Privacy policy

The controller is [PREENCHER: denominação social], tax number [PREENCHER: NIF / NIPC], with registered office at [PREENCHER: morada da sede] (“Raygon Devs”, “we”). For any privacy question or request, write to [PREENCHER: email para questões de privacidade].

• When you contact us (by email or through the contact form): your name, email address, the content of your message and any other details you choose to share, such as your company or phone number.
• When you browse the site: the technical data needed to deliver and protect it — IP address, browser type, pages requested, date and time — recorded in server and security logs.
• Only if you accept analytics cookies: data about how you use the site (pages visited, device, browser and approximate location derived from the IP address), collected through Google Analytics. See the cookie policy.

We don't ask for sensitive data, and the site is not intended for children under 16.

• Replying to your request and preparing proposals — steps taken at your request before entering into a contract (Article 6(1)(b) GDPR) or our legitimate interest in answering the messages we receive (Article 6(1)(f)).
• Providing the services you hire — performance of the contract (Article 6(1)(b)).
• Keeping the site working and secure, including preventing spam and abuse of the contact form — our legitimate interest (Article 6(1)(f)).
• Analytics — your consent (Article 6(1)(a)), which you can withdraw at any time in the cookie settings.
• Meeting legal obligations, such as tax and accounting — Article 6(1)(c).

We don't sell your data, we don't use it for automated decisions or profiling, and we don't send you marketing without your consent.

We only share data with service providers that process it on our behalf, under contract and only for the purposes above:

• Cloudflare, Inc. — delivery and protection of the site, and the anti-spam check of the contact form (Turnstile).
• [PREENCHER: fornecedor do serviço de email] — sending and receiving email.
• Google Ireland Limited and Google LLC — website analytics (Google Analytics, through Google Tag Manager), only if you accept analytics cookies.

We may also disclose data to public authorities when the law requires it.

Some of these providers may process data outside the European Economic Area, notably in the United States. When that happens, the transfer relies on an adequacy decision of the European Commission (such as the EU-US Data Privacy Framework, for certified companies) or on the Commission's standard contractual clauses.

• Contact requests that don't lead to a contract: [PREENCHER: prazo de conservação dos pedidos de contacto].
• Data related to services provided: for the duration of the contract and afterwards for the periods required by law (for example, 10 years for accounting and tax records).
• Server and security logs: [PREENCHER: prazo de conservação dos registos do servidor].
• Analytics data: 14 months.

You can ask us, at any time and free of charge, to:

• access the personal data we hold about you;
• correct data that is inaccurate or incomplete;
• erase your data, when there is no longer a reason to keep it;
• restrict its processing, or object to processing based on our legitimate interest;
• receive the data you gave us in a structured, commonly used format (portability);
• withdraw your consent, without affecting the processing carried out before.

To exercise these rights, write to [PREENCHER: email para questões de privacidade]. We reply within one month. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), or with the authority of the country where you live.

We use appropriate technical and organizational measures to protect your data, including encrypted connections (HTTPS) and restricted access. No transmission over the internet is completely secure, but we work to keep the risk low.

We may update this policy when our practices or the law change. The date at the top shows the current version.