Privacy Policy
GLOBAL ANDAIMES, LDA respects the privacy of visitors, customers and professional contacts. This policy explains transparently what personal data we may process through this website, for which purposes, on what basis and what rights individuals have. Where the GDPR applies to a processing activity, this policy must be read together with mandatory applicable rules.
1. Controller and contact
The controller is GLOBAL ANDAIMES, LDA, SmartPool Building, Av. Samora Machel, 1215, Unit C, Ground Floor, N4, Matola City, Maputo, Mozambique. Privacy questions and rights requests may be sent to geral@globalandaimes.co.mz.
Where a customer, partner or service provider determines the purposes and means of a specific processing activity, that entity may act as an independent or joint controller, as applicable and as reflected in the relevant arrangements.
2. Personal data processed
Depending on the interaction, we may process identification and contact data such as name, company, email address, phone number and project location; request data such as requested service, dimensions, timing, technical description and sector; and content the user chooses to submit voluntarily.
The quotation form allows up to four attachments in JPEG, PNG, WEBP or PDF format, with a 5 MB limit per file. Do not submit health, biometric, credentials, identity documents or other special-category data through this website unless strictly necessary and agreed in advance.
When you visit the website, basic technical data needed for operation and security may be processed, such as IP address, browser, device, access date and time and pages viewed, depending on the actual server, hosting and tool configuration.
3. Data sources
We receive data directly from users when they complete the contact form, request a quotation, submit attachments, contact us by email, phone or WhatsApp, or interact with our public pages. We may receive data from a company or colleague contacting us on behalf of a project, in which case the person sharing the data must have authority to do so.
4. Purposes and legal bases
We process data to answer enquiries and contact requests, prepare quotations, clarify technical requirements, arrange meetings and take pre-contractual steps requested by the individual. Where a contract exists, we may process data necessary to perform it and manage the business relationship.
We may process data to comply with legal, accounting, tax, safety or authority requirements. We may also process data to secure the website, prevent fraud, defend rights and improve services where necessary for our legitimate interests and those interests are not overridden by the individual’s rights and freedoms.
Where a purpose requires consent, it will be requested freely, specifically, in an informed and unambiguous manner. Consent may be withdrawn at any time without affecting the lawfulness of earlier processing. Submitting an enquiry or quotation request is not, by itself, a subscription to marketing communications; additional electronic marketing will rely on an appropriate legal basis and, where required, consent.
5. Providing data
Fields needed to answer a request are identified in the relevant form. Providing them is voluntary, but without them we may be unable to respond, prepare a quotation or provide the requested service. Users should ensure that the information supplied is accurate, current and relates to a person who authorised its submission.
6. Recipients and service providers
Data may be accessed by authorised employees and service providers who need it to manage a request, prepare a proposal, provide a service, maintain the website or comply with legal obligations. The website uses, among others, Web3Forms to transmit form data to the company email and Cloudinary to receive and temporarily store quotation attachments; attachment links are included in the message sent to the company. Where the visitor accepts analytics cookies, the website also uses Google Analytics to measure website usage in aggregate.
The website may also include embedded services or links to third parties, such as Google Maps and social networks. Opening embedded content or using an external link may subject the user to those third parties’ policies and technical processing. We do not control external entities’ privacy practices and recommend reviewing their policies.
7. International transfers
Some technology providers may store or access data outside Mozambique or the European Economic Area. Where the GDPR applies, such transfers must use a mechanism provided by applicable law, such as an adequacy decision, standard contractual clauses, applicable binding rules or another appropriate legal safeguard. Current information about providers and relevant safeguards may be requested at geral@globalandaimes.co.mz.
Information about the countries, subprocessors and safeguards used by Web3Forms, Cloudinary, hosting, email and other active services may be requested from the company.
8. Retention
We retain data only for as long as necessary for the purposes for which it was collected, managing a business relationship, complying with legal, accounting or tax obligations, or defending rights. Enquiries with no contractual relationship will be deleted or anonymised when no longer necessary, according to applicable periods and internal procedures.
Quotation attachments should be removed from storage services when no longer needed. Concrete periods should be defined by the company considering the request type, existence of a contract, legal periods and security requirements.
9. Individual rights
Within applicable legal limits, individuals may request confirmation of processing, access, rectification of inaccurate data, erasure, restriction, portability of data they provided and objection to processing based on legitimate interests. Where processing is based on consent, consent may be withdrawn at any time. To exercise a right, contact geral@globalandaimes.co.mz; we may request reasonable information to verify identity and protect data from unauthorised disclosure.
Individuals may also lodge a complaint with a competent supervisory authority, particularly in the EU Member State of their habitual residence, place of work or the place of the alleged infringement where the GDPR applies. The relevant authority must be confirmed according to the individual’s situation and applicable law.
10. Security, automated decisions and children
We apply reasonable technical and organisational measures to protect data against unauthorised access, loss, alteration or disclosure. No transmission or storage system is completely secure; if a legally reportable breach occurs, we will take the measures required by applicable law.
This website is not intended to make decisions based solely on automated processing that produce legal or similarly significant effects on visitors. We do not knowingly seek to collect children’s data; requests relating to professional services should be made by adults or authorised representatives.
11. Cookies and updates
The use of cookies and similar technologies is described in the Cookie Notice available in the website footer. This policy may be updated to reflect legal, operational or technological changes. The version published on this page states the date of the latest update.