Privacy Policy

Last updated: 19 April 2026

This notice explains what personal data Moinho Novo processes, why, and what rights you have under the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.

Who we are

Moinho Novo is a coworking space operated from R. Heliodoro Salgado 59B, 2830-335 Barreiro, Portugal. We are the data controller for the personal data described below. You can reach us at the address above or via the details on our Find Us page.

What we collect and why

• Account data — when you sign in, we receive your name, email address, and a unique user identifier from our authentication provider. We use this to identify you, provide access to the workspace, and send transactional messages about your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
• Billing data — if you purchase a pass or subscription, we store invoice details (name, address, tax ID where applicable, amounts, VAT). Legal basis: legal obligation (tax and accounting law, Art. 6(1)(c) GDPR).
• Usage data — we keep minimal records of workspace usage (e.g. check-ins, desk bookings) needed to operate the service. Legal basis: performance of a contract.
• Support messages — if you contact us, we keep the message and our reply so we can follow up. Legal basis: legitimate interest in responding to enquiries (Art. 6(1)(f) GDPR).

We do not sell your personal data and we do not use it for advertising.

Cookies and similar technologies

The public site uses one strictly-necessary cookie during the sign-in flow. The Find Us page can load a Google Maps embed, which is a third-party service that may set its own cookies. Nothing non-essential loads without your consent. For full details, see our Cookie Policy.

Who we share data with

• Authentication provider — our identity provider (OIDC) handles sign-in on our behalf.
• Payment and invoicing providers — we use Revolut for payment processing and InvoiceXpress for invoicing. They process only the data needed to take payment and issue a legally compliant invoice.
• Hosting — our site and backend run on standard cloud infrastructure in the EU or equivalent regions.

Each of these acts as a processor or separate controller under a written agreement. We do not transfer your data outside the EEA except under safeguards permitted by GDPR.

How long we keep data

We keep account and usage data for as long as you have an active relationship with us, and for a limited period afterwards to handle disputes and legal claims. Invoices and related accounting records are kept for the period required by Portuguese tax law (currently 10 years).

Your rights

Under GDPR you have the right to:

• access the personal data we hold about you;
• ask us to correct or delete it;
• ask us to restrict or object to processing;
• data portability, where applicable;
• withdraw consent at any time, where we rely on consent.

To exercise any of these rights, contact us using the details on the Find Us page. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

Changes to this policy

If we make material changes we will update the date above and, where appropriate, notify you by email or through the site.