Privacy Policy

Contact form

When the contact form is used to request information or to arrange a meeting, the following may be collected:

• Name
• Email address
• Phone number, where requested
• Company and role, where requested
• The content of the message
• Any other information you choose to provide

Sensitive personal data, confidential information or third-party data that is not necessary for the contact should not be sent through the form.

Technical and usage data

While the website is being used, certain technical data may be collected, namely:

• IP address
• Device type
• Operating system
• Browser used
• Date and time of access
• Pages visited
• Source of the visit
• Approximate geographic location
• Information about the operation and security of the website

Part of this information may be collected through cookies or similar technologies.

Replying to requests and arranging meetings

The data sent through the form is used to:

• Review and reply to the request
• Arrange and prepare the requested meeting
• Contact the user about the matter raised
• Follow up on the request after the first reply or meeting

This processing is based on:

• Steps taken at the user's request prior to entering into a contract, where the contact relates to a possible provision of services
• The legitimate interest in replying to and managing the remaining requests received through the website

The data is not used for newsletters, marketing campaigns or communications unrelated to the request submitted.

Operation and security of the website

Some technical data may be processed in order to:

• Provide and maintain the website
• Detect and correct errors
• Prevent improper access or abusive use
• Ensure the security of the infrastructure
• Investigate technical or security incidents

This processing is based on the legitimate interest in ensuring the operation and security of the website.

Analysis of website usage

Subject to consent, the website uses Google Analytics to understand, statistically, how it is used. This analysis may include:

• Number of visits
• General source of traffic
• Pages viewed
• Duration of visits
• Device and browser type
• Approximate geographic location
• Interactions with the website

Google Analytics is only activated after analytics cookies are accepted. Consent can be withdrawn at any time in the Cookie preferences.

Google Analytics is provided by Google Ireland Limited.

For access from the European Union, Google Analytics uses the IP address to determine an approximate location, deleting it before the data is recorded in the service's systems.

Using Google Analytics may involve data being processed by Google group companies located outside the European Economic Area.

Where international transfers take place, they are carried out through the mechanisms provided for in applicable law, including adequacy decisions and standard contractual clauses approved by the European Commission.

More detailed information about the cookies used by Google Analytics is available in the Cookie Policy.

Personal data may be processed by the following service providers:

• The website hosting and storage provider, with infrastructure located in Frankfurt, Germany
• Google Ireland Limited, as the provider of Google Analytics
• Maintenance or technical support providers, where access is necessary
• Public authorities, courts or other bodies, where disclosure is legally required

Providers processing data on the controller's behalf must do so in accordance with the instructions received and only for the purposes contracted.

Data sent through the form is kept for as long as necessary to reply to and follow up on the request, up to a maximum of 12 months after the last relevant interaction.

Technical logs relating to the security and operation of the website are kept for a maximum of 90 days, except where they need to be kept longer to investigate an incident.

User-level and event-level data collected by Google Analytics is kept for 2 months.

Aggregated statistical reports produced by Google Analytics may be kept for longer; under normal conditions they do not allow visitors to be identified directly.

Data may be kept for longer where necessary to comply with a legal obligation, exercise a right, or respond to judicial or administrative proceedings.

The website and the data received through the form are hosted on infrastructure located in Frankfurt, Germany, within the European Economic Area.

Using Google Analytics may involve transfers to, or access from, countries outside the European Economic Area.

Additional information about the applicable safeguards can be requested at info@fikto.pt.

Under applicable law, data subjects may:

• Request access to their personal data
• Request the correction of inaccurate or incomplete data
• Request the erasure of the data, where applicable
• Request the restriction of processing
• Object to processing based on legitimate interest
• Receive the data in a structured format, where applicable
• Withdraw consent relating to Google Analytics
• Lodge a complaint with the supervisory authority

Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

To exercise these rights or ask a question about the processing of personal data, please get in touch:

Email: info@fikto.pt

The request should clearly state which right is being exercised.

Where there are reasonable doubts about the identity of the person making the request, additional information strictly necessary to confirm their identity may be requested.

Every data subject has the right to lodge a complaint with the Portuguese supervisory authority: Comissão Nacional de Proteção de Dados — CNPD.

Lodging a complaint does not prevent Fikto from being contacted first to try to resolve the matter directly.

Appropriate technical and organisational measures are in place to protect the data against unauthorised access, alteration, disclosure, loss or destruction.

Access to data collected through the website is limited to the people and providers who need that information for the purposes described in this policy.

This policy may be updated where there are changes:

• To how the website works
• To the tools used
• To the service providers
• To the purposes of the processing
• To applicable law
• To the entity responsible for Fikto's activity

The date of the last update is shown at the start of the policy.