- The data controller is Contemporary Constellation, Lda., operator of the OREVUM brand.
- We process contact, professional and browsing data only to respond to requests, prepare proposals, establish partnerships and comply with legal obligations.
- We do not sell personal data. We share it only with essential service providers (hosting, security, communication, accounting) and with authorities where required by law.
- We do not ask for health data in the website forms. The processing of data in connection with health intelligence solutions is described on the Data and Privacy page.
- You can exercise your rights of access, rectification, erasure, objection, restriction and portability at [email protected] and lodge a complaint with the Portuguese Data Protection Authority (CNPD).
1. Introduction
This Privacy Policy explains how your personal data is collected and processed when you visit the website orevum.eu, contact us or interact with us. It is drafted in compliance with Regulation (EU) 2016/679 (GDPR), Law no. 58/2019 and Law no. 41/2004 (electronic communications).
We are guided by the principle of accountability: we process data in accordance with the following principles under Article 5 of the GDPR:
- Lawfulness, fairness and transparency: we explain what we do and why;
- Purpose limitation: we only use data for the purposes described here;
- Data minimisation: we collect only what is necessary;
- Accuracy: we keep data up to date and correct errors;
- Storage limitation: we delete data when it is no longer needed;
- Integrity and confidentiality: we protect data with appropriate measures.
2. Data Controller
The controller of your personal data is:
- Company name
- Contemporary Constellation - Consultoria e Gestão Unipessoal, Lda.
- NIPC (Portuguese tax ID)
- 516 756 583
- Address
- Travessa João Paulo II, 48, 4400-479 Vila Nova de Gaia, Portugal
- [email protected]
- Brand and website
- OREVUM - orevum.eu
We have not appointed a Data Protection Officer because the conditions for mandatory appointment under Article 37 of the GDPR are not met. All privacy-related questions can be sent to the email address indicated above.
3. Scope of Application
This policy applies to website visitors, to individuals and companies that contact us, to potential customers, partners and professionals, and to anyone who communicates with us by any means. It does not apply to third-party websites (including those of the brands and partners presented in the OREVUM ecosystem) to which our site may link, each of which has its own policy.
4. Categories of Personal Data Processed
4.1. Identification and contact data
Name, email, telephone, country, and the information you choose to provide in forms.
4.2. Professional and commercial data
Company, role, sector, interest in products, services or partnerships, and data necessary for proposals and commercial contacts.
4.3. Data contained in communications
Content of the messages and requests sent. We do not request health data. We ask that you do not include it in your messages. If you do, we will process it only to the extent strictly necessary and with your consent.
4.4. Technical and browsing data
IP address, device and browser type, pages visited, date and time, language and identifiers collected by cookies and similar technologies, in accordance with our Cookie Policy.
5. How We Collect Data
- Directly from you, through forms, email or other contacts;
- Automatically, through the operation of the website, security tools and, with your consent, statistics or marketing cookies;
- From public professional sources, where necessary for legitimate commercial contacts (for example, professional contact details that have been made public).
6. Purposes of Processing and Legal Basis
We process your data only where there is an appropriate legal basis:
| Purpose | Legal basis |
|---|---|
| Responding to contact and information requests | Pre-contractual steps and legitimate interest |
| Preparing proposals and establishing partnerships or distribution | Pre-contractual steps and legitimate interest |
| Forwarding your request to brands or partners of the ecosystem, when you ask us to | Consent or pre-contractual steps |
| Legal, tax and accounting obligations | Compliance with a legal obligation |
| Administrative management and defence of rights | Legitimate interest and, where applicable, legal obligation |
| Security and operation of the website | Legitimate interest |
| Statistical analysis and improvement of the website | Consent (cookies) |
| Informational communications and direct marketing | Consent or legitimate interest, with the right to object |
7. Mandatory or Optional Nature of the Data
Data marked as mandatory in forms is necessary to respond to your request; without it we cannot follow up. All other data is optional.
8. Recipients and Data Sharing
We do not sell personal data. We may share it, to the extent necessary, with the following categories of recipients:
| Category | Purpose | Data shared |
|---|---|---|
| Website hosting, security, maintenance and technical support | Operation and protection of the website | Technical data and data submitted on the site |
| Email, scheduling and communication providers | Responding to requests, scheduling meetings and sending communications | Name, email and content of communications |
| Brands and partners of the ecosystem | Forwarding your request, only when you ask us to | The data you provide in the request |
| Accountants, consultants and lawyers | Tax, accounting and legal obligations | Billing data and data necessary for the case |
| Administrative, tax, judicial and supervisory authorities | Compliance with legal obligations | Data required by law |
Whenever a provider processes data on our behalf, it acts as a processor, under a contract pursuant to Article 28 of the GDPR.
9. International Data Transfers
Some providers (for example, analytics and email services) may be established outside the European Economic Area. In such cases, the transfer only takes place with appropriate safeguards: an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, where applicable) or Standard Contractual Clauses, with supplementary measures whenever necessary.
10. Commercial Communications and Newsletter
We only send newsletters and marketing communications with your consent or, in the case of professional contacts and in relation to products or services related to the existing relationship, on the basis of legitimate interest and the possibility of free-of-charge objection (Article 13-A of Law no. 41/2004). Each communication includes a link to unsubscribe. You may also withdraw your consent via [email protected].
11. Health Data and Health Intelligence
The website does not request health data in its general forms. Some body measurement and wellbeing indicator tracking solutions presented in the OREVUM ecosystem may process data concerning health. Such processing only takes place when you actually use those solutions, with specific information and, where required, with your explicit consent (Article 9(2)(a) of the GDPR). See the Data and Privacy page for detailed information.
12. Data Retention
We retain data only for as long as necessary for the stated purposes or to comply with legal obligations:
| Type of data | Retention period |
|---|---|
| Contact and information requests without a contract | Up to 12 months after the last interaction |
| Commercial requests, proposals and partnerships | Up to 24 months after the last interaction |
| Contractual data | For the duration of the contract and the applicable legal periods |
| Invoicing and accounting | 10 years, or the period required by law |
| Informational communications and marketing | Until consent is withdrawn or 24 months of inactivity |
| Technical and security logs | Up to 12 months, unless an investigation is ongoing |
| Cookie consent records | For as long as necessary to demonstrate compliance |
Once the period has elapsed, the data is deleted or anonymised.
13. Cookies and Similar Technologies
We use strictly necessary cookies and, with your consent, statistics and marketing cookies. You can manage your choices at any time. See our Cookie Policy.
14. Data Security
We apply technical and organisational measures appropriate to the risk, including encrypted connection (HTTPS), access control, regular updates, backups and restriction of access to those who need the data. In the event of a data breach that poses a risk to data subjects, we will comply with the notification obligations set out in Articles 33 and 34 of the GDPR.
15. Data Subject Rights
Under the GDPR, you have the right to:
- Access your data and information about its processing;
- Rectification of inaccurate or incomplete data;
- Erasure of your data, where applicable;
- Restriction of processing, in the cases provided for by law;
- Object to processing based on legitimate interest and to direct marketing;
- Portability of data processed on the basis of consent or contract;
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
16. Exercising Your Rights
To exercise your rights, write to [email protected], identifying yourself and stating your request. We will reply within one month, extendable by a further two months in complex cases, with prior notice. We may ask for additional information to confirm your identity. The exercise of rights is free of charge, except for manifestly unfounded or excessive requests.
17. Complaints
Without prejudice to any other means of redress, you may lodge a complaint with the supervisory authority: Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD) - www.cnpd.pt - or with the supervisory authority of the Member State where you live or work. We would appreciate the opportunity to resolve the matter beforehand.
18. Automated Decisions and Profiling
We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you, nor do we create profiles for that purpose.
19. Children's Data
The website is intended for persons over 18 years of age. We do not knowingly collect data from minors. If we become aware that we have collected it, we will delete it.
20. Links to Third-Party Websites
The website may contain links to sites of brands, partners or other third parties. We do not control those sites or their policies, so we recommend that you read them.
21. Changes to the Privacy Policy
We may update this policy to reflect legal, technical or operational changes. The date of the last update appears at the top of this page. In the event of substantial changes, we will inform you appropriately.
22. Contact
For questions about privacy and data protection: [email protected], or by post to Contemporary Constellation - Consultoria e Gestão Unipessoal, Lda., Travessa João Paulo II, 48, 4400-479 Vila Nova de Gaia, Portugal.
