Privacy & Cookie Policy

1. Introduction

Atallutions ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, process, and protect your personal information when you visit our website or use our services.

This policy complies with the General Data Protection Regulation (GDPR), Portuguese Law No. 58/2019 (data protection), Portuguese Civil Code, and other applicable Portuguese and European data protection laws.

2. Data Controller Information

Atallutions

Email: hello@atallutions.com

For data protection inquiries, please contact our Data Protection Officer at: dpo@atallutions.com

3. What Personal Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide Directly

• Contact Information: Name, email address, phone number, company name, job title
• Communication Data: Messages sent through contact forms, consultation requests, support inquiries
• Business Information: Company size, industry sector, project requirements, budget information

3.2 Information Collected Automatically

• Technical Data: IP address, browser type and version, operating system, device information
• Usage Data: Pages visited, time spent on pages, click-through rates, website navigation patterns
• Cookies and Tracking Data: As detailed in our Cookie Policy

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR and Portuguese Law No. 58/2019:

• Consent: When you provide explicit consent (e.g., newsletter subscriptions, marketing communications)
• Contract Performance: To provide our IT services and fulfill contractual obligations
• Legitimate Interests: To improve our services, conduct business analysis, and protect our business interests
• Legal Obligation: To comply with applicable laws and regulations

5. How We Use Your Personal Data

We use your personal data for the following purposes:

5.1 Service Delivery

• Responding to your inquiries and consultation requests
• Providing IT services including web development, API integration, and SaaS solutions
• Managing client relationships and project communications
• Processing payments and invoicing

5.2 Business Operations

• Improving our website functionality and user experience
• Analyzing website usage to optimize our services
• Conducting market research and business development
• Maintaining security and preventing fraud

5.3 Marketing Communications (with consent)

In compliance with Portuguese Decree-Law No. 7/2004 (electronic communications privacy):

• Sending newsletters and service updates (with explicit consent)
• Providing information about new services and offerings
• Inviting you to webinars, events, or consultations
• Direct marketing via email or SMS (only with prior consent)

You can withdraw marketing consent at any time using unsubscribe links or contacting us directly.

6. Data Sharing and Disclosure

We may share your personal data in the following circumstances:

6.1 Service Providers

We work with trusted third-party service providers who assist us in:

• Website hosting and maintenance
• Email marketing services
• Payment processing
• Customer relationship management
• Analytics and website optimization

All service providers are contractually bound to protect your data and use it only for specified purposes.

6.2 Legal Requirements

We may disclose your data when required by law, court order, or to protect our legal rights and interests.

6.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

7. International Data Transfers

If we transfer your personal data outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses (SCCs)
• Binding Corporate Rules
• Certification schemes approved by supervisory authorities

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, in compliance with Portuguese Civil Code and Commercial Code requirements:

• Contact inquiries: 3 years from last contact
• Client data: Duration of contract plus 10 years for Portuguese legal and tax purposes (Portuguese Commercial Code, Article 40)
• Marketing data: Until consent is withdrawn or 3 years of inactivity
• Website analytics: 26 months maximum (as per Portuguese DPA guidelines)
• Accounting records: 10 years as required by Portuguese tax law
• Legal requirements: As required by Portuguese and EU laws

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

9.1 Right of Access

Request a copy of the personal data we hold about you.

9.2 Right to Rectification

Request correction of inaccurate or incomplete personal data.

9.3 Right to Erasure ("Right to be Forgotten")

Request deletion of your personal data under certain circumstances.

9.4 Right to Restrict Processing

Request limitation of how we use your personal data.

9.5 Right to Data Portability

Request transfer of your data to another service provider in a structured format.

9.6 Right to Object

Object to processing based on legitimate interests or for direct marketing purposes.

9.7 Rights Related to Automated Decision-Making

Right not to be subject to decisions based solely on automated processing.

9.8 Right to Withdraw Consent

Withdraw consent at any time where processing is based on consent.

To exercise your rights, contact us at dpo@atallutions.com. We will respond within one month of receiving your request (or two months for complex requests, with notification of the extension).

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data:

• Encryption: Data transmission and storage encryption
• Access Controls: Restricted access to personal data on a need-to-know basis
• Regular Security Assessments: Ongoing evaluation of security measures
• Staff Training: Regular data protection training for all personnel
• Incident Response: Procedures for handling data breaches

11. Contact Information and Complaints

11.1 Contact Us

For questions about this Privacy Policy or our data practices:

Data Protection Officer

Email: dpo@atallutions.com

General Inquiries

Email: hello@atallutions.com

11.2 Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority.

For individuals in Portugal:

Comissão Nacional de Proteção de Dados (CNPD)

Website: https://www.cnpd.pt/

Email: geral@cnpd.pt

Phone: +351 213 928 400

For other EU residents:
You can find your local authority at: https://edpb.europa.eu/about-edpb/board/members_en

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website
• Notify you of significant changes via email or website notice
• Update the "Last Updated" date at the top of this policy

Continued use of our services after policy changes constitutes acceptance of the updated terms.