Privacy Policy

Last updated: July 2026

This Privacy Policy explains how obiWAN Conobi Lda (“obiWAN”, “we”, “us” or “our”) collects, uses and protects your personal data when you visit our website obiwan-conobi.com (the “Website”) or otherwise interact with us. We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Portuguese data protection law.

1. Data Controller

The controller responsible for your personal data is:

obiWAN Conobi Lda
Rua 28 de Janeiro, 350, Candal Park, CC-12
4400-335 Vila Nova de Gaia, Portugal
Email: connected@obiwan-conobi.com
Phone: (+351) 227 662 711

2. Personal Data We Collect

We only collect the personal data we need to respond to you and to operate our Website:

Contact form

When you contact us through a form on the Website, we collect the information you provide, such as your name, email address, company name, phone number (if provided) and the content of your message.

If you subscribe to our newsletter, we collect your email address (and name, if provided) in order to send you news, offers and updates about obiWAN.

Website usage, cookies and analytics

When you browse the Website we may automatically collect technical data such as your IP address, browser type, device information, pages visited and time spent, through cookies and similar technologies. See section 6 (Cookies) for details.

3. How and Why We Use Your Data

We process your personal data for the following purposes and on the following legal bases under the GDPR:

To respond to your enquiries submitted through the contact form — legal basis: our legitimate interest in answering requests and, where applicable, taking steps at your request prior to entering into a contract.
To send our newsletter — legal basis: your consent, which you may withdraw at any time.
To operate, secure and improve the Website and understand how it is used — legal basis: your consent (for non-essential/analytics cookies) and our legitimate interest in a functioning, secure Website (for essential cookies).
To comply with legal obligations to which we are subject.

4. Sharing Your Data

We do not sell your personal data. We may share it with trusted third parties who process data on our behalf and under our instructions, such as our website hosting provider, email and newsletter service provider, and analytics provider. These processors are bound by contract to protect your data and use it only for the services they provide to us. We may also disclose data where required by law or by a competent authority.

5. International Transfers

Some of our service providers (for example, analytics or email tools) may process data outside the European Economic Area. Where this happens, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses or an adequacy decision, so that your data remains protected.

6. Cookies and Analytics

Cookies are small files stored on your device. We use:

Essential cookies, required for the Website to function correctly.
Analytics/performance cookies (e.g., Google Analytics), which help us understand how visitors use the Website. These are only used with your consent.

You can accept or refuse non-essential cookies through our cookie banner and manage or delete cookies at any time in your browser settings. Refusing non-essential cookies will not affect the core functionality of the Website.

7. Data Retention

We keep your personal data only for as long as necessary for the purposes described above. Contact enquiries are kept for the time needed to handle your request and for a reasonable period afterwards; newsletter data is kept until you unsubscribe; and analytics data is retained according to the settings of our analytics provider. When data is no longer needed, we securely delete or anonymise it.

8. Your Rights

Under the GDPR you have the right to:

Access the personal data we hold about you;
Request rectification of inaccurate or incomplete data;
Request erasure of your data (“right to be forgotten”);
Restrict or object to the processing of your data;
Request the portability of your data;
Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at connected@obiwan-conobi.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration or disclosure, including encrypted communications and access controls. However, no transmission over the internet can be guaranteed to be completely secure.

10. Children

The Website is not directed to children and we do not knowingly collect personal data from children under the age of 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available on this page, with the “Last updated” date at the top reflecting the latest revision.

12. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us at connected@obiwan-conobi.com or by post at the address in section 1.