Privacy
Privacy policy
How RematePerfeito Solar handles data in study requests, reviews and website security.
Last updated: 26 July 2026
Controller
The controller is REMATEPERFEITO SOC. UNIPESSOAL, LDA, tax number PT513036563, Estrada do Cemitério 4, Concelhos, 2565-298 Freiria. Privacy contact: info@remateperfeito-solar.pt.
Data, purposes and legal bases
- Study requests: name, email, optional contact, town, indicative energy bill and message. These are used to reply and take requested pre-contractual steps (GDPR Article 6(1)(b)).
- Energy bills: requested only through a private channel where needed to size a solution. They may include identifiers, address, supply-point number, consumption and contract data; they are never published.
- Reviews: display name, optional town, rating, project type and text. Publication relies on explicit consent, which may be withdrawn at any time without affecting prior processing.
- Security and abuse prevention: date/time, technical connection data and a secret-keyed cryptographic fingerprint of the IP address. Processing relies on the legitimate interest in protecting the website, forms and data (GDPR Article 6(1)(f)). Raw IP addresses are not stored in the form database.
- Administration: approval, status and publication actions are recorded for security and accountability.
Recipients and providers
Data is available only to those who need it to reply or operate the service. Hosting, database, image and video storage are provided by Cloudflare. Direct email communications use the company’s configured Google/Gmail services; new-enquiry notifications and strictly necessary admin-access reset emails may be delivered through Resend.
These providers act under their contracts and applicable transfer mechanisms. We do not sell personal data or disclose it for behavioural advertising.
Security and administration
The administration area requires authentication and uses secure sessions, action logging and access controls. Connections use HTTPS/TLS, and the Cloudflare-hosted database and files are encrypted at rest. Passwords set by the administrator are cryptographically derived with a salt; reset tokens are single-use, expire quickly and only their cryptographic fingerprint is stored.
No measure removes all risk. We apply technical and organisational measures proportionate to the data and review them when the service changes.
Automated estimates
The solar and financial estimate is a user-controlled information tool. It does not decide about customers, create profiles, or constitute a quotation or a guarantee of production, savings or payback. Results depend on factors including self-consumption, tariffs, export value, tax, site conditions, losses, maintenance and consumption profile.
Retention
- Study requests: while preparing the proposal and managing the requested relationship and, generally, for up to 24 months after the last interaction, unless law or legal claims require longer.
- Energy bills received for a quotation: only for the analysis and follow-up period, then deleted when no longer necessary, without prejudice to legally required contractual or tax records.
- Pending or rejected reviews: for the time needed to verify and manage abuse; published reviews remain until consent is withdrawn, the service ends, or the content is no longer relevant.
- Technical and security records: for the minimum period needed to investigate abuse or incidents and meet security duties.
- Admin actions: while needed to demonstrate moderation and change integrity.
Your rights
You may request access, correction, erasure, restriction, portability where applicable, object to legitimate-interest processing, and withdraw consent. Email info@remateperfeito-solar.pt. We may request only the information needed to verify identity.
You may also complain to Portugal’s data-protection authority, the Comissão Nacional de Proteção de Dados (CNPD), Avenida D. Carlos I, 134, 1.º, 1200-651 Lisboa, through cnpd.pt.
Required information
Marked fields are needed to reply. A phone number and a public review are optional. There is no solely automated decision-making or profiling.

