Privacy Policy

    Last updated: 7 October 2026

    1. Who is the data controller

    The controller of your personal data is Magos Irrigation Systems, S.A., Portuguese tax number (NIPC) 502710381, with registered office at Estrada Nacional 118, km 47.65, 2120-066 Salvaterra de Magos, Portugal ("Magos").

    For any question about your personal data, or to exercise your rights, contact us by email at magos@magos.pt or by post at the address above.

    Magos has not appointed a Data Protection Officer.

    2. What data we collect and why

    a) Quote and contact requests. When you fill in the form on the website, we collect your name, email, phone number, district or an indication of an international market, company (optional), subject (optional), product of interest and message, as well as the page of the website from which the request was sent. We use this data to reply to your request and, where applicable, to prepare and send a quote. The fields marked * are needed for us to reply to your request: without them, we cannot follow it up.

    Legal basis: steps taken at your request prior to entering into a contract (Article 6(1)(b) of the General Data Protection Regulation, GDPR).

    b) Unsolicited applications. The form on the Careers page does not store any data on the website: it opens your email program with a message addressed to magos@magos.pt, which is only sent if you send it. We process the data you send us to assess your application.

    Legal basis: steps taken at your request prior to entering into a contract and, if you would like us to keep your application for future opportunities, your consent.

    c) Usage statistics (only with your consent). If you accept analytics cookies, we use Google Analytics 4 to find out which pages are visited and which actions are taken on the website (for example, sending a request, without your name, email, phone number or message). You can decline or withdraw your consent at any time. Details in our Cookie Policy.

    Legal basis: consent (Article 6(1)(a) GDPR and Portuguese Law 41/2004).

    d) Operation and security of the website. To show you the website, our hosting providers process technical data such as your IP address, browser type and the pages requested.

    Legal basis: legitimate interest in providing a secure and working website.

    e) Third-party content. Some pages include YouTube videos, in privacy-enhanced mode (youtube-nocookie.com), which start automatically, muted, when they come into view. At that point, YouTube receives technical data from your browser (such as your IP address) and may store data on your device. The contact page includes an OpenStreetMap map; when it loads, your browser connects to OpenStreetMap's servers, which receive your IP address and technical browser data.

    Legal basis: legitimate interest in presenting our work and the location of our premises.

    f) Automated decisions. We do not make automated decisions or carry out profiling with your data.

    3. Who we share the data with

    The data is processed by Magos and, on its behalf, by the following providers (processors):

    • Hosting and database provider (servers in the European Union) — request form and restricted area;
    • Website hosting and delivery provider — operation and security of the website;
    • Email sending service — internal notices of new requests and emails from the restricted area;
    • Google Ireland Limited — Google Analytics and Google Tag Manager (only with consent), YouTube, and translation of website texts (no customer data);
    • Website development and maintenance service provider — with access to the data for that purpose only;
    • Company email service provider — Magos mailboxes.

    We do not sell your data or use it for advertising.

    4. Transfers outside the European Economic Area

    Some of these providers, such as Google, are companies based in the United States or with access to the data from there. In those cases, the transfer relies on the adequacy decision for the EU-U.S. Data Privacy Framework, where the provider is certified, or on standard contractual clauses approved by the European Commission. OpenStreetMap is operated from the United Kingdom, which benefits from an adequacy decision.

    5. How long we keep the data

    • Quote and contact requests — 2 years after the last contact, if they do not lead to a contract; if they do, for the legal period applicable to the business relationship and tax obligations;
    • Applications — until the end of the recruitment process, or 12 months with your consent;
    • Internal email notices and sending logs — 12 months;
    • Cookie choice — 6 months in your browser; Google Analytics cookies: up to 2 years; data in Google Analytics: 14 months.

    6. Your rights

    Under the GDPR, you can request access to your data, rectification, erasure, restriction of processing and portability, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time, without affecting the processing carried out before. To exercise these rights, use the contact given in section 1. We will reply within one month.

    You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

    7. Security

    Form data can only be read by authorised Magos users, with access controlled by roles. Communications with the website are encrypted (HTTPS).

    8. Changes

    We may update this policy. The date of the last update is shown at the top.