Privacy

This site sets no tracking cookies. It measures its audience without cookies, with Cloudflare Web Analytics. Here is what is collected, who processes it on our behalf, and what you can require of us.

1. Controller

XYZ BIM, Lda. · VAT PT519508947 · Portugal
Contact: [email protected]

2. Cookies and local storage

This site sets no tracking or advertising cookies (no Google Analytics or equivalent). The only things kept in your browser's local storage are your display preferences: light/dark theme, language, and the fact that you have dismissed this notice. That data never leaves your device and you can erase it at any time by clearing the site's data in your browser. Being strictly functional, it is exempt from consent under the ePrivacy Directive and Portuguese Law 41/2004.

The delivery and security layer (Cloudflare, see section 3) may set strictly necessary security cookies (for example __cf_bm or cf_clearance) when it applies bot or attack protection. These are purely technical, serve neither tracking nor advertising, and are likewise exempt from consent as essential to providing the service.

We measure our audience with Cloudflare Web Analytics: a Cloudflare script records page views, the referring page, browser type, approximate country and page-load speed metrics. It uses no cookies and no local storage, builds no profiles and does not follow visitors across sites; we receive the numbers in aggregate. Cloudflare processes this data on our behalf, as a processor (section 3), on the basis of our legitimate interest in knowing which pages are read (GDPR Art. 6(1)(f)). A content blocker that stops static.cloudflareinsights.com switches the measurement off without affecting the site.

The videos on the webinars page are hosted on YouTube. Nothing is requested from YouTube until you press play; when you do, the video loads from youtube-nocookie.com and Google Ireland Limited receives your IP address and technical browser data, and may store data on your device, under its own privacy policy. The click is your choice (GDPR Art. 6(1)(a)); without it, the page still works and links to the video on YouTube.

3. Personal data

There are no user accounts. The only form on this domain is the Scan-to-BIM estimator's: the name, e-mail and context you enter go to our own server (n8n.xyzbim.eu) and are used only to send you the estimate and answer the request, with no lists and no third parties. To stop automated submissions, the form uses Cloudflare Turnstile, which checks the browser and does not read what you type into the form. If you write to us by e-mail, what you send is used only to answer your enquiry (GDPR Art. 6(1)(b) and (f)) and is not shared with third parties. The hosting server may log IP addresses temporarily in technical records, for security reasons.

The site is delivered over the network of Cloudflare, Inc. (CDN, DNS and attack protection). Requests pass through Cloudflare's servers, which processes IP addresses and technical connection data on our behalf, as a processor, solely for security and performance (GDPR Art. 6(1)(f), legitimate interest). Cloudflare is certified under the EU-U.S. Data Privacy Framework; see cloudflare.com/privacypolicy.

Typefaces are served from our own server; no request is made to Google's servers or to any third party.

4. Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction and objection. To exercise any of them, write to [email protected]. You may also lodge a complaint with the CNPD (cnpd.pt), the Portuguese supervisory authority, or with the supervisory authority of your country of residence.

5. Internal tools and Google APIs

XYZ BIM operates internal tools that reach Google Search Console through the Google API, in order to submit this site's sitemap (sitemap.xml) and read indexing statistics for the domains we own. They are authorised by our own account, have no external users, and do not collect, process or store any visitor data from this site.

Information obtained from Google APIs stays within our infrastructure. It is not shared, sold or transferred to third parties, and is not used for advertising or to train models: it serves only to keep this site correctly indexed. Its use adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Public procurement data

Quem Ganha o Quê (quemganha.xyzbim.eu) reuses the information that Portuguese public bodies publish on the BASE portal about public contracts: contracting authority, winners, bidders, subject, price and dates. The purpose is to make the public market for architecture, engineering and construction transparent (GDPR Art. 6(1)(f), legitimate interest).

Where a winner or bidder is a natural person (a self-employed professional or sole trader), we show only the name, as the contracting authority published it. We do not publish the tax number (NIF) of natural persons, neither in the text nor in page addresses. Names and tax numbers of companies and public bodies are not personal data and are shown.

If you are one of those natural persons and object to this processing, or want your information rectified or erased, write to [email protected]. We reply within one month. The source remains the BASE portal: correcting a record at source is for the contracting authority.

The contact form on Quem Ganha o Quê keeps only the e-mail address, with the date and the page it was sent from, so we can contact you about the tool (GDPR Art. 6(1)(a), consent). It is held in Cloudflare storage and deleted automatically after 400 days; you can ask for earlier erasure at the same address.

This policy is published in Portuguese, English and German. Should the versions diverge, the Portuguese version prevails.