Privacy policy

PORTUGAL AOSHENG HI-TECH, UNIPESSOAL LDA., a private limited company with registered office at Rua 10, nº 8, Zona Industrial de Varziela, 4480-061 ÁRVORE, registered with the Commercial Registry Office under the sole registration and corporate taxpayer number 518208311, hereinafter referred to as “AOSHENG” or “we”, is committed to protecting the privacy of users of its website [website address] (“Website”) and to processing the personal data entrusted to it in strict compliance with Regulation (EU) 2016/679 (“GDPR”), Law no. 58/2019 of 8 August, Law no. 59/2019 of 8 August, Law no. 41/2004 of 18 August, and other applicable legislation in Portugal.

1. Data Controller and Data Protection Officer

AOSHENG is the entity responsible for processing personal data collected through the Website.
For any questions regarding this Policy or the exercise of your rights, you may contact our Data Protection Officer (“DPO”) at:

Address: Rua 10, nº 8, Zona Industrial de Varziela, 4480-061 ÁRVORE
E-mail: [DPO e-mail]
Phone: 

2. Personal Data Collected, Purposes and Legal Grounds

Data Category	Examples	Purpose of Processing	Legal Basis (art. 6 GDPR)
Identification and contact data	name, email address, phone	Management of contact requests, quotes or support	Consent (Art. 6(1)(a)) or legitimate interest where applicable (Art. 6(1)(f))
Contractual data	Tax ID, billing address, order details	Contract performance, invoicing and customer management	Contract performance or pre-contractual steps (Art. 6(1)(b))
Browsing data	IP addresses, server logs, cookies, online identifiers	Website operation, fraud prevention, statistics, improving user experience	Legitimate interest (Art. 6(1)(f)) and compliance with Law 41/2004 (consent for non-essential cookies)
Marketing data	email address, preferences	Sending newsletters, commercial communications	Consent (Art. 6(1)(a))

No special categories of personal data as defined in Art. 9 GDPR will be processed without your explicit consent or another valid legal basis.

3. Recipients and Transfers

Your data may be shared, only to the strictly necessary extent, with:

· Service providers (hosting, system maintenance, marketing and logistics), contractually bound to AOSHENG under data processing agreements that ensure adequate security and confidentiality guarantees;

· Public authorities and judicial entities, when required by law or valid order of a competent authority.

Any international transfer of data to countries outside the European Economic Area will be previously ensured through a European Commission adequacy decision or appropriate safeguards (e.g. standard contractual clauses).

4. Retention Periods

Personal data will be retained only for the strictly necessary period – as a rule:

· Contractual and billing data: 10 years after the last transaction, to comply with tax and accounting obligations.

· Contact and marketing data: until consent is withdrawn or 2 years after the last relevant interaction.

· Logs and cookies: as per the cookie policy below or each cookie’s settings.

After the retention period, data will be deleted or irreversibly anonymized.

5. Data Security

AOSHENG implements appropriate technical and organizational measures, including, among others, encryption, pseudonymization, access controls based on the principle of least privilege, firewalls, encrypted backups, and periodic procedures for testing, verifying, and evaluating the effectiveness of security measures.

6. Data Subject Rights

Under Arts. 15 to 22 GDPR, you have the right to:

· Access your personal data;

· Rectify inaccurate or incomplete data;

· Erase data (“right to be forgotten”) where applicable;

· Restrict processing;

· Port data to another controller;

· Object to processing at any time, on grounds relating to your particular situation;

· Withdraw consent, without affecting the lawfulness of processing based on consent before its withdrawal.

You may exercise these rights free of charge by written request to the DPO. If you believe the processing violates applicable law, you also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

7. Cookies

The Website uses cookies strictly necessary for its operation, as well as analytical and personalization cookies only with your prior consent, in accordance with Law 41/2004. Details on categories, purposes, durations, and preference management are set out in our Cookie Policy available on the Website.

8. Changes to the Privacy Policy

AOSHENG reserves the right to amend this Policy at any time. Any changes will be published on the Website, indicating the date of update. Regular consultation of this document is recommended.