention period, data will be deleted or anonymised, unless a legal retention obligation exists. The specific periods are being reviewed (in progress) and will be provided on request.
8. Recipients of the data
Personal data may be disclosed, where necessary, to the following categories of recipients:
- technical service providers and the hosting provider of the website (Netlify, Inc.);
- providers of maintenance, IT security and support services, including the e-mail provider;
- providers of accounting, invoicing or payment services;
- attorneys, tax advisers, real estate brokers and other independent partners or professionals bound by professional secrecy, only to the extent necessary for your request and with your knowledge or mandate;
- public authorities, courts or other bodies where a legal obligation exists.
Service providers that process personal data on our behalf may do so only in accordance with our instructions and applicable law. We do not sell your personal data.
9. International transfers
Whenever personal data is transferred outside the European Economic Area, we will ensure a legal basis and appropriate safeguards under the GDPR, including, where applicable, an adequacy decision, standard contractual clauses or another legally recognised safeguard. Our website is hosted by Netlify, Inc., and for e-mail communication we use Google’s Gmail service; data may therefore also be processed outside the EEA (for example in the USA).
10. Cookies and similar technologies
This website sets no cookies. Your browser stores only, in local storage, your language choice and the fact that you have seen the notice, which is technically necessary. We use no analytics, advertising or third-party cookies; should we introduce any, we will ask for your prior consent under Lei n.º 41/2004 and the GDPR. You can manage your preferences through your browser settings. For more information, see our Cookie Policy.
11. Marketing communications
We will send marketing communications only where a valid legal basis exists. Where sending depends on consent, you may withdraw it at any time through the unsubscribe link in the message or by contacting us at info.eclipse.bay@gmail.com. Withdrawal does not affect the lawfulness of processing carried out before.
12. Rights of data subjects
Under applicable law, data subjects may exercise, where applicable, the following rights:
- right of access to their personal data;
- right to rectification of inaccurate or incomplete data;
- right to erasure of data;
- right to restriction of processing;
- right to data portability;
- right to object to processing;
- right to withdraw consent where processing is based on consent;
- right not to be subject to a decision based solely on automated processing, where applicable.
Requests should be sent to:
info.eclipse.bay@gmail.com. We may ask for additional information to confirm the requester’s identity and to protect the data against fraudulent requests. We will respond within the periods set by applicable law (generally one month).
13. Right to lodge a complaint
Without prejudice to any other administrative or judicial remedy, data subjects have the right to lodge a complaint with the competent supervisory authority. In Portugal, the supervisory authority is the CNPD. To the best of our knowledge:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa, Portugal
E-mail: geral@cnpd.pt · Website: www.cnpd.pt
Current contact details are available at www.cnpd.pt. You may also contact the authority of your EU country of residence.
14. Data security
We adopt appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, disclosure or unauthorised access. Despite these measures, no electronic transmission or storage system can guarantee absolute security. No solely automated decision-making, including profiling, takes place.
15. Data of minors
This website is not intended for persons under 18 years of age, unless authorisation or involvement of the legal representative exists under applicable law. We do not knowingly collect personal data of minors without an appropriate legal basis.
16. Links to third-party websites
The website may contain links to third-party websites (for example Easy Job 4 You and LABYRINTH SECUREPOINT). Before you click a link, we transmit no data about you to them. We are not responsible for the privacy practices, content or security measures of those websites. We recommend reading their privacy policies before providing personal data.
17. Changes to the Privacy Policy
We may update this Privacy Policy whenever necessary, in particular due to legal or technical changes or changes to the services provided. The updated version will be published on this page with the date of update. This policy is being reviewed and completed; open points, for example retention periods and the appointment of a data protection officer, are in progress and will be provided on request.
18. Contact
For any question about this Privacy Policy or the processing of your personal data, please contact:
Eclipsebay, Lda. · P-1050-191 Lisboa, Portugal
E-mail: info.eclipse.bay@gmail.com · Telephone: coming soon