This policy applies to nm3diberica.com, its forms, communications, commercial and support activities, events, newsletter and other interactions with NM3D Ibérica in Portugal, Spain and other markets. It should be read together with the Cookie Policy and the specific notices shown on each form.
Data controller
NM3D Ibérica – Sistemas de Metrologia Industrial, Lda
NIF/VAT: PT514076682
Rua 25 de Abril n.º 6, 4920-250 Vila Nova de Cerveira, Portugal
Email: sac@nm3diberica.com · Tel.: +351 304 500 653
The contact point above handles all privacy matters. If a data protection officer is formally appointed in the future, this policy will be updated with their details.
Data we process and its sources
- Identity and contact: name, company, role, business address, email, telephone, country and language.
- Commercial and contractual: requests, opportunities, quotations, orders, billing, products, equipment and customer or supplier relationship data.
- Technical and support: tickets, messages, files, part images, diagnostics, interventions, projects and records required to provide the service.
- Marketing and events: subscriptions, preferences, participation, communication interactions and evidence of consent or objection.
- Browsing and technical: IP, device, browser, pages viewed, security logs, cookies and preferences, according to your choices.
- Sources: you, your organisation, customers or partners naming you as a contact, previous interactions and lawfully public professional sources such as corporate websites, registers, associations, news and professional profiles.
Purposes and legal bases
| Purpose | Main data | Legal basis |
|---|---|---|
| Answer enquiries, prepare quotations and demonstrations | Identity, contact, company and technical requirements | Pre-contractual steps, contract and legitimate interest in responding |
| Manage sales, purchases, projects, support and warranties | Contractual, technical, communication and billing data | Performance of a contract and legal obligations |
| CRM B2B and proportionate professional prospecting | Company, role, professional contact, source and potential interest | Legitimate interest balanced against individual rights; immediate opt-out available |
| NM3D Insights, campaigns and updates | Email, language, preferences and interaction | Consent; or an existing relationship for similar services where permitted by law, always with free opt-out |
| Events, webinars and training | Registration, company, attendance and preferences | Contract, pre-contractual steps and consent for optional communications |
| Analytics, advertising and non-essential personalisation | Cookies, IP, device and browsing | Consent managed through the cookie panel |
| Security, abuse prevention and legal defence | Logs, IP, incidents and evidence | Legitimate interest and legal obligations |
| Recruitment | CV, experience, contact and assessment | Pre-contractual steps and consent for future opportunities |
Where we rely on legitimate interests, you may request information about the balancing test. Consent may be withdrawn at any time without affecting prior lawful processing.
Iris, automation and artificial intelligence
Iris is NM3D's virtual assistant. It may guide visitors, identify needs and structure requests for commercial or technical teams. Conversations, files and required metadata may be recorded in NM3D systems to respond and follow up.
No solely automated decisions are made that produce legal effects or similarly significantly affect an individual. Automated responses may contain errors and should be validated before any technical, commercial or contractual decision.
Recipients and processors
Data is disclosed only where necessary and under confidentiality and data-protection obligations:
- authorised NM3D staff and collaborators;
- hosting, Odoo/CRM, IT maintenance, cybersecurity and backup providers;
- email and newsletter providers, including Brevo infrastructure where applicable;
- analytics, advertising, maps, video, social-network and reCAPTCHA providers, only when the service is active and a legal basis exists;
- manufacturers, carriers, installers or technical partners where required to respond or perform the contract;
- advisers, insurers, auditors, banks and authorities where legally required or legitimately necessary.
NM3D does not sell personal data.
International transfers
Providers and data centres in the European Economic Area are preferred. Where a provider processes data outside the EEA, NM3D requires an adequacy decision, European Commission standard contractual clauses or another valid safeguard, with supplementary measures where necessary. You may request information about the applicable safeguard.
Retention periods
- Enquiries and quotations without a contract: normally up to 24 months after the last relevant interaction.
- Customers, suppliers, projects and support: during the relationship and thereafter for applicable warranty, limitation, tax, accounting or legal periods.
- CRM B2B: up to 24 months without relevant interaction, unless there is an active relationship, legal duty or prior objection retained on a suppression list.
- Newsletter: until consent is withdrawn or an objection is made; evidence of consent and the minimum data needed to prevent further contact are retained.
- Recruitment: during the process and up to 12 months thereafter; up to 24 months for future roles only with consent.
- Security and technical logs: for the proportionate period required for diagnostics, security and evidence, extended in case of an incident or dispute.
At the end of the period, data is erased, anonymised or restricted where law requires retention for legal claims.
Your rights
You may request access, rectification, erasure, restriction, portability and objection free of charge; withdraw consent; and not be subject to solely automated decisions with legal or similarly significant effects. You may object to direct marketing at any time without giving reasons.
Write to sac@nm3diberica.com with the subject “Data protection”. We may request additional information strictly necessary to confirm your identity. We generally respond within one month; this may be extended by up to two further months for complex requests, and we will inform you.
Right to lodge a complaint
You may complain to the supervisory authority of your residence, workplace or the place of the alleged infringement, including CNPD (Portugal) or AEPD (España).
Security, children and user responsibilities
NM3D applies technical and organisational measures appropriate to risk, including access control, role-based permissions, logging, backups, updates, communication safeguards and incident management. No system is infallible; if you identify a vulnerability or misdirected disclosure, contact us immediately.
NM3D services are primarily intended for organisations and professionals and are not directed at children. Anyone providing third-party data must be authorised to do so and provide this information to them where appropriate.
Legal framework and updates
This policy is interpreted under the GDPR and the applicable national rules in Portugal and Spain. The links below point to official sources.
The policy may be updated when processing, providers or law change. Material changes will be communicated by appropriate means. The date shown at the top identifies the current version.
Questions about your data?
Write to us. We want this information to be understandable and your rights easy to exercise.