Privacy Policy

SBS Bioenergy Trading, Lda, trading as “SBS – Sustainable Bioenergy Suppliers” (“SBS”, “we”, “us”), respects your privacy and is committed to protecting personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Portuguese data protection law. This Privacy Policy explains what personal data we collect through this website and in the course of our business, why we process it, with whom we share it, and the rights you have. It is written for our business contacts: suppliers, buyers, traders, logistics providers, financial institutions, advisers and other professional counterparties.

The controller responsible for the processing described in this policy is:

SBS Bioenergy Trading, Lda
Trading as: SBS – Sustainable Bioenergy Suppliers
Country of registration: Portugal
Headquarters: Rua de Nevala n°30, 4200-415 Porto, Portugal
Office: Rua Conde Alto Mearim, n°1133 – 64, 4450-036 Matosinhos, Portugal

You can contact us about this policy or your personal data at manuel.cosme@sbsbioenergy.pt or nelson.biel@sbsbioenergy.pt, by phone on +351 225099388, or by post to Rua de Nevala n°30, 4200-415 Porto, Portugal.

We collect personal data only when you choose to provide it or when you interact with us in a business context. The main categories are:

Contact form data

When you submit an enquiry through our website we collect your name, company, job title, email address, telephone/WhatsApp number, country, the type of business you represent (e.g. feedstock producer, biodiesel or renewable fuel producer, trader, logistics partner, investor, bank), the subject of your enquiry and the commercial details you share with us — for example the feedstock or material involved, its location, volumes, current certification status, target application, required volumes, delivery country/port and the content of your message.

Email and business communication data

When you correspond with our team by email, phone or messaging channels, we process the information contained in that correspondence, including your contact details and the substance of your messages.

Website usage and analytics data

Our website may process standard technical information such as IP address, browser type, device type, referring pages and pages visited, for security, stability and performance purposes. This website does not currently use third-party analytics or advertising trackers; see our Cookie Policy for details.

Business contact and supplier/customer information

In the course of originating, qualifying and trading feedstock, we process the business contact details of supplier, buyer, logistics and financial counterparties, and transaction-related information provided to us in the course of a commercial relationship (for example documentation relating to a specific product, origin, batch or shipment).

We do not intentionally collect special categories of personal data, and we do not carry out automated decision-making or profiling.

• Responding to enquiries submitted through the website or received by other channels.
• Evaluating, developing and managing commercial relationships, including feedstock origination, qualification, trading and logistics coordination.
• Performing counterparty due diligence and compliance checks required by applicable law and our internal policies.
• Preparing, negotiating and performing contracts, and handling documentation related to products, quality and traceability.
• Keeping the website secure, stable and functioning.
• Complying with legal, regulatory, accounting and tax obligations.

Contractual necessity

Where processing is necessary to take steps at your request prior to entering a contract, or to perform a contract with you or the organisation you represent (GDPR Article 6(1)(b)) — for example handling an enquiry that leads to a transaction.

Legitimate interests

Where processing is necessary for our legitimate business interests and does not override your rights (GDPR Article 6(1)(f)) — for example responding to business enquiries, maintaining records of business contacts, keeping the website secure, and developing our supplier and customer network.

Consent

Where you have given clear consent (GDPR Article 6(1)(a)) — for example when you submit the enquiry form. You may withdraw consent at any time by contacting us; withdrawal does not affect processing carried out before that point.

Legal obligation

Where processing is necessary to comply with legal or regulatory obligations (GDPR Article 6(1)(c)) — for example accounting, tax, trade compliance and record-keeping requirements.

We keep personal data only for as long as necessary for the purposes described above:

• Enquiry data that does not develop into a business relationship: typically up to 24 months from our last interaction.
• Data related to an active commercial relationship: for the duration of the relationship and the applicable limitation periods.
• Transaction, accounting and tax records: for the periods required by Portuguese commercial and tax law.
• Compliance and due diligence records: for the period required by applicable law and our internal policies.

Data that is no longer needed is deleted or anonymised.

We do not sell or rent personal data. We share it only with:

• Service providers that host and operate this website, its database and email delivery on our behalf, under data protection agreements.
• Relevant members of the SBS team and, where necessary to progress an opportunity you raised, prospective counterparties (for example a producer whose material you wish to purchase, or a buyer whose requirements you wish to supply). We share only the information necessary for that purpose.
• Professional advisers, auditors, banks and public authorities, where required by law or to protect our rights.

SBS operates internationally, with business activity across Portugal, Brazil and other jurisdictions, and our service providers may process data outside the European Economic Area (EEA). Where personal data is transferred outside the EEA, we take steps to ensure an adequate level of protection, including reliance on the European Commission’s Standard Contractual Clauses, adequacy decisions or other appropriate safeguards.

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure. These include encrypted connections (HTTPS), access controls, limiting access to personnel who need it for the purposes described in this policy, and secure hosting of our systems.

You have the following rights in relation to your personal data:

• Right of access — to obtain confirmation of whether we process your data and a copy of it.
• Right to rectification — to have inaccurate or incomplete data corrected.
• Right to erasure — to have your data deleted in certain circumstances.
• Right to restriction of processing — to restrict processing in certain circumstances.
• Right to object — to object to processing based on legitimate interests, including for direct marketing.
• Right to data portability — to receive data you provided to us, where processing is based on consent or contract and carried out by automated means.
• Right to withdraw consent — at any time, where processing is based on consent.

To exercise any of these rights, contact us using the details in Section 3. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the supervisory authority in your country of residence.

This website uses strictly necessary cookies and similar technologies to operate and secure the site. Analytics and marketing cookies are not currently in use. For details of the cookies we use and how you can manage your preferences, see our Cookie Policy.

We may update this Privacy Policy from time to time to reflect changes in our practices, our systems or applicable law. The current version is always available on this page, and material changes will be highlighted here.