Privacy Policy
80LVL Lda. ("we", "our") is committed to protecting your privacy. This policy explains how we collect, use, and protect your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.
01Data Controller
80LVL Lda., a limited company registered in Portugal.
Contact email for privacy matters: [email protected]
If you have any questions about the processing of your personal data, you can contact us at any time using the email above.
02Data We Collect
We collect only the personal data necessary to provide our services:
Service bookings
Full name, email address, phone number, vehicle model, and requested service. This data is required to process your booking and contact you regarding the service.
Account creation
Name, email address, and password (stored using cryptographic hashing). Your account allows you to manage your bookings and vehicles.
Technical data
Language preference stored locally in your browser (localStorage). We do not use tracking cookies or third-party analytics tools.
03Legal Basis for Processing
We process your personal data on the following legal grounds:
Performance of a contract (Art. 6(1)(b) GDPR): when you make a booking or create an account, processing is necessary for the performance of the service contract.
Consent (Art. 6(1)(a) GDPR): when you explicitly accept these terms during account creation.
Legal obligation (Art. 6(1)(c) GDPR): to comply with Portuguese tax and accounting obligations.
04Data Sharing
We do not sell or share your personal data for marketing purposes. Your data may only be shared with:
Payment service providers (SumUp) — solely for processing payments for services rendered.
Hosting provider — to securely host the website and database.
All third-party service providers are contractually obligated to protect your data and process it only according to our instructions.
05Retention Period
Booking data: retained for 3 years after the service is performed, in accordance with Portuguese tax and accounting obligations.
Account data: retained as long as your account is active. Upon deletion request, data is removed within 30 days, unless legal retention is required.
Technical data (language preference): stored locally in your browser and removed when you clear your browser data.
06Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may request correction of inaccurate or incomplete data.
Right to erasure — you may request deletion of your personal data when there is no legal basis for its retention.
Right to data portability — you may request transfer of your data in a structured, machine-readable format.
Right to object — you may object to the processing of your data for direct marketing purposes.
Right to lodge a complaint — you may file a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
07Cookies and Local Storage
Our website only uses browser local storage (localStorage) to save your language preference. We do not use tracking cookies, advertising cookies, or third-party analytics tools.
Your consent is not required for this storage, as it is strictly necessary for the website to function (Art. 5(3) of the ePrivacy Directive).
08Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
Encrypted communications (HTTPS/TLS).
Passwords stored using cryptographic hashing (never in plain text).
Restricted access to personal data, limited to authorized personnel.
Regular backups and recovery procedures.
09Changes to This Policy
We may update this privacy policy periodically. Any significant changes will be communicated through the website. The date of the last update is indicated at the top of this page.