Privacy Policy - Personal Data – BSpirt.

In accordance with the General Data Protection Regulation and current national legislation, our privacy policy has been reviewed and updated.

1. BSpirt, with the email address geral@bspirt.com, guarantees the integrity and full compliance with its obligations under current national legislation as well as the General Data Protection Regulation (EU 2016/679), in force as of 25 May 2018.

2. This statement is intended to inform users of the Personal Data Protection Policy adopted by the website https://bspirt.com/. It will apply should users choose to fill out any form on the aforementioned website in which personal data is collected.

3. BSpirt reserves the right to amend this Privacy Policy in accordance with legislative or self-regulatory requirements, so users are advised to review it regularly.

4. The personal data collected, specifically name, email address, and phone number (optional), given with consent, voluntarily and with full awareness, will only be used by BSpirt to present products and promotional offers via email or phone. Your rights to information, rectification, objection, and cancellation are guaranteed, simply by requesting this in writing to the general address referred to in point 1. Upon making this cancellation request, the data will be deleted, and will only be retained if there is a legal or contractual obligation to do so. This data will be kept and stored for the period provided for by law.

5. BSpirt will adopt the necessary technical and organizational measures to ensure the security of personal data and prevent its alteration, loss, or unauthorized access, taking into account the state of technology, in accordance with the provisions of the GDPR. However, BSpirt cannot guarantee the absolute infallibility of the Internet and, therefore, a data breach through fraudulent access by third parties.

6. Users are responsible for the accuracy of the data provided.

7. BSpirt does not share your personal data with external entities or third parties.

8. Users may exercise their rights of access, cancellation, rectification, objection, and portability by writing to the general address referred to in point 1, identifying themselves and specifying their request. To do so, they must provide a copy of their national ID card (B.I.) or an equivalent identification document, duly redacted and marked “copy”.

9. Personal data of minors under 18 years of age may only be obtained with the proper consent of parents or guardians, and BSpirt will never use such data for purposes inappropriate to their age. BSpirt [gives/grants] parents or those responsible for the minor the possibility of exercising their rights of access, cancellation, rectification, objection, and portability regarding the data of their children or wards.

Lisbon, September 2026.