Privacy Policy

CristeMath, Lda. (hereinafter «CristeMath»), based in Portugal, is the data controller for personal data collected through the website cristemath.pt and its forms, under Regulation (EU) 2016/679 (GDPR) and Portuguese Law no. 58/2019 of 8 August.

Contact: geral@cristemath.pt

Driver application form (TVDE): full name, phone, e-mail (optional), district of residence and TVDE certification status. Purpose: profile assessment and onboarding contact. Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR).

Partner/investor form: full name, e-mail, phone (optional), fleet size and message. Purpose: commercial assessment and follow-up. Legal basis: legitimate interests (Art. 6(1)(f) GDPR).

Insurance quote form: full name, e-mail (optional), phone (optional), age, years holding a licence, vehicle registration, brand, model, year, claims history. Purpose: obtaining a quote from partner insurers. Legal basis: pre-contractual steps.

General contact form: name, e-mail, phone (optional) and message. Purpose: responding to your enquiry. Legal basis: legitimate interests.

Data is kept only as long as necessary to fulfil the stated purpose, unless a legal obligation requires longer retention. Unsuccessful applicants' data is deleted within 12 months of first contact, unless consent to retain it in a talent pool is given.

CristeMath does not sell or transfer personal data to third parties for marketing purposes. Data may be shared with: partner insurers (only in the context of a quote request); technical infrastructure providers (servers, e-mail) bound by data processing agreements under Art. 28 GDPR; competent authorities when legally required.

The website is hosted on servers located in the European Union or in countries with an adequate level of protection recognised by the European Commission. Where a sub-processor requires a transfer to a third country, the safeguards set out in Art. 46 GDPR (including Standard Contractual Clauses) are applied.

Under the GDPR you have the right to: access your data (Art. 15); rectify inaccurate data (Art. 16); erase your data («right to be forgotten», Art. 17); restrict processing (Art. 18); data portability (Art. 20); object to processing (Art. 21). To exercise any of these rights, send a written request to geral@cristemath.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD — www.cnpd.pt).

CristeMath implements appropriate technical and organisational measures to protect data against unauthorised access, accidental loss or destruction, including HTTPS transmission and restricted database access controls.

We reserve the right to update this Policy. In the event of material changes, we will notify you through the website. Continued use of the site after publication of the changes constitutes acceptance.