Privacy Policy

This policy explains which personal data we process when you visit addaptsoft.com or contact us, why, on which legal basis, for how long, with whom we share it, and which rights you have under the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and Portuguese Law 58/2019. Version 2.0, effective as of 24 October 2026. It replaces the version of 15 June 2021.

1. CONTROLLER

Addaptsoft, Lda, Av. Elias Garcia, n.º 141 B, 1050-099 Lisboa, Portugal. Contact for everything related to personal data: info@addapt.cloud. We have not appointed a data protection officer, because the law does not require it for our activity.

2. WHAT WE PROCESS, WHY, AND FOR HOW LONG

Processing	Data	Purpose	Legal basis	Retention
Demo request form	First name, last name, email address, date and time of the request, page from which it was sent	To answer your request, schedule the demo and prepare a possible proposal	Steps prior to a contract, at your request (article 6(1)(b) GDPR)	Until the request is closed and at most 12 months after the last contact. If a contract follows, the data moves to the customer file.
Email you send us	Your email address, name and whatever you write	To reply and keep track of the conversation	Legitimate interest in answering who contacts us (article 6(1)(f)); contract steps when applicable (article 6(1)(b))	While the conversation is useful and at most 2 years after the last message, unless a legal obligation requires longer
Serving the site	IP address, browser type, requested page, date and time, referring page	To deliver the pages, keep the site available and protect it against attacks and abuse	Legitimate interest in a secure and working website (article 6(1)(f))	Processed in transit by Cloudflare; we keep no server logs of our own. Cloudflare keeps security logs for a short period under its own policy.
Visit statistics (Google Analytics 4)	Pages viewed, approximate location (country, city), device and browser type, pseudonymous visitor identifier in the cookies `_ga` and `_ga_*`. IP addresses are not stored.	To know how many people visit the site and which pages they read, and to improve it	Your consent, given in the cookie banner (article 6(1)(a)). You can withdraw it at any time, see the Cookie Policy.	At most 14 months in Google Analytics; cookies up to 2 years
Google Maps embed	IP address and Google's own cookies, when the map loads on the home page	To show where our office is	Legitimate interest (article 6(1)(f))	Under Google's policy; we receive nothing

The form asks only for the data needed to answer you. Providing it is voluntary, but without an email address we cannot reply. We do not ask for special categories of data (for example health or political opinions); please do not write that kind of information in the form or in emails.

3. WHO RECEIVES THE DATA

We do not sell personal data and we do not share it for marketing. The data is handled by these processors, on our instructions and under data processing agreements:

Processor	Service	Location and transfers
Cloudflare, Inc.	Hosting of the site, protection of the traffic, relay of the form emails	Data centres in the European Union and worldwide; Cloudflare is certified under the EU-US Data Privacy Framework and uses the EU standard contractual clauses
Google Ireland Limited / Google LLC	Google Analytics 4, Google Maps, and the mailbox that receives the form	European Union and United States; Google is certified under the EU-US Data Privacy Framework and uses the EU standard contractual clauses

Public authorities receive data only when the law obliges us to hand it over.

4. INTERNATIONAL TRANSFERS

Some processing by Cloudflare and Google can happen in the United States. The transfers rest on the European Commission adequacy decision of 10 July 2023 for the EU-US Data Privacy Framework, to which both companies adhere, and on the standard contractual clauses as a fallback (article 46(2)(c) GDPR).

5. YOUR RIGHTS

You have the right to access your data and get a copy, to rectify it, to erase it, to restrict its processing, to receive it in a portable format, to object to processing based on legitimate interest, and to withdraw a consent at any time without affecting the lawfulness of the processing done before. To exercise a right, write to info@addapt.cloud. We may ask you to confirm your identity. We answer within one month, extendable by two more months in complex cases, and we tell you if that happens. You also have the right to lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa, www.cnpd.pt.

6. AUTOMATED DECISIONS AND PROFILING

We take no decisions about you by automated means and we do not build profiles of visitors.

7. CHILDREN

The site is addressed to companies and professionals. We do not knowingly collect data of people under 16. If you believe a minor has sent us data, write to us and we delete it.

8. SECURITY

The site is served only over HTTPS. The form is protected against automated submissions and the data is not stored in any database of the site: it travels by email to a mailbox with two-factor authentication, accessible only to the people who handle demo requests. If a data breach occurs that may affect you, we inform you and the CNPD within the legal deadlines.

9. LINKS TO OTHER SITES

Links to external websites lead to sites we do not operate. Their privacy policies apply there.

10. CHANGES

We update this policy when the processing changes. The version and date at the top indicate the text in force. Substantial changes are announced on this page.