Privacy Policy

1. Data controller

Kauã Caetano Campos, responsible for the Flowen project.

Email: centralflowen@gmail.com
Phone / WhatsApp: +351 931 838 188

2. Personal data we process

Depending on how you use the website, we may process:

• Name, business name, email and phone / WhatsApp number;
• Subject, message and preferred contact period;
• Industry and approximate business size;
• Selected automation or web development needs, configuration choices and main business challenge;
• Processes you want to improve and tools you currently use;
• Additional information you provide voluntarily;
• Limited technical information generated by the website or infrastructure when needed for operation and security, such as IP address, browser or device data and technical logs.

The website uses browser local storage to remember selected needs and configuration choices during your visit. This storage is not used for advertising.

3. Purposes and legal basis

We process data to respond to enquiries, assess requests about Flowen Auto or Flowen Web, understand business needs, prepare and discuss potential solutions or proposals, manage pre-contractual communications requested by visitors, and maintain website security and operation.

Where processing is needed for pre-contractual steps requested by you, the basis is Article 6(1)(b) of the General Data Protection Regulation (GDPR). Responding to general business enquiries, managing requests and protecting the website and its infrastructure rely on legitimate interests under Article 6(1)(f) GDPR.

Submitting a contact or diagnostic form does not subscribe you to marketing. Future marketing requiring consent will have a separate opt-in.

4. Required information

Fields marked as required are necessary to handle your request. Without them, Flowen may be unable to respond.

5. Recipients and service providers

Data may be processed by technology providers strictly necessary for hosting, database services, infrastructure and website operation. The current website uses Lovable infrastructure and Supabase database services. These providers do not own data submitted through the forms.

Data is not sold to third parties. It may also be disclosed where legally required or to professional advisers when legitimately necessary.

6. International transfers

Some technology providers may process data outside the European Economic Area. Where an international transfer occurs, Flowen will rely on a transfer mechanism permitted under the GDPR and appropriate safeguards applicable to the provider and processing activity.

7. Retention

• Enquiries and diagnostics that do not lead to a customer relationship are retained for up to 24 months after the last relevant interaction.
• If a commercial or contractual relationship begins, necessary data may be retained for its duration and for legally required periods afterwards.
• Data may be retained longer only where necessary to establish, exercise or defend legal claims, or meet a legal obligation.
• Technical and security logs are kept only as reasonably necessary for security and operation, subject to infrastructure providers' technical retention rules.

8. Your rights

Where applicable, you may request access, rectification, erasure or restriction of processing, object to processing and exercise data portability rights. You may withdraw consent where processing is actually based on consent.

Send requests to centralflowen@gmail.com. Flowen may need to verify your identity before responding and will reply within the GDPR's applicable time limits.

9. Complaints

You may complain to the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

10. Automated decisions

The current website does not make decisions with legal or similarly significant effects based solely on automated processing of personal data submitted through its forms.

11. Security

Reasonable technical and organisational measures are used to protect personal data. No internet-connected system can guarantee absolute security.

12. Cookies and local storage

The current website does not intentionally use advertising or marketing cookies. The website or its infrastructure providers may use strictly necessary technical storage. Browser local storage remembers selected needs and choices during your visit, along with your language and theme preferences.

If non-essential analytics, advertising or other tracking tools are introduced later, this policy and any required consent mechanism will be updated before they are activated.

13. Changes

This policy may be updated if the website, processing activities or legal requirements change. The latest version and its date will appear on this page.