1. Roles in processing
WebMadeira acts as controller for data needed for the commercial relationship, client account and billing. When hosting a customer's website, database, form or email, it may act as processor for data the customer chooses to store.
2. Minimisation and purpose
We use only data that is adequate and necessary to deliver services, answer enquiries, manage domains and accounts, invoice, provide support and protect infrastructure.
Customers should avoid unnecessary personal data in public areas and set appropriate access rules for users and staff.
3. Data subject rights
Data subjects may exercise access, correction, erasure, objection, restriction and portability rights where applicable by emailing geral@webmadeira.pt. Requests should identify the person and scope without requiring excessive information.
4. Security and incidents
WebMadeira applies access controls, encryption where available, firewall, anti-malware, backups and monitoring according to the contracted services. Customers remain responsible for application passwords, code and permissions.
Where an incident requires notification, applicable legal and contractual procedures will be followed.
5. Customer user data
Customers are responsible for informing users, establishing a lawful basis and answering requests addressed to them. WebMadeira processes this data only to provide infrastructure and according to documented customer instructions.
Requests received by WebMadeira may be forwarded to the responsible customer unless a direct legal response is required.
6. Cooperation and contact
WebMadeira cooperates with customers and competent authorities where legally required. For GDPR requests, incidents or questions, contact geral@webmadeira.pt.