AVANTO

Privacy Policy

Last updated: August 2026

Protecting your personal data is important to us. Below we inform you, in accordance with the EU General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Portuguese Data Protection Law (Lei n.º 58/2019 of 8 August), about how personal data is processed in connection with this website.

1. Controller

AVANTOHUB, UNIPESSOAL LDA
Rua da Alfândega, n.º 10, 4A
9000-059 Funchal, Madeira
Portugal

Email: hello@avanto.team
Website: www.avanto.team

Commercial register (Registo Comercial): Conservatória do Registo Comercial do Funchal
NIPC: 519528476
VAT ID: PT519528476

Data Protection Officer (Encarregado de Proteção de Dados):
Carlos Antero Urbano Lucas
Email: dpo@avanto.team

Under Art. 37 GDPR and Art. 34 of Lei n.º 58/2019, the controller has designated an internal data protection officer. You may contact the DPO on all matters related to the processing of your personal data and the exercise of your rights under this policy.

2. General information on data processing

Personal data means any information relating to an identified or identifiable natural person (Art. 4(1) GDPR, Art. 3 of Lei n.º 58/2019).

We process personal data only as necessary to provide a functional website and our content and services, or where you have given consent or another legal basis permits the processing.

3. Hosting and server log files

When you access this website, the hosting provider or web server automatically stores information in so-called server log files. This may include in particular:

  • IP address (possibly truncated/anonymized)
  • Date and time of the request
  • Requested URL / file
  • Referrer URL
  • Browser type and version as well as operating system
  • Amount of data transferred and HTTP status code

Purpose: Technical provision, stability, and security of the website (e.g. defence against attacks).

Legal basis: Art. 6(1)(f) GDPR (legitimate interest in secure and reliable operation).

Retention: Log data is generally retained only for a limited period and then deleted or anonymized, unless longer retention is required to investigate security incidents.

4. Contact by email

If you contact us by email (e.g. at hello@avanto.team), we process the data you provide (in particular email address, name, message content, and any other information contained in the email).

Purpose: Handling your enquiry and any follow-up correspondence.

Legal basis:

  • Art. 6(1)(b) GDPR, where the enquiry relates to initiating or performing a contract
  • Art. 6(1)(f) GDPR (legitimate interest in responding to enquiries)
  • Art. 6(1)(a) GDPR, where you have given consent

Retention: We store the data for as long as necessary to process the enquiry or as required by statutory retention obligations. Data is then deleted unless legitimate interests require longer storage.

5. Contact form

If you use the contact form on this website, the data you provide (name, email, company, service interest, message) is used to generate a pre-filled email to hello@avanto.team via your email client. The data is not stored on our servers; it is only processed in your browser to construct the email link.

Purpose: Handling your enquiry and potential business engagement.

Legal basis: Art. 6(1)(b) GDPR (pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interest in responding to business enquiries).

6. Cookies and similar technologies

This website uses cookies and similar technologies (e.g. local storage) only for essential functionality (language preference, theme preference). No tracking, advertising, or third-party cookies are used.

Necessary / technically required cookies
These are required for the operation of the website (e.g. storing your language and theme preferences). Legal basis: Art. 6(1)(f) GDPR.

Non-essential cookies (e.g. statistics / marketing)
Not used on this website. If analytics are added in the future, they will be set only after your consent. Legal basis: Art. 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by deleting or blocking cookies in your browser. The lawfulness of processing carried out before withdrawal remains unaffected.

7. Web analytics

This website does not currently use web analytics or tracking services. If analytics are added in the future, this section will be updated with the provider details, data categories, legal basis, and third-country transfer safeguards, and analytics will only run after your consent.

8. Web Vitals and performance measurement

To improve website performance, technical metrics (e.g. load times, Core Web Vitals) may be collected in the browser. These metrics are not transmitted to any external service.

9. Disclosure of data

We transfer your personal data to third parties only if:

  • you have consented (Art. 6(1)(a) GDPR),
  • disclosure is necessary for performance of a contract (Art. 6(1)(b) GDPR),
  • a legal obligation exists (Art. 6(1)(c) GDPR), or
  • disclosure is necessary to protect legitimate interests and your interests do not override (Art. 6(1)(f) GDPR),

and, where applicable, to processors bound by our instructions under Art. 28 GDPR (e.g. hosting or email providers).

We do not sell your personal data.

10. Retention period

Unless more specific periods are stated in this policy, we store personal data only for as long as necessary for the respective purposes or as required by statutory retention periods under Portuguese law (including the retention obligations set out in Lei n.º 58/2019 and the Portuguese Accounting and Tax Code where applicable). After the purpose ceases or the periods expire, data is deleted or anonymized.

11. Your rights

Under Art. 12-22 GDPR and Arts. 7-18 of Lei n.º 58/2019, you have the following rights:

  • Access to your personal data stored by us (Art. 15 GDPR)
  • Rectification of inaccurate data (Art. 16 GDPR)
  • Erasure (Art. 17 GDPR)
  • Restriction of processing (Art. 18 GDPR)
  • Data portability (Art. 20 GDPR)
  • Objection to processing based on Art. 6(1)(e) or (f) GDPR (Art. 21 GDPR)
  • Withdrawal of consent with effect for the future (Art. 7(3) GDPR)
  • Not to be subject to a decision based solely on automated processing, including profiling (Art. 22 GDPR)

To exercise your rights, a simple message to hello@avanto.team or dpo@avanto.team is sufficient. We will respond within one month of receiving your request (Art. 12(3) GDPR).

12. Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR, Art. 29 of Lei n.º 58/2019).

Supervisory authority competent for us:

Comissão Nacional de Proteção de Dados (CNPD)
Av. da Liberdade, 224
1250-148 Lisboa
Portugal
Tel: +351 21 323 1700
Email: geral@cnpd.pt
Website: https://www.cnpd.pt

You may also lodge a complaint with the CNPD online through their electronic complaints form available at https://www.cnpd.pt.

13. No automated decision-making

No automated decision-making including profiling within the meaning of Art. 22 GDPR takes place in connection with this website.

14. SSL/TLS encryption

For security reasons and to protect the transmission of confidential content, this site uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" in your browser's address bar.

15. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or manipulation, in accordance with Art. 32 GDPR and Art. 41 of Lei n.º 58/2019. These measures include SSL/TLS encryption, access controls, and regular security reviews.

16. Updates to this privacy policy

We reserve the right to adapt this privacy policy so that it always complies with current legal requirements or to implement changes to our services. The version current at the time of your visit applies.

AVANTO is a trading name of AVANTOHUB, UNIPESSOAL LDA.