Last updated: 28 August 2026
This Privacy Policy explains how Imotera - Engenharia e Construção, Lda processes personal data collected through the imotera.pt website, in accordance with the General Data Protection Regulation (GDPR), Portuguese Law No. 58/2019 and other applicable legislation.
The data controller is Imotera - Engenharia e Construção, Lda, a private limited company, Portuguese company/tax number 515554413, with registered office at Estrada do Paço, no. 29, 8365-055 Algoz, Silves, Faro, Portugal. Contact for privacy and data protection matters: geral@imotera.pt.
The website may process the following data: name, email address, telephone number, professional category, message/professional experience, CV in PDF format when voluntarily submitted, language preference, cookie consent choice, IP address and technical browsing data required for security, abuse prevention and consent-based statistical measurement.
Data is processed to respond to enquiries and requests, manage spontaneous job applications, send submission confirmations to candidates, ensure website security and prevent abuse of the form, comply with applicable legal obligations, improve the browsing experience and produce aggregated website usage statistics where analytics consent has been given.
Processing may be based, as applicable, on pre-contractual steps requested by the data subject, Imotera’s legitimate interest in responding to enquiries, protecting the website and managing received communications, the user’s consent for analytics cookies, and compliance with legal obligations.
Spontaneous applications are submitted voluntarily by the user. The CV is optional and must be sent in PDF format. Application data is used only for profile review, candidate contact and internal recruitment management. The website does not maintain its own application database and does not store submitted CVs after the form has been processed. Data and documents are forwarded by email to the responsible team through the technical provider Resend, and may be retained in the destination email inbox and in the provider’s technical records, in accordance with the respective policies and the retention periods defined by Imotera. The confirmation shown in the form is used to demonstrate that the candidate has acknowledged this Privacy Policy; it is not the standalone lawful basis for processing application data, which relies on pre-contractual steps requested by the candidate and Imotera’s legitimate interest in managing received applications. Imotera does not request sensitive data or documents that are not necessary for the application through the form.
To operate the website and its services, Imotera may use technical providers, including Vercel for hosting, Resend for sending application-related emails, Upstash for submission rate limiting and abuse prevention, Mapbox for map display and Google Analytics 4 for browsing statistics subject to consent. These providers process data only to the extent necessary to provide their services.
Some technology providers may process data outside the European Economic Area. Where applicable, such transfers should rely on appropriate mechanisms under the GDPR, such as adequacy decisions, standard contractual clauses or other legally admissible safeguards.
Data is retained only for as long as necessary for the purposes for which it was collected. Contact requests and business communications are retained for up to 24 months after the last contact, unless there is a contractual relationship, legal obligation or need to retain them for a longer period. Application data is retained for up to 12 months after submission, unless erasure is requested, consent is given for a longer retention period or a legal obligation requires otherwise. Technical security and submission rate-limit data is retained for up to 90 days, unless it is necessary to investigate abuse, fraud or a security incident. The cookie consent choice is kept until changed by the user or until browser data is cleared.
Under the GDPR, data subjects may request access, rectification, erasure, restriction of processing, portability, objection to processing and withdrawal of consent where processing is based on consent. Requests should be sent to geral@imotera.pt. Exercising these rights is free of charge, except in cases of manifestly unfounded or excessive requests as provided by law.
Data subjects have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), the national supervisory authority in Portugal, through www.cnpd.pt, without prejudice to contacting Imotera first for clarification or resolution.
Imotera adopts technical and organisational measures appropriate to the protection of personal data processed through the website, including form validation, submission rate limiting, authorised-origin restrictions and controls over uploaded files. No system is entirely risk-free, but measures are applied in proportion to the nature of the data processed.