Privacy Policy
Proteção de dados pessoais — bood.be®
Privacy Policy
1. Introduction
bood.be®, lda., a company headquartered in Portugal (hereinafter "bood.be®", "we" or "our company"), provides software development services, website hosting, email hosting, database services, multimedia content production and/or video/audio editing.
This Privacy Policy explains what personal data we collect, for what purposes we use it, with whom we share it, for how long we retain it, and what rights data subjects have, in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation, "GDPR") and Portuguese Law No. 58/2019 of 8 August.
It applies to all visitors of the bood.be® website, as well as to clients and their respective end users, to the extent that bood.be® processes personal data in its own name (as controller).
2. Who is the controller
| Entity | bood.be, Lda. |
| Tax ID | PT 509 149 197 |
| Registered office | Quinta da Barca - Rua N. Sra. de Guadalupe, Nº 113, Ed. 69 / 42 - 4740-473 Esposende - PORTUGAL |
| Contact (privacy) | privacy@bood.be |
| Data Protection Officer | Nuno J Dias |
3. What personal data we collect
Depending on the relationship you have with us, we may collect:
- Identification and contact data — name, email, phone number, tax ID, billing address.
- Account and access data — access credentials to management panels (e.g., Plesk), authentication logs, and administrative activity records.
- Technical data — IP address, device/browser type, server logs necessary for the operation, security, and troubleshooting of the contracted services.
- Data relating to the services provided — domain and DNS configurations, hosted content and files, databases, backups, email mailboxes and their respective technical metadata (not the content of the messages, which we do not access except for technical support purposes requested by the client).
- Analytics data of the bood.be® corporate website — statistical information about visits and pages viewed, as described in our Cookie Policy.
- Communication data — messages exchanged via email, contact form, or technical support.
We do not, on our own initiative, collect special categories of data (art. 9 of the GDPR), unless the data subject voluntarily provides them in the content of a communication.
4. For what purposes we process the data and on what legal basis
| Purpose | Legal basis (art. 6 GDPR) |
|---|---|
| Provide and manage the contracted hosting, email, database, development, and multimedia content services | Performance of a contract (para. b) |
| Issue invoices and comply with tax and accounting obligations | Compliance with a legal obligation (para. c) |
| Ensure the security, availability, and integrity of servers and services | Legitimate interest (para. f) |
| Respond to requests for contact, technical support, or quotes | Pre-contractual steps / performance of a contract (para. b) |
| Prepare usage statistics for the corporate website | Legitimate interest, with safeguards described in the Cookie Policy |
| Commercial communications (only if subscribed) | Consent (para. a) |
5. Who we share data with
We do not sell or rent personal data to third parties. We may share data, strictly to the extent necessary, with:
- Technical infrastructure providers (e.g., data centers, protection against cyberattacks, and content distribution services), subject to contracts ensuring the confidentiality and security of the data;
- Public authorities, when required by law or judicial decision;
- Invoicing and accounting service providers, strictly to the extent necessary for compliance with legal obligations.
All third parties who process data on our behalf are bound by data processing agreements (DPA), pursuant to art. 28 of the GDPR.
6. International data transfers
Data is, as a general rule, hosted on servers located in Portugal and/or other European Union Member States. Where, for the provision of certain auxiliary services (for example, protection against cyberattacks or content distribution), it is necessary to rely on providers with infrastructure outside the European Economic Area, bood.be® ensures the existence of appropriate mechanisms provided for under the GDPR, namely Standard Contractual Clauses approved by the European Commission or adequacy decisions.
7. Retention period
We retain personal data only for as long as necessary for the purposes for which it was collected:
- Client and billing data: for the duration of the contract and for the legal retention period applicable to tax and accounting documents (currently 10 years, under Portuguese law);
- Technical data and server logs: for limited periods, typically between 30 and 90 days, unless longer retention is necessary for security purposes or incident investigation;
- Website analytics data: as indicated in the Cookie Policy;
- Support communications: for the period necessary to resolve the request and for a reasonable subsequent period for support history purposes.
8. Data security
We apply technical and organizational measures appropriate to the risk, including access control, encryption of credentials, network segmentation, firewalls, regular backups, and system monitoring, in order to protect personal data against unauthorized access, loss, alteration, or destruction.
9. Rights of data subjects
Under the GDPR, you may, at any time, exercise the following rights by contacting us at: privacy@bood.be
- Right of access to your personal data;
- Right to rectification of inaccurate or incomplete data;
- Right to erasure ("right to be forgotten"), where applicable;
- Right to restriction of processing;
- Right to data portability;
- Right to object to processing, including for direct marketing purposes;
- Right to withdraw consent at any time, without affecting the lawfulness of processing carried out previously.
You also have the right to lodge a complaint with the National Data Protection Commission (CNPD) — www.cnpd.pt — if you consider that the processing of your data violates applicable legislation.
10. Cookies
The bood.be® website uses cookies and/or similar technologies exclusively for internal statistical analysis purposes. For more information, see our Cookie Policy.
11. Minors
Our services are intended for businesses and professionals, and are not directed at minors under 18 years of age. If you become aware that a minor has provided us with personal data without the required consent, please contact us so that we can arrange its deletion.
12. Changes to this policy
This Privacy Policy may be updated periodically to reflect legal changes or changes to our services. The version in force will always be the one published on the bood.be® website, indicating the date of the last update.
13. Contacts
For any questions related to this Privacy Policy or the processing of your personal data, please contact us at: privacy@bood.be or by mail to Quinta da Barca - Rua N. Sra. de Guadalupe, Nº 113, Ed. 69 / 42 - 4740-473 Esposende - PORTUGAL.
Se necessita mais informação relativa à Política de Privacidade, por favor contacte-nos pelo email privacy@bood.be.
bood.be®