RGPD · GDPR

Privacy
Policy

Last updated: April 2026

Barufil, Lda., registered at Rua do Concelho, 475, 3780-351 Avelãs de Caminho, Portugal, VAT 503 770 485, is the controller of your personal data, in compliance with Regulation (EU) 2016/679 (GDPR) of 27 April 2016.
1
Explicit Consent

The collection and processing of your personal data is always preceded by your free, specific, informed and unambiguous consent, pursuant to Article 7 of the GDPR.

  • Contact forms — active ticking of the acceptance box for this Policy.
  • Cookie banner — active selection of the desired cookie categories.

You may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.

2
Transparency — What We Collect

Data controller: Barufil, Lda.  |  VAT 503 770 485  |  geral@barufil.pt  |  (+351) 234 743 004

Data collected: name, company, e-mail, phone number, message content and browsing data (only with consent).

PurposeLegal BasisRetention
Responding to contact requestsConsent (Art. 6(1)(a))3 years
Management of business relationshipsLegitimate interest (Art. 6(1)(f))5 years
Compliance with legal obligationsLegal obligation (Art. 6(1)(c))As required by law
Analytical cookiesConsent (Art. 6(1)(a))13 months

Data is not shared with third parties for commercial purposes nor transferred outside the European Economic Area without adequate safeguards.

3
User Rights

Access

Know what data we hold about you.
Art. 15 GDPR

Rectification

Correct inaccurate or incomplete data.
Art. 16 GDPR

Erasure

Request deletion of your data.
Art. 17 GDPR

Restriction

Temporarily suspend the use of your data.
Art. 18 GDPR

Portability

Receive data in a structured, machine-readable format.
Art. 20 GDPR

Objection

Object to processing based on legitimate interest.
Art. 21 GDPR

No automation

Not be subject to solely automated decisions.
Art. 22 GDPR

Exercise your rights

Contact us at geral@barufil.pt.
We respond within 30 days.

4
Cookie Policy

This website uses cookies — small text files stored on your device. Consent is requested before placing any non-essential cookies.

CategoryDescriptionConsent
EssentialSite operation (session, security). Always active.Not required
AnalyticalVisit statistics and browsing behaviour.Required
FunctionalUser preferences (language, location).Required
MarketingPersonalised advertising and social media integrations.Required

You can manage or revoke consent at any time through your browser settings or by contacting geral@barufil.pt.

5
Accessibility

This Policy is permanently accessible from the footer of all website pages, in clear and plain language, compatible with screen readers and assistive technologies, in compliance with WCAG 2.1 guidelines (Level AA).

6
Supervisory Authority — CNPD

The CNPD — National Data Protection Commission is the Portuguese authority that oversees GDPR compliance. If you believe your personal data is being processed incorrectly, you may lodge a complaint:

🏠

CNPD — Comissão Nacional de Proteção de Dados

Rua de São Bento, 148-3.º  |  1200-821 Lisboa
📞 (+351) 213 928 400
geral@cnpd.pt
🌐 www.cnpd.pt

7
DGERT — Directorate-General for Employment

The DGERT — Directorate-General for Employment and Labour Relations is responsible for accrediting training entities and certifying courses in Portugal. Barufil complies with DGERT standards in processing data of trainees and employees.

🏛

DGERT — Direção-Geral do Emprego e das Relações de Trabalho

Praça de Londres, 2  |  1049-056 Lisboa
📞 (+351) 211 162 700
🌐 www.dgert.gov.pt

8
Consumer Dispute Resolution

Pursuant to Law No. 144/2015 of 8 September (transposing Directive 2013/11/EU on alternative dispute resolution for consumer disputes), Barufil, Lda. informs that, in the event of a consumer dispute, the consumer may resort to an Alternative Dispute Resolution (ADR) entity.

Barufil is available to participate in out-of-court consumer dispute resolution proceedings before the competent ADR entities.

  • CNIACC — National Centre for Consumer Conflict Information and Arbitration
    National ADR entity for consumer disputes not covered by sector-specific entities.
    www.cniacc.pt
  • Consumer Portal
    Full list of ADR entities recognised by the Directorate-General for Consumer Affairs.
    www.consumidor.gov.pt
  • EU Online Dispute Resolution (ODR) Platform
    For contracts concluded online, consumers may also use the European ODR platform.
    ec.europa.eu/consumers/odr
  • Electronic Complaints Book
    Under Decree-Law No. 74/2017 of 21 June, the consumer may submit a complaint via the Electronic Complaints Book.
    www.livroreclamacoes.pt

Using ADR entities does not affect the consumer’s right to bring legal action.

9
Changes to This Policy

Barufil reserves the right to update this Privacy Policy whenever necessary, in particular in the event of legislative changes or internal practice updates. The date of the last update is indicated at the top of this page.