Legal
Privacy Policy
Last updated: May 2025
Sunbiotan is committed to protecting your personal data and privacy. This Privacy Policy informs you about the data we collect, how we process it and the rights you have, in accordance with the General Data Protection Regulation (GDPR — EU Regulation 2016/679).
1. Data Controller
The controller of your personal data is:
2. Personal Data Collected
We collect personal data in the following situations:
Contact form
Name, email address, phone number (optional) and message. Used exclusively to respond to your enquiry.
Professional application
Full name, business name, city, phone, email address and optional message. Used to evaluate your application as a Sunbiotan partner.
Geolocation (Centres Map)
Our Centres Map may request access to your geographic location to display the nearest Sunbiotan centres. This information is processed exclusively in your browser and is NOT transmitted, stored or shared with our servers. Permission is granted or denied through your browser and can be revoked at any time in your device settings.
Cookies
Please refer to our Cookie Policy
3. Purposes and Legal Basis
- —Responding to contact requests: performance of pre-contractual measures or legitimate interest [Art. 6(1)(b) and (f) GDPR].
- —Processing professional applications: performance of pre-contractual measures [Art. 6(1)(b) GDPR].
- —Essential cookies: legitimate interest to ensure the technical functioning of the website [Art. 6(1)(f) GDPR].
- —Geolocation: explicit consent of the user through the browser [Art. 6(1)(a) GDPR].
4. Retention Period
- —Contact form data: retained for 12 months.
- —Professional application data: retained for 24 months or until a final decision is made.
- —Partner area access data: for the duration of the contractual relationship and 5 years thereafter.
5. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access: obtain confirmation as to whether we process your data and access to it.
Right to rectification: request correction of inaccurate or incomplete data.
Right to erasure: request deletion of your data in cases provided for by law.
Right to data portability: receive your data in a structured, machine-readable format.
Right to restriction: request the suspension of processing in certain circumstances.
Right to object: object to processing based on legitimate interest.
To exercise any of these rights, contact us at info@sunbiotan.pt. We will respond within 30 days.
6. International Transfers
Personal data is processed and stored within the European Union. Our cloud infrastructure provider (Supabase) maintains data on servers located in the European Union, in compliance with the GDPR.
7. Changes to this Policy
We may update this Privacy Policy periodically to reflect legal or operational changes. The date of the last update is shown at the top of this page. We recommend you review it regularly.
8. Contact and Complaints
For any questions related to privacy and data protection, please contact us:
info@sunbiotan.ptYou also have the right to lodge a complaint with the competent supervisory authority in Portugal:
Comissão Nacional de Proteção de Dados (CNPD)
www.cnpd.pt