PRIVACY POLICY – iBlow.eu

Last updated: 24 April 2026

1. Introduction

This Privacy Policy explains how iBlow Europe, a registered trademark and business unit managed by Contemporary Constellation Lda, operating the website iBlow.eu, collects, uses, stores, shares and protects personal data in connection with:

  • the use of the iBlow.eu website;
  • contact requests and demonstration requests;
  • requests for proposals or commercial information;
  • newsletter subscriptions and communications;
  • the provision of services;
  • the management of pre-contractual and contractual relationships.

iBlow.eu is committed to handling personal data lawfully, fairly, transparently and only to the extent necessary for clearly defined purposes.

2. Data Controller

The controller responsible for the processing of personal data under this Privacy Policy is:

Contemporary Constellation Lda
Rua Mouzinho da Silveira, 32
1250-167 Lisboa
Portugal

Email: [email protected]
Telephone: +351 210 987 308

For any privacy or data protection matter, you may contact us using the details above.

3. Scope of this Policy

This Privacy Policy applies to personal data processed in connection with:

  • browsing and interacting with the iBlow.eu website;
  • completing contact forms;
  • submitting demonstration requests;
  • requesting proposals, information or follow-up contact;
  • subscribing to newsletters or updates;
  • exchanging communications by email, telephone or other professional channels;
  • the provision of services by iBlow.eu;
  • compliance with legal, regulatory and contractual obligations.

This Policy does not apply to third-party websites, platforms or services that may be linked from our website.

4. Categories of Personal Data We May Process

Depending on the specific purpose, we may process the following categories of personal data:

4.1 Contact and identification data

  • name;
  • email address;
  • telephone number;
  • company name;
  • job title or role.

4.2 Professional and commercial data

  • information relating to the organisation you represent;
  • information relevant to a proposal, demonstration or commercial request;
  • information about your business needs or compliance context voluntarily shared with us.

4.3 Communication data

  • the content of contact messages, emails or form submissions;
  • records of interactions with us;
  • communications relating to support, demonstrations, proposals or follow-up.

4.4 Technical and usage data

  • IP address;
  • browser type;
  • operating system;
  • device information;
  • date and time of access;
  • pages visited;
  • referral source;
  • technical identifiers;
  • consent and cookie preference records;
  • website interaction data.

4.5 Contractual, administrative and billing data

Where applicable, we may process data required for proposals, service delivery, invoicing, accounting, payment administration and legal compliance.

5. How Personal Data Is Collected

Personal data may be collected:

  • directly from you when you contact us or complete a form;
  • when you request a demonstration, proposal or commercial contact;
  • when you subscribe to our newsletter or communications;
  • automatically through the technical operation of the website, including cookies, logs and similar technologies;
  • in the context of pre-contractual, contractual or service-related interactions.

6. Purposes of Processing and Legal Bases

We process personal data only where there is a legitimate purpose and a valid legal basis.

6.1 Contact management and responses to enquiries

We process personal data to respond to messages, requests for information and general enquiries.

Legal basis: pre-contractual steps, measures requested by the data subject, and where applicable our legitimate interest in managing business contacts.

6.2 Demonstration requests and commercial follow-up

We process personal data to organise demonstrations, schedule meetings, assess your needs and follow up on your interest in our services.

Legal basis: pre-contractual steps and legitimate interest.

6.3 Proposal preparation and pre-contractual relationship management

We process personal data to prepare tailored proposals and evaluate commercial requests.

Legal basis: pre-contractual steps and legitimate interest.

6.4 Service provision and contractual relationship management

We process personal data where necessary to provide services, manage customer relationships and perform contractual obligations.

Legal basis: performance of a contract.

6.5 Legal, regulatory, tax, accounting and administrative compliance

We process personal data where necessary to comply with applicable laws and legal obligations.

Legal basis: compliance with a legal obligation.

6.6 Internal administration, support and protection of legal rights

We process personal data for internal administration, support, audit, risk management and the establishment, exercise or defence of legal claims.

Legal basis: legitimate interest and, where applicable, compliance with a legal obligation.

6.7 Website security, integrity and technical operation

We process technical data to maintain the security, stability and proper functioning of the website and associated systems.

Legal basis: legitimate interest.

6.8 Analytics and website improvement

We process website usage data to understand how the website is used and to improve performance, content and usability.

Legal basis: legitimate interest for strictly necessary measurement activities and, where legally required, consent for analytics or similar non-essential technologies.

6.9 Newsletters, informational communications and marketing

Where applicable, we may process personal data to send newsletters, updates, invitations or similar communications.

Legal basis: consent where required, or legitimate interest where there is a prior relevant relationship and the applicable legal conditions are met, always subject to the right to object.

7. Mandatory or Optional Nature of Data

Providing certain personal data may be necessary for us to:

  • respond to your request;
  • schedule a demonstration;
  • prepare a proposal;
  • provide a service;
  • enter into or perform a contract;
  • comply with legal obligations.

If required data is not provided, we may be unable to respond, provide the requested service or proceed with the relevant relationship.

8. Recipients and Data Sharing

Personal data may be shared, to the extent strictly necessary, with the following categories of recipients:

  • hosting, infrastructure and technical support providers;
  • website security, maintenance and monitoring providers;
  • form, communication and CRM-related service providers;
  • newsletter or communication platform providers;
  • website analytics, consent management and optimisation providers;
  • legal, accounting, audit, insurance and financial advisers or providers, where necessary;
  • competent public authorities, regulators, courts or law enforcement bodies where required by law.

Where we use processors or service providers, we seek to ensure that appropriate contractual, technical and organisational safeguards are in place.

9. International Data Transfers

As a rule, we seek to process personal data within the European Economic Area. However, some technical service providers, embedded services, communications tools, analytics tools or other technology providers may involve processing or access from outside the EEA.

Where international transfers occur, we will seek to ensure that they are carried out using valid safeguards, such as:

  • an adequacy decision adopted by the European Commission;
  • Standard Contractual Clauses;
  • or another lawful transfer mechanism under applicable data protection law.

Additional technical or organisational safeguards may also be applied where appropriate.

10. Data Retention

Personal data is kept only for as long as necessary for the purposes for which it was collected, subject to legal retention requirements and the need to retain information for the exercise or defence of legal rights.

As a general rule:

10.1 Contact requests and non-contracted interactions

Up to 12 months after the last relevant interaction, unless a longer period is justified by law or legitimate need.

10.2 Proposal requests and pre-contractual interactions

Up to 24 months after the last relevant interaction, unless the relationship progresses into a contractual one or a different retention period is justified.

10.3 Contractual and service-related data

For the duration of the contractual relationship and afterwards for the period necessary to comply with legal, regulatory, accounting, tax or legal defence requirements.

10.4 Billing and accounting data

For the legally required retention period.

10.5 Newsletter and marketing communications data

Until consent is withdrawn, you object, or after a maximum of 24 months of inactivity, without prejudice to retaining minimal suppression data to ensure you are not contacted again where applicable.

10.6 Technical logs and security records

Up to 12 months, unless a longer period is necessary for incident investigation, fraud prevention, information security or legal defence.

10.7 Consent records

For the period necessary to demonstrate the collection, management and update of consent preferences.

At the end of the applicable retention period, data will be deleted, anonymised or securely blocked where legally appropriate.

11. Cookies and Similar Technologies

The website uses cookies and similar technologies for essential operation, security, consent management, user preferences, analytics and certain embedded or third-party functionalities.

Please read our Cookie Policy for more detailed information about the types of cookies used, their purposes and how to manage your preferences.

12. Data Security

We adopt appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, unauthorised access or any other unlawful processing.

These measures may include, depending on the context:

  • access controls;
  • role-based permissions;
  • technical security controls;
  • system monitoring;
  • updates and maintenance;
  • backup procedures;
  • internal confidentiality and organisational measures.

However, no electronic system can be guaranteed to be completely secure. Users should also adopt appropriate security practices when using devices and communication channels.

13. Data Subject Rights

Under applicable law, data subjects may have the right to:

  • access their personal data;
  • request rectification;
  • request erasure;
  • request restriction of processing;
  • object to processing;
  • request portability where applicable;
  • withdraw consent where processing is based on consent;
  • not be subject to decisions based solely on automated processing, where applicable.

Withdrawal of consent does not affect the lawfulness of processing carried out before that withdrawal.

14. How to Exercise Your Rights

You may exercise your rights by contacting us at:

Email: [email protected]

Please identify your request as clearly as possible. Where necessary, we may request additional information to verify your identity and protect personal data against unauthorised disclosure.

We will handle requests without undue delay and, in principle, within the time limits required by applicable law.

15. Complaints

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with the competent supervisory authority. In Portugal, this is the Comissão Nacional de Proteção de Dados (CNPD).

16. Automated Decision-Making and Profiling

As a rule, we do not carry out solely automated decision-making, including profiling, that produces legal effects concerning you or similarly significantly affects you.

If that changes for any specific processing activity, additional information will be provided where legally required.

17. Children’s Data

The website and services of iBlow.eu are not specifically directed at children. We do not knowingly collect children’s personal data without an appropriate lawful basis.

If you believe that a child’s data has been provided to us improperly, please contact us so that we can assess the situation and take appropriate steps.

18. Third-Party Websites

The website may contain links to third-party websites, services or platforms. This Privacy Policy does not apply to those third parties, and we recommend reviewing their privacy information before providing any personal data.

19. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, regulatory, technical, operational or business changes.

Any relevant updates will be published on this page together with the date of the latest update.

20. Contact

For any question about this Privacy Policy or the processing of personal data, please contact:

Contemporary Constellation Lda
Rua Mouzinho da Silveira, 32
1250-167 Lisboa
Portugal

Email: [email protected]
Telephone: +351 210 987 308