Privacy with clarity
Your data, handled with care.
We explain what we collect, why, for how long, and how you can exercise your rights.
We only use the data necessary to reply, prepare proposals, provide services, and comply with legal obligations. Personal data are used only for the purposes described here. The right to erasure applies within applicable legal limits.
1. Who is responsible for your data
The data controller is Afazeres Curiosos - Unip, Lda, NIPC 515862789, with registered office at Rua Professor Egas Moniz, n.ΒΊ 10, 1.ΒΊ Dto., 2640-477 Mafra, Portugal.
For privacy matters, write to geral@afazerescuriosos.pt or call +351 21 145 1077.
2. What data we may process
Depending on the channel and service, we may process identification and contact details, information about the company you represent, inquiry content, technical documents provided, billing information, communication logs, and technical website usage data.
Please avoid including special categories of personal data in open text fields or documents. If received unnecessarily, we will restrict processing and delete them when permitted by law and the need to preserve evidence.
3. Purposes and lawful bases
| Purpose | Lawful basis |
|---|---|
| Responding to contacts and assessing requests for proposals or technical consulting | Pre-contractual measures requested by the data subject and, where applicable, legitimate interest in responding and protecting business operations. |
| Preparing proposals, delivering services, and monitoring ongoing projects | Contract performance or pre-contractual measures. |
| Billing, maintaining records, and fulfilling statutory duties | Legal obligation. |
| Protecting systems, preventing abuse, and preserving evidence | Legitimate interest, balanced against data subjects' rights. |
| Commercial communications not strictly necessary for service delivery | Consent, where required, revocable at any time. |
| Non-essential cookies and individualized measurement | Consent via the cookie preferences panel. |
Where a field is mandatory, we indicate this requirement and the consequences of leaving it blank. Without minimum necessary details, we may be unable to respond or prepare a proposal.
4. Digital assistants and decisions
We may use digital assistants to guide navigation, organise information, transcribe voice requests, identify missing elements, and prepare drafts. These aids do not, by themselves, make decisions with legal or similarly significant effects on you. Proposals, prices, acceptance of work, and technical deliverables follow the applicable validation rules.
A call or voice message is only recorded when this has been communicated in advance and there is an appropriate basis. Any transcription needed to respond may be processed for the period specified in this document.
5. With whom data may be shared
We share data only to the extent necessary with hosting, email, messaging, calendar, billing, payment processing, automation, technical support, and language model providers, as well as professional advisors and public authorities when required by law.
Service providers act under contract and appropriate instructions. The operational list must be reviewed whenever an integration is activated or removed.
6. Processing outside the European Economic Area
Certain service providers may process data outside the European Economic Area. In such cases, we rely on an applicable adequacy decision, Standard Contractual Clauses, or other legally valid safeguards. You may request information regarding the safeguard used via our privacy contact.
7. How long data is retained
| Data | Retention criteria |
|---|---|
| Inquiries that do not lead to a contractual relationship | For the time necessary to reply and follow up, with periodic review and deletion when no longer needed. |
| Proposals, contracts, and technical files | During performance and for the periods necessary to defend rights and meet applicable responsibilities. |
| Invoices and tax-relevant documents | 10 years, or another special period required by law. |
| Security logs | For the period strictly necessary for incident detection, investigation, and evidence preservation. |
| Cookies | For the period indicated in the preferences panel and cookie schedule. |
8. Your rights
You may request access, rectification, erasure, restriction of processing, portability, or object to processing, depending on the processing involved and subject to legal limits. Where processing is based on consent, you may withdraw it without affecting previous processing.
We generally respond within one month. This period may be extended by a further two months for complex or numerous requests, with the reasons communicated. We may request information necessary to confirm your identity.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD).
9. Security
We implement technical and organisational measures appropriate to the risk, including encrypted connections, access controls, backups, monitoring, and email protection. Every system carries some residual risk; we review the measures and act when we detect an incident.
11. Updates and contact
We may update this policy when services, suppliers, or legal requirements change. The current version indicates the update date, and significant changes will be highlighted.
Questions or requests: geral@afazerescuriosos.pt.