Privacy information
Privacy Policy
How Obra Lisboa collects, uses and protects personal data on this website and in contact requests.
Last updated: 18 October 2026
1. Data controller
The data controller is Erros e Acertos, LDA, trading under the Obra Lisboa brand.
- Email: [email protected]
- Telephone: +351 926 334 357
- Service area: Greater Lisbon
Portuguese tax number (NIF): 518003981. Registered office: Rua Doutor Sidónio Pais, Nº6, C 2675-503 Odivelas.
2. Data processed
We process the information you choose to provide to request a quote or contact us: name, email address or telephone number, project type, municipality and description. Area, preferred timing and indicative budget are optional. A full address is not required at the initial stage. Photographs, plans or other documents you send later are used to assess your enquiry. Technical data needed to operate and secure the website may also be processed.
With Analytics permission, Google Analytics measures visits and selected commercial actions. Advertising permission alone does not enable this analytics measurement. Legal pages and links for exercising rights or making complaints are excluded from commercial measurement. Additional automatic measurement is disabled. The parameters of events defined on this website do not include a name, email address, telephone number, address or message. Technical identifiers may still constitute personal data.
3. Purposes and legal bases
Contact details are used to respond to enquiries, prepare quotations, take pre-contractual steps and manage client relationships. Legal obligations may require additional processing. Audience and advertising measurement depend on the applicable consent choice. Sending a quote request does not subscribe you to marketing communications.
Depending on the purpose, processing is based on pre-contractual steps requested by you, performance of a contract, compliance with legal obligations, legitimate interests in website security and operation, or consent for analytics and advertising. Information needed to respond is indicated on the form; without a valid contact method we cannot reply. You can submit an enquiry without accepting analytics or advertising cookies.
4. Sharing and service providers
The website uses Webflow for hosting and forms, Cloudflare content delivery and security services, Google analytics and advertising tools, and OpenAI for the ChatGPT ads measurement described below. Enquiries may also be received and handled by email. Access to and use of data depend on the purpose and each provider’s role; service terms do not authorise the use of enquiry content for advertising.
If you accept Advertising, Obra Lisboa’s server may share confirmation of an enquiry with OpenAI, using the event time, source page, event identifier and available technical attribution references. This integration does not send a name, email address, telephone number, message or property details, or hashes of contact details. The OpenAI browser pixel is suspended. Cloudflare RUM collection of visitor performance data is also suspended; security and delivery services continue to operate. Suspension does not erase previously collected data.
5. International transfers
International providers may process data outside the European Economic Area. A transfer must be covered by an applicable mechanism, such as an adequacy decision or Standard Contractual Clauses, and any necessary additional measures. You can request information about recipients and safeguards applicable to your processing using the contact in this policy.
6. Retention
Enquiry data is retained while needed to respond, prepare a proposal and manage any contractual relationship, taking applicable retention duties and liabilities into account. The need should be reviewed when an enquiry is closed. In the GA4 configuration inspected, event retention is 2 months and user data retention is 14 months, reset by activity; these periods are separate from cookie lifetimes and do not cover all aggregated reports. The conversion receiver limits the transmission window to 15 minutes and removes SQLite records after 7 days; logs, backups and recipient retention are separate processing activities.
7. Your rights
Where applicable, you may request access, rectification, erasure, restriction, objection and data portability, or withdraw consent without affecting earlier processing. To exercise your rights, email [email protected].
You may also lodge a complaint with the Portuguese Data Protection Authority (CNPD) through its official channels.
8. Cookies and preferences
Non-essential measurement starts disabled. You can accept, reject or choose Analytics and Advertising separately and change your choice in “Cookie settings”. Withdrawal prevents new conversions from being prepared and requests cancellation of pending ones; it cannot guarantee interruption of a transmission already in progress or automatically erase events already sent. Your quote request does not depend on this choice. See also the Cookie Policy.
9. Updates
This policy may be updated when services, providers or legal requirements change. The date of the published version will appear at the beginning of the document.
