+351 273 092 909 / +351 220 998 565

GDPR & Personal Data

Privacy Policy.

Last updated: 30 October 2026

Stencis respects the privacy of visitors to its website and processes personal data in accordance with the General Data Protection Regulation (Regulation (EU) 2016/679 — "GDPR") and Portuguese Law no. 58/2019. This policy explains what data we collect through this website, why, for how long, and what your rights are.

01 / Controller

Who is responsible for your data

Stencis, Instalações Técnicas, Lda.
Company registration and tax number (NIPC): 514435569
Registered office: Av. das Forças Armadas 17 R/C - Esq, 5300-440 Bragança, Portugal
Website: www.stencis.com
Email: geral@stencis.com
Phone: +351 273 092 909

Contact for privacy matters: geral@stencis.com

02 / Data collected

What data we collect and why

We only collect the data you send us voluntarily through the forms on this website:

Form Data Purpose Retention period
Contact Name, email, subject, message and, if you send one, the attached file (PDF) To respond to your request for information or a quote 12 months. The data is not stored on the website: the message is sent to Stencis by email and kept in the mailbox for 12 months, after which it is deleted.
Job applications Name, email, phone, vacancy, message, CV and the date/time of consent To assess your application as part of Stencis recruitment processes 12 months from the date of the application, both for the records in the website's administration area and for the emails received in the company mailbox. At the end of this period, the data and the CV are deleted.

Legal basis

We process this data on the basis of your consent (Article 6(1)(a) GDPR), which you give by ticking the authorisation box on each form. For quote requests, processing is also necessary to take steps at your request prior to entering into a contract (Article 6(1)(b)). For job applications, we record the date and time at which consent is given.

Job applications — how they are handled

  • The application and CV are stored in the website database, in a password-protected restricted area. The CV is not accessible from any public address.
  • A copy is sent by email, with the CV attached, to the Stencis Human Resources team.
  • Only the Stencis Human Resources team and management have access to applications.
  • You may ask for your application to be deleted before the end of the retention period, or withdraw your consent, at any time.

03 / Cookies

Cookies

The website only uses technical cookies that are necessary for it to work. They do not identify the visitor and are not used for advertising or to track your browsing:

  • Session cookie (PHPSESSID): protects the forms against fraudulent and repeated submissions and, in the administration area, keeps authorised users signed in. It is deleted when you close your browser.
  • Language cookie (idioma): remembers the language you chose (Portuguese or English), so that the following pages are shown in that language. It is only created when you change the language and lasts 1 year.

We do not use advertising, social media or analytics cookies (for example, Google Analytics).

04 / Access logs

Server access logs

  • Data: IP address, date and time, and the page or resource requested.
  • Purpose: security and proper operation of the website.
  • Legal basis: legitimate interest (Article 6(1)(f) GDPR).
  • Retention: the logs are kept only on the server, in rotating files of limited size. The oldest entries are deleted automatically and no copies are kept anywhere else.

05 / Recipients

Who we share data with

We do not sell or pass on your data to third parties for commercial purposes. The data is only accessible to the Stencis staff who need it and to the companies that provide us with technical services, acting as processors bound to ensure its confidentiality and security:

  • Email service — Amen (securemail.pro service): handles the messages sent through the website forms. Its servers and backups are located in data centres in the European Union (Italy). Mailbox backups are kept for about 6 days, so a deleted message may remain in those backups during that period.
  • Website and database hosting — Nologic: the data is hosted on servers of a European infrastructure provider (OVH), contracted by Nologic, located in France.

06 / Transfers

International transfers

All data stays in the European Union: email in Italy, and the website and database in France. No data is transferred outside the European Economic Area.

07 / Backups

Website backups

Weekly and monthly backups are made of the database (which also holds the CVs) and of the files uploaded to the website, and are kept for up to one year. Deleted data may remain in those backups until then, after which it is deleted automatically.

08 / Security

How we protect your data

  • Mandatory encrypted connection (HTTPS, with HSTS) between your browser and the website.
  • Emails sent over an encrypted connection.
  • Administration area and database with restricted, password-protected access.
  • Internal website folders blocked from public access.
  • CVs stored outside any public folder and downloadable only by authorised users.
  • Deletion of applications at the end of the retention period.

09 / Your rights

Your rights

Under the GDPR, you may at any time:

  • Access the data we hold about you;
  • Ask for it to be rectified if it is inaccurate or incomplete;
  • Ask for it to be erased (the "right to be forgotten");
  • Ask for processing to be restricted, or object to it;
  • Ask for portability of the data you have provided to us;
  • Withdraw your consent, without affecting the processing carried out before its withdrawal.

To exercise any of these rights, write to us at geral@stencis.com. We will reply within one month at the latest. We may ask you for information to confirm your identity, in order to protect your data.

If you believe your data is not being processed correctly, you also have the right to lodge a complaint with the Portuguese Data Protection Authority, Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

10 / Changes

Changes to this policy

We may update this policy to reflect changes to the website or to the law. The date of the last update is shown at the top of the page. We recommend that you review it from time to time.