Privacy policy
This page explains what personal data we collect through the site, what it is used for and what you can do about it. It is written to be read.
Who handles your data
Elementar & Sustentável, Unipessoal Lda
Rua Heróis de França, 211, 2.º Esq.
4450-158 Matosinhos, Portugal
Tax and company number 508367891
geral@l2m.com.pt
We have not appointed a Data Protection Officer, as none of the situations in which the law requires one apply to us. Questions about personal data are handled at the address above.
What we collect
The site has two forms, and that is how data reaches us:
- Contact form: name, email address, subject and message.
- Application form: name, email address, the area you are applying for and your CV in PDF.
There is no user registration, account, newsletter or members' area. Beyond these two forms and the usage statistics described below, the site collects nothing about the people who visit it.
What you write in the forms is sent by email to L2M and is not stored on the site. The CV travels as an attachment to that email and the file is deleted from the server straight afterwards, without passing through the site's media library.
On what legal basis
- Contact enquiries: steps taken at your request prior to entering into a contract, or our legitimate interest in replying to people who approach us (GDPR, Article 6(1)(b) and (f)).
- Applications: steps taken at your request prior to entering into a contract (Article 6(1)(b)).
- Usage statistics: your consent (Article 6(1)(a)), asked for in the cookie notice and withdrawable at any time.
For how long
- Contact messages: while the matter is open and for up to two years after the last contact.
- Applications: one year, unless you allow us to keep them longer for future openings.
- Usage statistics: fourteen months.
If you ask us to delete your data before these periods, we will, provided no legal retention obligation applies.
Who we share it with
We do not sell, trade or pass on personal data to third parties for commercial purposes.
Two categories of provider process data on our behalf and on our instructions: the provider hosting the site and our email, where the messages you send us are stored, and Google Ireland Limited, for usage statistics, and only if you have consented.
Transfers outside the European Union
Usage statistics may involve processing by Google LLC in the United States. That transfer relies on the European Commission's adequacy decision for the EU-US Data Privacy Framework and, in the alternative, on standard contractual clauses approved by the Commission. If you decline analytics cookies, no transfer takes place.
Cookies
The site uses as few as it can.
| Cookie | What it does | Lifetime |
|---|---|---|
l2m_consentimento |
Stores your cookie choice, so we do not ask again on every page. | 180 days |
_ga, _ga_8ENY26LEJN |
Google Analytics. They tell visits apart so we can count how many people visit and which pages they read. | 2 years |
Analytics cookies are only written after you accept them. Until you decide, or if you decline, nothing is written to your device beyond the cookie that records that refusal. You can change your mind at any time through the Cookie preferences link in the footer of any page.
The site's fonts are hosted on our own server. There are no requests to external font, map or video services, and no social media buttons that load outside content. The links to our social media pages are ordinary links: they only leave the site if you click them.
Your rights
You may request access to your data, its rectification, its erasure, the restriction of processing and its portability, and you may object to processing based on legitimate interest. Where processing relies on your consent, you may withdraw it whenever you wish, without affecting what was done before.
To exercise any of these rights, write to geral@l2m.com.pt. We reply within one month.
If you believe we have not handled the matter as we should, you may complain to the Portuguese Data Protection Authority, at www.cnpd.pt.
Security
Connections to the site are encrypted. The forms carry protections against automated submissions and access to the site's administration is limited to named accounts.
Changes
If this policy changes, the new version is published on this page with an updated date.
Last updated: 17 September 2026.