Privacy Policy

1. Data Controller

Santel - Telecomunicações e Infraestruturas, Lda, headquartered at Apartado 226, EC Marinha Grande, 2431-903, Portugal, Tax ID 519300190, is the data controller for the personal data of its customers and website users.

Email: privacy@santel.pt

2. Personal Data We Collect

We may collect and process the following personal data:

• Name and contact information (email, phone, address)
• Company information (Tax ID, trading name)
• Technical data (IP addresses, access logs)
• Service usage data (CDRs, traffic volume)
• Billing and payment information

3. Purposes of Processing

We use your personal data to:

• Provision of contracted services
• Billing and payment processing
• Technical support and customer service
• Compliance with legal obligations (data retention)
• Service improvement
• Communications regarding service changes

4. Legal Basis

The processing of your personal data is based on the following legal grounds:

• Contract performance (Art. 6(1)(b) GDPR)
• Legal obligation compliance (Art. 6(1)(c) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR)
• Consent, where applicable

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the described purposes:

• Customer data: 10 years after contract termination (tax obligations)
• Technical logs: 12 months
• Traffic data: 6 months (legal communications obligation)
• Emails and support tickets: 3 years

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: Request a copy of your data
• Right to rectification: Correct inaccurate data
• Right to erasure: Request deletion of data
• Right to restriction: Restrict processing in certain circumstances
• Right to data portability: Receive data in a structured format
• Right to object: Object to processing based on legitimate interests

To exercise these rights, contact us at privacy@santel.pt.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction. These include:

• Encryption of data in transit (TLS 1.3)
• Restricted access to authorized personnel
• Regular security audits
• Staff training on data protection

8. Subprocessors

We may share data with subprocessors that assist us in providing services (e.g., payment processing, hosting). All subprocessors are bound by data processing agreements compliant with GDPR.

9. Changes to this Policy

We may update this policy periodically. The most recent version will always be available on this page, with the last update date.

Last updated: 16 de março de 2025

10. Contact

For data protection inquiries:

Email: privacy@santel.pt
Morada: Apartado 226, EC Marinha Grande, 2431-903, Portugal

You may also contact the Portuguese Data Protection Authority (CNPD):

www.cnpd.pt