Privacy Policy

Data Controller

Erego Systems is the data controller for the personal data processed through this website. For any questions about the processing of your personal data, use our contact form.

Personal Data Collected

Through our contact form: name, email address, and message content.

Through Google Analytics 4: technical information about website usage, including pages visited, session duration, device information, and aggregated usage data.

Through Cloudflare Turnstile: technical browser environment signals used to detect and prevent automated or abusive activity.

Purposes and Legal Basis

Contact form responses — we process your data to respond to your inquiry. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Website analytics — we analyse website usage to improve our content and services. Legal basis: your consent via the cookie banner (Article 6(1)(a) GDPR).

Cloudflare Turnstile — bot protection for our contact form. Legal basis: legitimate interest (Article 6(1)(f) GDPR).

Legitimate Interests

Where we rely on legitimate interest, our interests are: responding to enquiries received through our website, ensuring website security, and improving our content based on aggregated usage data.

Recipients

Your data may be shared with the following categories of recipients:

• Cloudflare, Inc. (hosting and security services)
• Google LLC (website analytics)

International Transfers

Your data may be transferred to and processed in countries outside the European Economic Area. Google LLC and Cloudflare, Inc. are based in the United States. Where applicable, such transfers are carried out under mechanisms recognised by the GDPR, including the EU-US Data Privacy Framework (Commission Implementing Decision (EU) 2023/1795).

Retention Periods

Contact form data (name, email, message): 12 months from the date of last communication, then deleted. Based on the need to respond to received enquiries.

Server logs (IP address, timestamp): 90 days, then deleted. Based on the need to ensure website security.

Google Analytics data: up to 14 months, then automatically deleted by Google. Based on the need to analyse usage trends.

Whether Data Provision is Mandatory

Providing data through our contact form is entirely voluntary. You are not required to provide any personal data. However, if you choose not to provide the requested information, we may be unable to respond to your inquiry.

Data Subject Rights

Under the GDPR, you have the right to:

• Access your personal data (Article 15)
• Rectify inaccurate or incomplete data (Article 16)
• Erase your personal data (Article 17)
• Restrict the processing of your data (Article 18)
• Receive your data in a structured, commonly used, and machine-readable format (Article 20)
• Object to the processing of your data (Article 21)
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal (Article 7(3))

To exercise any of these rights, use our contact form.

You can withdraw your consent for analytics cookies through the settings available in the cookie banner.

Right to Lodge a Complaint

You have the right to lodge a complaint with the Portuguese supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa, Portugal
www.cnpd.pt