Privacy notice.

No cookies, no analytics

This site sets no cookies and runs no analytics, advertising, or social-media trackers. That is why there is no cookie banner: there is nothing to consent to. Fonts and images are served from the same server as the pages, so viewing a page sends no data to anyone else.

The site links to LinkedIn profiles. Once you follow such a link, LinkedIn's own privacy policy applies.

Who is responsible

Warding Bridge, Lda, Rua D. Manuel II, 297, 4430-084 Vila Nova de Gaia, Portugal, is the controller for the personal data described in this notice. You can reach us at info@grandhelm.com.

What we collect and why

Server logs

When you open a page, the server that hosts this site records your IP address, the page requested, the time of the request, and the browser type. We use these logs to keep the site available and secure. The legal basis is our legitimate interest in running the site (Article 6(1)(f) GDPR). We keep the logs no longer than we need them for that purpose.

Contact form

When you send a message through the contact form, we receive the name, email address, subject, and message you enter, and the company name if you provide one. We use them to answer you and, if the conversation continues, to prepare a proposal. The legal basis is the steps you ask us to take before entering into a contract (Article 6(1)(b) GDPR) and our legitimate interest in responding to enquiries. We keep enquiries for 24 months after the last exchange, then delete them. If an enquiry leads to an engagement, the records of that engagement are kept under its own terms.

Email

If you email us directly, we handle your message in the same way as a contact-form enquiry.

Who processes data on our behalf

• Web3Forms relays contact-form submissions to our mailbox and processes the message only to deliver it. Its privacy policy describes how it handles the message in transit.
• Our email provider stores the messages we receive, under a data-processing agreement.
• Our hosting provider runs the servers that hold the server logs.

We do not sell personal data, and we do not share it with anyone else unless the law requires it.

Your rights

Under the GDPR you can ask us to:

• Tell you what personal data we hold about you, and give you a copy.
• Correct data that is wrong.
• Delete your data.
• Restrict how we use your data, or object to our use of it.
• Give you your data in a portable format.

To exercise any of these rights, email info@grandhelm.com. We answer within one month. You can also lodge a complaint with a supervisory authority: the Portuguese Comissão Nacional de Proteção de Dados (CNPD), or the authority in the country where you live.

Changes to this notice

We update this notice when the way the site handles data changes. The date at the top shows the current version.