Privacy Policy
ndBIM Virtual Building, Lda. | Updated: June 2026
Identity of the Data Controller
ndBIM Virtual Building, Lda.
Vila Nova de Famalicão, Portugal
Tax Identification Number: PT510806287
Contact: clients@ndbim.eu
Personal Data Collected
As part of our marketing activities, including through lead generation forms on platforms such as LinkedIn, we collect the following personal data:
- Full name
- Business email address
- Company name and job title
- Telephone number, when provided voluntarily
- Industry sector
Purposes and Legal Basis for Processing
The data collected is processed for the following purposes:
| Purpose | Legal basis |
| Responding to requests for information and product demonstrations | Taking pre-contractual steps (Art. 6, paragraph 1, point b), of the GDPR) |
| Sending commercial communications about our products and services | Consent (Art. 6, paragraph 1, point a), of the GDPR) |
| Managing the sales funnel and CRM | Legitimate interest (Art. 6, paragraph 1, point f), of the GDPR) |
| Service improvement and market analysis | Legitimate interest (Art. 6, paragraph 1, point f), of the GDPR) |
Data Retention
Personal data is retained only for as long as strictly necessary to fulfil the purposes for which it was collected:
- Unconverted leads: a maximum of 24 months after the last interaction.
Active clients: throughout the contractual relationship and for a period of 5 years after its termination, in compliance with applicable legal obligations.
Data Sharing with Third Parties
Your data may be shared with:
- Technology service providers that support the operation of our platform, such as CRM, cloud and email marketing providers, bound by data processing agreements that comply with the GDPR.
- LinkedIn Ireland Unlimited Company, as the platform through which lead generation forms are made available, subject to its own privacy policy.
- Public authorities, when required by law.
We do not sell, rent or otherwise transfer your personal data to third parties for their own commercial purposes.
International Data Transfers
When your data is transferred to countries outside the European Economic Area, we ensure that such transfers are carried out on the basis of appropriate legal mechanisms, including Standard Contractual Clauses approved by the European Commission.
Your Rights
Under the GDPR, you have the right to:
- Access — obtain confirmation as to whether your data is being processed and access it.
- Rectification — correct inaccurate or incomplete data.
- Erasure — request the deletion of your data (“right to be forgotten”).
- Restriction — restrict processing in certain circumstances.
- Data portability — receive your data in a structured, machine-readable format.
- Objection — object to processing based on legitimate interest or for direct marketing purposes.
- Withdrawal of consent — at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, contact us at: clients@ndbim.eu
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), at www.cnpd.pt
Security
We adopt appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or accidental disclosure, including encryption in transit and at rest, access controls and audit logs.
Cookies and Tracking Technologies
Our website may use cookies and similar technologies for analytics purposes and to improve the browsing experience. For detailed information, please consult our Cookie Policy.
Changes to this Policy
We reserve the right to update this Privacy Policy. In the event of material changes, registered users will be notified by email or through a prominent notice on our website. The “Last updated” date at the top of this document always reflects the version in force.