Data Controller
The data controller responsible for the personal data collected through this website is Aires-Soft, a technology company based in Portugal. You can contact us at: info@aires-soft.com
Personal Data We Collect
Through our contact form we collect: full name (required), email address (required), phone number (optional), project description or message (required).
Additionally, during browsing we may automatically collect: IP address, browser type and operating system, pages visited, time spent, and cookie data.
Purpose of Processing
The personal data collected will be processed for the following purposes:
- Responding to enquiries and requests submitted through the contact form
- Managing the commercial or pre-contractual relationship with the user
- Sending information related to our services when expressly requested
- Carrying out anonymised statistical analysis of website usage
- Complying with applicable legal obligations
Legal Basis for Processing
The processing of personal data is based on the following legal grounds under the GDPR (Regulation (EU) 2016/679):
Consent (art. 6.1.a GDPR): By submitting the contact form, the user freely, specifically, informedly and unambiguously accepts the processing of their data for the stated purposes.
Legitimate interest (art. 6.1.f GDPR): For the management and improvement of our services and handling commercial enquiries.
Performance of a contract (art. 6.1.b GDPR): When processing is necessary for the performance of a contract or pre-contractual measures at the user's request.
Legal obligation (art. 6.1.c GDPR): When required by applicable law.
Data Retention Period
Personal data will be retained for as long as necessary to fulfil the purpose for which it was collected:
- Contact and enquiry data will be retained for the duration of the commercial relationship or for a maximum period of 24 months from the last communication, unless the user requests deletion earlier.
- Billing and contractual data will be retained for the legally required period to fulfil tax and accounting obligations.
- Browsing and cookie data will be retained as set out in the cookies section of this policy.
Once the indicated periods have elapsed, data will be deleted or irreversibly anonymised.
Data Recipients
Personal data will not be transferred to third parties except when there is a legal obligation, when necessary for the provision of the contracted service, or when the user has given their express consent.
Data Processors
For the correct provision of our services, data may be processed by external providers acting as data processors under art. 28 GDPR, including web hosting, email delivery, and web traffic analytics services.
All providers have been selected ensuring compliance with current data protection regulations and have adequate security guarantees in place.
International Data Transfers
Should any of our providers be located outside the European Economic Area (EEA), international data transfers will be carried out with adequate safeguards, such as European Commission adequacy decisions, approved standard contractual clauses, or approved certifications and codes of conduct.
Your Rights
In accordance with the GDPR, you have the following rights:
Right of accessObtain confirmation of whether your personal data is being processed and, if so, access it.
Right to rectificationRequest correction of inaccurate or incomplete data.
Right to erasure ("right to be forgotten")Request deletion of your personal data when it is no longer necessary for the purpose for which it was collected.
Right to objectObject to the processing of your data for reasons related to your particular situation.
Right to restriction of processingRequest restriction of processing in certain circumstances provided for in the GDPR.
Right to data portabilityReceive your personal data in a structured, commonly used and machine-readable format and transmit it to another controller.
Right to withdraw consentAt any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Right not to be subject to automated decisionsIncluding profiling with legal or significant effects.
How to Exercise Your Rights
To exercise any of the above rights, you may contact Aires-Soft via the email address available on the website.
The request must include: full name, a copy of an identity document, indication of the right you wish to exercise, and an email or postal address for notifications.
The maximum period to resolve the request is one month from receipt, extendable by two additional months in cases of particular complexity, with prior notification to the user.
Data Security
Aires-Soft adopts the necessary technical and organisational measures to guarantee the security, integrity and confidentiality of personal data in accordance with the GDPR. These measures include: HTTPS/SSL encryption, restricted access controls to personal data, regular backups, and system monitoring and updates.
However, no security system is infallible. In the event of a security breach affecting personal data, the competent supervisory authority and, where applicable, the data subjects will be notified in accordance with articles 33 and 34 of the GDPR.
Cookie Policy
This website may use first-party and third-party cookies to improve the user experience, analyse web traffic and personalise content.
Types of cookies used:
- Technical/necessary cookies: enable browsing and the use of features
- Analytics cookies: collect usage information anonymously for statistical purposes
- Preference cookies: store user preferences to improve their experience
You can configure your browser to reject cookies or to be notified when they are installed. Disabling cookies may affect the functioning of the website.
Minors
This website and its services are not directed at persons under 16 years of age. Aires-Soft does not knowingly collect personal data from minors of that age.
If it is detected that data from a minor has been collected without the consent of their legal representative, it will be immediately deleted.
Links to Third-Party Websites
This website may contain links to third-party websites. This privacy policy applies exclusively to the Aires-Soft website. We are not responsible for the privacy policies or content of external websites.
Changes to This Policy
Aires-Soft reserves the right to modify this privacy policy at any time to adapt it to legislative developments, jurisprudential changes or changes in data processing practices.
Any modifications will be published on this same page with the date of the last update. In the event of substantial changes affecting the processing of data already collected, the user will be notified through available means.
Supervisory Authority
If you consider that your rights have not been duly addressed, you have the right to lodge a complaint with the competent data protection supervisory authority in the EU member state where you habitually reside, work, or where the alleged infringement took place.
In Portugal: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt
Contact
For any queries related to this privacy policy or the processing of personal data, you may contact Aires-Soft through the contact details available on the website: info@aires-soft.com