Privacy Policy

WE ARE COMMITTED TO PROTECTING THE PRIVACY AND PERSONAL DATA OF OUR CUSTOMERS AND USERS OF THE WEBSITE, WHICH IS WHY WE HAVE DRAFTED THIS POLICY AND THE PRACTICES DESCRIBED HERE. IN THIS POLICY, WE EXPLAIN HOW YOUR PERSONAL DATA IS COLLECTED AND PROCESSED, SO WE RECOMMEND READING IT.

IDENTIFICATION OF THE ENTITY RESPONSIBLE FOR DATA PROCESSING

Entity: Corvanis, Lda. (adiante, “Corvanis”)

NIPC: 518743322

Headquarters: Urbanização das Sesmarias, 88, 1.º, 8400-565 Carvoeiro, Lagoa, (Faro)

Email: [email protected]

WHAT DOES THIS POLICY COVER?

This Privacy Policy explains how we collect and process the personal data necessary for providing services available through the website, describing the practices adopted for this purpose.

WHAT ARE PERSONAL DATA?

Personal data are all information related to a person that identifies them or makes them identifiable, regardless of the nature and medium of the information, including the sound and image of the person.

By identifiable, it should be understood as a person who can be identified, directly or indirectly, particularly by reference to an identification number or other specific elements of their physical, physiological, mental, economic, cultural, or social identity.

HOW WILL WE USE YOUR PERSONAL DATA?

The personal data processing operations we carry out are an essential tool for your satisfaction and for the activity of Corvanis, and are performed in accordance with applicable legislation and best practices.

Your personal data will not be reused for purposes other than those previously identified or that have no relation to the purposes for which they were initially collected.

WHAT ARE THE PURPOSES, GROUNDS, AND RETENTION PERIODS FOR THE COLLECTED DATA?

The personal data we process have specific grounds, depending on the purposes for which they are intended, and will be retained for the time necessary for their respective purposes, as outlined in this Privacy Policy.

The personal data collected is only that which is necessary and appropriate for the stated purposes.

In the following table, you can see the purposes of processing and the data collected for them, their respective grounds, and the retention periods or criteria for data preservation:

PURPOSE	GROUND	COLLECTED DATA	RETENTION PERIOD
To analyze and respond to your contact request.	Consent for that specific purpose.	Name, Phone number, email, data contained in the message content	1 year.
To analyze and follow up on your spontaneous application process to work with Corvanis.	Consent for that specific purpose.	Name, Phone number, email, LinkedIn Profile, Curriculum Vitae (CV), Additional information voluntarily provided by the data subject	1 year
To analyze and follow up on your application process for a job at Corvanis.	Pre-contractual diligence, at the request of the data subject.	Name, Phone number, email, LinkedIn Profile, Curriculum Vitae (CV), Additional information voluntarily provided by the data subject	1 year
To send a Ticket	Execution of a contract in which the data subject is a party, or for pre-contractual diligence at the request of the data subject.	Name, Phone number, email, data contained in the message content	3 years after the ticket is closed, unless its retention for a longer period is necessary to comply with legal obligations or to defend rights in judicial or administrative proceedings.
For scheduling a meeting.	Pre-contractual diligences, at the request of the data subject.	Name, Phone number, email, data contained in the message content	1 year
To follow up on your customer registration on the website and allow you to enjoy its functionalities.	Pre-contractual diligences, at the request of the data subject.	Name, Phone number, email, data contained in the message content	For the period you are registered as a customer and wish to use the respective services of the website and up to 1 year after the last access.
To keep your account data in the reserved area.	Pre-contractual diligences, at the request of the data subject.	Name, Phone number, email, address data, billing data.	For the period you are registered as a customer and wish to use the respective services of the website and up to 1 year after the last access, unless its retention for a longer period is necessary to comply with legal obligations or to defend rights in judicial or administrative proceedings.
To analyze and respond to your contact and information request through LiveChat.	Consent for that specific purpose.	Message, file, and personal data that both may contain.	1 year

If a specific or mandatory period is required by law, that will be the data retention period. In all other cases, personal data will be kept for a maximum of the periods indicated above, which Corvanis deems sufficient to fulfill the purposes.

At the end of the retention period, all personal data collected will be deleted.

COMMERCIAL AND/OR PROMOTIONAL COMMUNICATIONS.

In accordance with Personal Data Protection legislation, whenever Corvanis has obtained an email address from its clients in the context of the sale of a product or service, it may use it for direct marketing purposes for its own products or services that are similar to those transacted. This is provided that it clearly and explicitly guarantees the clients in question the ability to object, free of charge and easily, to the sending of this type of communication with each message, for example, through the unsubscribe option located in the footer of the emails. In accordance with Personal Data Protection legislation, whenever Corvanis has obtained an email address from its clients in the context of the sale of a product or service, it may use it for direct marketing purposes for its own products or services that are similar to those transacted. This is provided that it clearly and explicitly guarantees the clients in question the ability to object, free of charge and easily, to the sending of this type of communication with each message, for example, through the unsubscribe option located in the footer of the emails.

HOW DO WE COLLECT YOUR PERSONAL DATA?

We will collect your personal data through the forms on the website, as well as through the website and the communication it makes with your device and the emails you send us.

Your personal data is collected through your device in the following ways:

When you fill out the forms on the website;
Through your browser;
Through cookies;
Through pixel tags and other similar technologies;
IP Address/IMEI;
Through your User data.

Corvanis assume o compromisso de tratar os seus dados conforme a lei e de forma legítima.

Corvanis will not sell, rent, or share your personal data with third parties, except in cases clearly identified in this Privacy Policy (see the section "HOW WE COMMUNICATE DATA TO THIRD PARTIES" to understand how).

Corvanis' services are not directed to minors, and personal data from minors is not intentionally processed.

WHAT ARE COOKIES?

Cookies are small information files that help identify your browser and can store information, such as user settings and preferences.

Corvanis will store cookies on your device to personalize and facilitate your browsing experience, but also for troubleshooting, statistics, quality assurance, and to monitor system security.

Except for cookies that are specifically necessary for the website's performance, the storage of other cookies will always depend on the user's acceptance and consent, which can be withdrawn at any time through specific browser tools.

To learn more about the cookies we use, you should consult our Cookie Policy.

HOW DO WE PROTECT YOUR PERSONAL DATA?

Your personal data is kept secure through the adoption of various security measures, both technical and organizational, that ensure that only the employees who need access to the personal data have access to it, in accordance with the need for access and the rules created for this purpose.

To protect your personal data, we only use data center providers that offer us adequate and documented security measures, namely, guarantees that your personal data is stored on servers that are maintained in controlled environments with limited access.

Personal data is kept on secure servers with Odoo S.A (hereinafter, “Odoo”), with VAT number BE0477472701 and registered office at Chaussée de Namur, 40, 1367 Grand-Rosière, Belgium, which provides us with adequate security guarantees to protect personal data against its dissemination, loss, misuse, alteration, unauthorized processing or access, as well as against any other form of unlawful processing.

Likewise, when you browse the website, we protect your data with encryption, such as Transport Layer Security (TLS, a security protocol that protects communications over the internet), and your password is stored using a one-way hash, meaning it cannot be recovered (or disclosed) by anyone, including Corvanis, and can only be reset.

Although we take the care and precautions we deem appropriate to protect the personal data you provide and we collect, it is important to be aware that no security system is impenetrable.

Therefore, you should take certain precautions, such as keeping your password secret and not disclosing it to anyone else; if you believe your password has been used improperly, you should notify us immediately; you should also be careful to log in and out whenever you close the browser.

WHAT ARE YOUR RIGHTS.

Before we explain how you can exercise your rights, we inform you that the legislation grants you the following rights:

Access: the right to obtain confirmation of whether or not your personal data is being processed and, if so, the right to access your personal data;
Rectification: the right to obtain the rectification of inaccurate personal data concerning you and to have incomplete personal data completed;
Erasure: the right to obtain the erasure of your personal data when one of the reasons listed in the legislation applies, namely when:

1. Personal data is no longer necessary for the purpose for which it was collected or processed;
2. Withdraw the consent on which the data processing is based and there is no other legal basis for the processing;
3. If you oppose the processing and there are no overriding legitimate interests that justify it;
4. Personal data has been processed unlawfully;
5. Personal data must be deleted to comply with a legal obligation;
6. Personal data was collected in the context of the provision of information society services.

Limitation of processing: the right to obtain the limitation of processing if one of the situations listed in the legislation applies, namely when:

1. Contesting the accuracy of personal data;
2. The processing is unlawful and the data subject opposes the deletion of personal data and requests, instead, the limitation of its use;
3. The data controller no longer needs the personal data for processing purposes, but such data is required by the data subject for the declaration, exercise, or defense of a right in legal proceedings;
4. If the data subject has opposed the processing based on automated individual decision-making.

Opposition: the right to object at any time to the processing of personal data concerning them;
Portability: the right to receive personal data concerning you in a structured, commonly used, and machine-readable format, and the right to transmit that data to another data controller without the controller to whom the personal data was provided being able to prevent it, when the processing is based on consent or contract, or when it is carried out through automated means.

You also have the right to lodge a complaint with the competent supervisory authority (in Portugal, the National Data Protection Commission).www.cnpd.pt).

In addition to the rights described above, whenever the basis for data processing is consent, the User has the right to withdraw the consent given at any time, without affecting the lawfulness of the processing carried out until that moment.

HOW CAN YOU EXERCISE YOUR RIGHTS?

By written contact to the following email address:[email protected]

If you request the deletion of some or all of your personal data, some of the requested services may not be provided to you, and Corvanis will only retain the personal data necessary to comply with its legal obligations.

WHEN DO WE COMMUNICATE DATA TO THIRD PARTIES?

Corvanis may use third parties to provide certain services, such as maintenance, technical support, or marketing, and these parties may have access to some personal data, namely the data necessary for the contracted purposes.

Corvanis ensures that the entities that have access to the data are credible and offer high guarantees of protection, with data never being transmitted to them beyond what is necessary for the provision of the contracted service; Corvanis, however, remains responsible for the personal data provided.

Corvanis may also transmit data to third parties in the context of investigations, inquiries, and judicial and/or administrative proceedings or of a similar nature, provided it is duly ordered by a court to do so. Corvanis may also transmit data to third parties in the context of investigations, inquiries, and judicial and/or administrative proceedings or of a similar nature, provided it is duly ordered by a court to do so.

THIRD-PARTY WEBSITES

The website may contain links to other websites that may collect/process your personal data, and this processing is the sole responsibility of the owners of those websites, with Corvanis having no responsibility for their policies and/or practices.

Examples of such third parties include GitHub, YouTube, LinkedIn, Facebook, Instagram, or X through the buttons present on the website.

TRANSFERS OF DATA OUTSIDE THE EUROPEAN UNION

Your data will be processed by us within the European Economic Area.

If data transfers to third countries outside the European Economic Area may occur, Corvanis will make the necessary efforts to adopt appropriate safeguards to ensure that these transfers are carried out in accordance with applicable legislation.

MINORS

The website is not directed at individuals under 18 years of age, and we request that these minors do not provide us with personal data through the website, application, social networks, or emails.

SENSITIVE PERSONAL DATA

Corvanis requests that you do not send or disclose to us any sensitive personal data, i.e., information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic information, biometric information, data concerning health, or data concerning a natural person's sex life or sexual orientation.

If you still send us or disclose these categories of personal data, they will be immediately deleted.

CHANGES TO THE PRIVACY POLICY

Corvanis reserves the right to adjust or amend this Privacy Policy at any time, and any such changes will be made public.

OUR CONTACT DETAILS

If you have any questions or concerns regarding this Privacy Policy, please contact us in writing via email: [email protected]

LATEST VERSION

12.05.2026, Faro (Portugal).