Privacy Policy
(GOLDSTAR – brand owned by MFN, Lda.)
This Privacy Policy explains how MFN, Lda. (“MFN”, “we”) processes the personal data of individuals who use the web services associated with the GOLDSTAR brand, including mfn.pt and tracking.mfn.pt, as well as other related digital platforms.
MFN, Lda. respects your privacy and is committed to processing your personal data lawfully, fairly, and transparently, in accordance with Regulation (EU) 2016/679 (GDPR) and all applicable legislation.
1. Who is the data controller?
The controller responsible for processing your personal data is:
MFN, Lda.
Head office: Praça das Palmeiras Lt 115, R/C Dto, 3500-392 Viseu, Portugal
General contact email: geral@mfn.pt
Whenever this policy references “GOLDSTAR” or “we”, it refers to MFN, Lda. as the owner of the GOLDSTAR brand and the entity responsible for its digital channels.
2. What are personal data?
“Personal data” refers to any information relating to an identified or identifiable natural person, such as: name, address, email, telephone number, tax identification number, location data, electronic identifiers, or other elements that allow a person to be identified.
3. What data do we collect and how?
We collect personal data through different channels, namely:
3.1. Website contact forms
When you fill out a contact form (for example, on the homepage or the “Contact” page), we may collect:
Name
Email address
Telephone number
Contact subject
Message you send us
These data are used solely to respond to your information requests.
3.2. Newsletter subscription
When you subscribe to our newsletter, we collect:
Email address
Your name (if provided)
We use this information to send marketing and promotional communications related to the GOLDSTAR brand, campaigns, updates and similar content.
3.3. Quote requests at tracking.mfn.pt/orcamentos/novo
When you submit a quote request through our online quotation system, we collect a broader set of data, including:
Identification and contact data
Name
Email
Telephone
Tax ID (if provided)
Address, postal code, city
Project/product data
Desired model and variant
Customisation options (finishes, handles, glass, screen prints, accessories, etc.)
Approximate measurements and/or indication that measurements will be provided later
Delivery/installation information (type of property, floor, presence of lift, etc.)
Photos of the installation space (if uploaded)
Additional notes/observations
Any associated promotional offers (e.g., selection of welcome gift)
These data are used to analyse the request, prepare and present the quote, clarify doubts, send confirmations and automatic notifications, and contact the customer by email or phone whenever necessary.
If the quote progresses, an associated order is created and the data become part of the order management process.
3.4. Order management and archiving
When an order is placed, the quote and order data:
Are used to track the status of the order
Serve as the basis for issuing commercial and tax documents
May generate automatic status updates, warnings, and messages
Are archived after the order is completed, together with all technical documentation and files (measurements, drawings, photos, etc.) for the purposes of:
Product guarantees
Future technical analysis
Responding to later customer enquiries
3.5. 3D simulator and product configurations
We provide a 3D simulator that allows users to view models and customisations. The selected configurations may be used to pre-fill a quote request if the user chooses to proceed to the quotation form.
3.6. Cookies, pixels, and analytics tools
Our systems use cookies and similar technologies to:
Store navigation preferences
Measure audience and statistics (e.g., Google Analytics)
Support advertising and remarketing campaigns (e.g., Meta Pixel, Google Ads)
Improve site performance (performance plugins)
The information collected may include: IP address, approximate location, device type, browser used, pages visited, time spent, clicks and interactions.
Additional details can be found in the Cookie Policy, which should be read in conjunction with this Privacy Policy.
4. For what purposes do we use your data and what is the legal basis?
We process your personal data for the following purposes and on the following legal grounds:
Responding to contact requests and information enquiries
Purpose: to reply to messages submitted through the contact forms.
Legal basis: legitimate interest in responding to enquiries and managing pre-contractual relations.
Managing quote requests
Purpose: to analyse the request, prepare the quote, clarify questions, send confirmations and updates.
Legal basis: pre-contractual steps at the request of the data subject.
Order management and after-sales service
Purpose: to process orders, organise production, delivery and installation, comply with legal obligations (e.g., tax), provide warranty support and analyse future technical matters related to the supplied product.
Legal basis: contract performance, legal obligation, and legitimate interest in maintaining historical and technical records.
Sending newsletters and marketing communications
Purpose: to send promotional and commercial information about GOLDSTAR products and services.
Legal basis: consent of the data subject, which may be withdrawn at any time.
Statistical analysis and website improvement
Purpose: to measure audience, improve content, optimise performance, and adjust advertising campaigns.
Legal basis: consent (when required for non-essential cookies) and, in some cases, legitimate interest in improving services.
Compliance with legal obligations
Purpose: to comply with tax, accounting, data protection and other applicable obligations.
Legal basis: compliance with legal obligations applicable to MFN.
Management of complaints, rights requests, and disputes
Purpose: to respond to complaints, manage legal or administrative proceedings.
Legal basis: legitimate interest and compliance with legal obligations.
5. Sharing of personal data
We may share your personal data with:
Service providers acting on behalf of MFN (e.g., hosting companies, IT providers, email services, marketing services, transport/installation companies). These providers only process data according to our instructions and under agreements that ensure confidentiality and security.
Analytics and advertising platforms, such as Google Analytics, Google Ads, and Meta (Facebook/Instagram), when you use our websites and consent to such technologies.
Public authorities and official entities, when required by law or necessary to defend the rights of MFN, our employees, or customers.
We do not sell your personal data to third parties.
6. International data transfers
Some of our service providers (such as Google and Meta) may be located outside the European Economic Area. In such cases, we ensure that transfers are carried out under adequate legal safeguards, such as EU-approved Standard Contractual Clauses or adequacy decisions.
7. How long do we retain your data?
We retain your personal data only for the period necessary to fulfil the purposes for which they were collected, namely:
General enquiries: for the time necessary to handle the request, typically up to 12 months after the last contact.
Newsletter: until you withdraw your consent (e.g., via the “unsubscribe” option).
Quote requests: for the period necessary to analyse and potentially execute the order; if the quote is not accepted, we keep the data for a reasonable period for commercial management (e.g., up to 24 months), unless you object.
Completed orders and technical archive: for the legally required period for tax and commercial documents and, additionally, for the time necessary to ensure product guarantees, manage complaints, and provide future technical support, in accordance with the long lifecycle of the products.
Cookies and analytics data: according to the periods specified in the Cookie Policy or defined by each provider (e.g., Google Analytics).
Where no legal obligations or legitimate interests justify retention, your data will be deleted or anonymised.
8. Your rights as a data subject
Under applicable law, you have the following rights:
Right of access: to obtain confirmation of whether we process your data and access them.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your data in the situations provided by law.
Right to restriction: to request limitation of processing in certain circumstances.
Right to portability: to receive the data you provided in a structured, commonly used, machine-readable format and transmit it to another controller.
Right to object: to object to processing based on legitimate interests or for direct marketing.
Right to withdraw consent: where processing is based on consent, you may withdraw it at any time; withdrawal does not affect the lawfulness of prior processing.
To exercise any of these rights, you may contact us via geral@mfn.pt or by post at the address indicated in section 1.
You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt if you believe your rights have not been respected.
9. Data security
We implement appropriate technical and organisational measures to protect your personal data against destruction, loss, alteration, disclosure or unauthorised access, including:
use of secure protocols (HTTPS)
access controls
regular backups
use of service providers with robust security measures
Despite these efforts, no information system is completely invulnerable, and we cannot guarantee absolute protection against malicious attacks.
10. Minors
Our websites and services are not intended for individuals under 16 years of age. We do not knowingly collect data from minors. If we become aware that data from a minor has been collected without valid parental or guardian consent, we will delete it.
11. Links to other websites
Our websites may contain links to third-party sites (e.g., social networks, suppliers or partners). We are not responsible for the privacy practices of those sites. We recommend that you read their respective privacy policies before providing any personal data.
12. Updates to this Privacy Policy
We may update this Privacy Policy whenever necessary to reflect legal changes or updates in how we process personal data. The updated version will always be published on our websites with the corresponding effective date.
Last updated: [26/11/2025]
13. Contact
If you have any questions about this Privacy Policy, about how we process your personal data, or if you wish to exercise your rights, you may contact us via:
Email: geral@mfn.pt
Post: MFN, Lda., Praça das Palmeiras Lt 115, R/C Dto, 3500-392 Viseu, Portugal
