Privacy policy

This policy covers the Consolo website. It is deliberately short, because this site collects very little. How we handle data inside a client's console is a separate and much more detailed matter — that is covered on the security and data page and in the Data Processing Agreement attached to an engagement.

Who is responsible

The controller for data collected through this website is Bashara Hinnawi, Rua Joaquim Agostinho 70, São Domingos de Rana, Portugal. You can reach us at consolo@bashara.pt.

What we collect, and why

Audit request form

Your name, work email, company, company size, and whatever you choose to tell us about your systems and your operational pain. We use it to reply, to prepare your audit, and to follow up about the engagement. Legal basis: your request, and our legitimate interest in responding to a business enquiry.

Server logs

Our host records standard request data, including IP address, for security and diagnostics. Legal basis: legitimate interest in operating a secure service.

Analytics

No analytics or tracking is currently loaded on this site at all. If that changes we will update this page first, and only ever use a cookieless tool.

Cookies

This site sets no marketing or analytics cookies. The only cookie that may be set is the anti-forgery token required to submit the audit form securely, which is strictly necessary and expires with your session. See the cookie notice.

Who else sees it

We do not sell your details and we do not share them for advertising. We use a small number of service providers to operate the site and respond to enquiries — hosting, email delivery, and our CRM. Each is bound by a contract that limits them to processing on our instructions. A current list is available on request.

How long we keep it

Enquiries are kept for up to 24 months from our last contact with you, then deleted, unless they have become part of a client relationship with its own retention terms. Server logs are kept for a short operational period by our host.

Where it is processed

Within the EU/EEA wherever possible. Where a provider processes data outside it, we rely on the European Commission's standard contractual clauses.

Your rights

You can ask us for a copy of what we hold, to correct it, to delete it, to restrict how we use it, or to object to our use of it. Write to consolo@bashara.pt and we will respond within 30 days. If you are unhappy with our response you can complain to your national data protection authority.

Changes

If this policy changes materially we will update the date at the top and, where the change affects you, tell you directly.

Back to home