Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is:

2. Personal Data We Collect

We may collect and process the following categories of personal data:

• Identification data (e.g. name, company name)
• Contact data (e.g. email address, phone number)
• Professional information (e.g. job title, company details)
• Communication data (e.g. emails, messages, project-related communications)
• Technical data (e.g. IP address, browser type, device information)
• Billing and payment-related data (where applicable)

We do not knowingly collect personal data from children under the age of 16.

3. How We Collect Data

Personal data is collected when you:

• Contact us through our website or other communication channels
• Request a proposal or engage our services
• Enter into a contract with us
• Communicate with us by email or other means
• Use our website (via cookies or similar technologies)

4. Purposes and Legal Bases for Processing

We process personal data only where permitted by law, based on one or more of the following legal grounds:

• Contract performance – to provide and manage our Services
• Legal obligation – to comply with accounting, tax, or regulatory requirements
• Legitimate interests – to operate our business, improve our Services, and ensure security
• Consent – where explicitly obtained (e.g. marketing communications)

Purposes include:

• Responding to inquiries and communications
• Providing and managing Services
• Contract management and invoicing
• Improving our website and Services
• Ensuring security and preventing fraud

5. Data Sharing and Disclosure

We may share personal data with:

• Trusted service providers (e.g. hosting, email, accounting, payment processors)
• Professional advisors (e.g. legal, tax, auditors)
• Public authorities where required by law

All third parties are required to process personal data in compliance with applicable data protection laws.

6. International Data Transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as adequacy decisions or Standard Contractual Clauses approved by the European Commission.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

Retention periods are determined based on:

• The nature of the data
• Legal obligations
• Contractual requirements

8. Data Subject Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate or incomplete data
• Request erasure ("right to be forgotten")
• Restrict or object to processing
• Data portability
• Withdraw consent at any time (where processing is based on consent)
• Lodge a complaint with a supervisory authority

In Portugal, the competent authority is the Comissão Nacional de Proteção de Dados (CNPD).

9. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or disclosure.

10. Cookies

Our website may use cookies or similar technologies to ensure proper functionality and improve user experience. Where required by law, we obtain consent before placing non-essential cookies.

A separate Cookie Policy may apply.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website and will apply from the date of publication.

12. Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us through our official contact channels.