Privacy Policy

Last updated: October 8, 2026

This policy explains how Nutriveiro processes personal data collected through this website, under Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019.

1. Data controller

Name
Camila Lin Tsinis (Nutriveiro)
Tax number (NIF)
327116501
Address
Porto, Portugal

2. Data we collect

  • Contact form: name, gym, email, phone, city and message.
  • Review form (available only to partner gyms): flavour, rating and an optional comment. We do not ask for your name or email.
  • Technical data: IP address and browser data, processed by our hosting provider for security, and aggregated, anonymous visit statistics without cookies.

3. Purposes and legal basis

  • Replying to contact requests and proposals: steps taken at your request before entering a contract (Art. 6(1)(b) GDPR).
  • Managing contracts with gyms: performance of a contract (Art. 6(1)(b) GDPR).
  • Meeting tax and accounting obligations: legal obligation (Art. 6(1)(c) GDPR).
  • Improving products based on reviews, keeping the website secure and measuring aggregated visits: legitimate interest (Art. 6(1)(f) GDPR).

4. Who we share data with

We do not sell data or share it for marketing. We only use processors in the following categories:

  • Website hosting: hosts the site, measures visits and stores reviews.
  • Forms service: sends contact form messages to our email.
  • Email service: receives and manages our emails.

Some of these processors may process data outside the European Economic Area. In those cases, the transfer is protected by the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. We share data with public authorities only when the law requires it.

5. Retention

  • Contact requests that do not lead to a contract: 12 months.
  • Reviews: 24 months.
  • Client data: length of the contract plus 10 years, for tax obligations.

6. Cookies

We do not use advertising or tracking cookies. The website may store one technical cookie (NEXT_LOCALE) to remember your chosen language. It is strictly necessary and does not require consent.

7. Your rights

You can ask to access, correct, erase, restrict or port your data, and object to processing based on legitimate interest. Write to the email above; we reply within one month. You can also complain to the Portuguese data protection authority, CNPD (www.cnpd.pt).

8. Changes

We may update this policy. The date of the last update is shown at the top of this page.