This is a translation provided for information purposes. In case of any discrepancy, the Portuguese version prevails.
Privacy and cookie policy
Basis: GDPR (Regulation (EU) 2016/679), Articles 12–14; Portuguese Law 58/2019; Portuguese Law 41/2004, Article 5.
1. Controller. Steelaxy, Unipessoal, Lda. (“Mestre Faz Tudo” is the trade name of its services), NIPC 516 649 507, registered office: Av. do Cerco, 18, 2520-635 Ferrel (Peniche). Privacy contact: info@mestrefaztudo.com. No data protection officer (DPO) has been designated.
2. What data we process, why and on what legal basis
| Purpose | Data | Legal basis (Article 6(1)) | Retention |
|---|---|---|---|
| Responding to quote or contact requests | name, telephone number, email, address/locality of the service, description, any photos sent by the data subject | (b) steps prior to entering into a contract | 12 months after the last contact, if no contract is concluded |
| Performance of the service and of the maintenance contract | identification details, address, tax number (NIF), communications | (b) contract | for the term of the contract + limitation periods |
| Invoicing and tax obligations | name, tax number (NIF), address, invoices | (c) legal obligation | 10 years (Decree-Law 28/2019, Article 19) |
| Complaints Book (Livro de Reclamações) and disputes | complaint details | (c) and (f) | statutory periods |
| Marketing communications to customers | email/telephone number | consent or, for customers, legitimate interest (Law 41/2004, Article 13-A) | until an objection is made |
We do not ask for sensitive data (Article 9). Please do not include health data or data about third parties in the request description, messages or photos you send us.
3. Indirect collection (Article 14). When a condominium or a company gives us a contact (e.g. the resident to be visited), we process that person’s name, telephone number and flat or unit in order to carry out the service. The source is the customer who made the request. The data subject is informed at the first contact.
4. Recipients. Processors under Article 28: website hosting, Ipdroid, Lda., NIPC 513 307 192, with its registered office at Parque Tecnológico de Óbidos, Rua da Criatividade, 10, 2510-216 Óbidos, with servers in Portugal (EU); email, Microsoft 365, in the Microsoft 365 environment (tenant) of Steelaxy, Unipessoal, Lda.; WhatsApp/Meta (if the data subject uses that channel); invoicing software; certified accountant; vetted technicians engaged by Steelaxy, to carry out the service; the company holding the appropriate licence (alvará) referred to in clause 1 of the terms and conditions, only if the customer asks for that referral, as an independent controller; the Tax Authority (AT) and other authorities where required by law. We do not sell data.
5. Transfers outside the EEA. The website is hosted in Portugal (EU). Email is processed in Microsoft 365, provided by Microsoft Ireland Operations Limited. Microsoft applies the EU Data Boundary to EU customers, but residual transfers to the US may occur (for example, for technical support and security). These transfers are based on the adequacy decision on the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795; GDPR, Article 45), under which Microsoft Corporation is certified, and, additionally, on the standard contractual clauses included in Microsoft’s data processing agreement, which are appropriate safeguards (GDPR, Article 46(2)(c)). Any other transfer outside the EEA (for example, if you use WhatsApp) only takes place on the basis of an adequacy decision (Article 45) or subject to appropriate safeguards (Article 46).
6. Rights. Access, rectification, erasure, restriction, portability and objection (Articles 15–22) and withdrawal of consent (Article 7(3)), by email to info@mestrefaztudo.com. Response within 1 month (Article 12(3)). You may lodge a complaint with the CNPD (the Portuguese data protection authority) – www.cnpd.pt (Article 77; Law 58/2019).
7. Automated decision-making. None.
8. Security. Restricted access and minimal logs (Article 32). The connection to the site is encrypted (HTTPS) with a valid certificate. The request builder does not store or send any personal data: it only prepares, on your device, a WhatsApp message or an email, which is only sent if you choose to send it. Requests reach us by email, phone or WhatsApp and are handled in accordance with this policy.
9. Cookies and similar technologies (Portuguese Law 41/2004, Article 5)
- This website does not use cookies or similar technologies, does not measure audiences and does not store or read any data in your browser or device.
- That is why there is no cookie banner and no consent request (Portuguese Law 41/2004, Article 5).
- Third-party content (WhatsApp, the Complaints Book and other external links) only loads after you click; from then on, those websites’ policies apply.
- If this changes, the cookie policy will be updated beforehand and your consent will be requested in advance.
- More information in the Cookie policy.
10. Changes. Version 1.0, in force since 1 November 2026. Relevant changes are flagged on the website.