Privacy Policy

1. Who we are (data controller)

The data controller responsible for processing your personal data is Roberto Fernandes, operating as a sole trader (empresário em nome individual, ENI) in Portugal under the name RF Software Solutions.

You can contact us about anything in this policy, or to exercise your rights, at: roberto@rfsoftwaresolutions.com.

Tax number (NIF): 259287954.

2. What personal data we collect and how

We only collect personal data in two situations:

We do not ask for any other personal data, and we do not use the website to build profiles about you.

Providing your data through the contact form is voluntary. However, if you choose not to give us the required details (your name, email, and phone number), we will not be able to receive or reply to your enquiry.

• Contact form: when you fill in our contact form, we collect your name, your email address, your phone number, your company name (if you provide it), and the project overview you write to us.
• Hosting access logs: like almost every website, our hosting provider automatically keeps standard technical logs, which may include your IP address, browser type, and the date and time of access. These logs help keep the site running and secure.

3. Purposes and legal bases for processing

We process your personal data for the following purposes, each supported by a legal basis under Article 6 of the GDPR:

• To respond to your enquiry and provide the information or service you ask about. Legal basis: taking steps at your request before entering into a contract, our legitimate interest in responding to enquiries, and/or the consent you give when you choose to submit the form.
• To keep the website running, secure, and protected against abuse (via hosting access logs). Legal basis: our legitimate interest in operating and securing the site.

4. Third-party providers (processors)

To run this website and handle your message, we rely on a small number of trusted service providers. They only process your data on our behalf and for the purposes described above:

When you submit the contact form, your message is delivered to our own email inbox, where we read and reply to it.

• Vercel Inc. (United States): hosts the website and serves it through its content delivery network (CDN).
• Web3Forms (United States): processes the submission of the contact form and forwards its content to us by email.
• Google Fonts (Google, United States): serves the fonts used on the website. Because the fonts are loaded from Google's servers, Google may receive your IP address when the pages load.
• PTisp / AlmourolTec, Lda (Portugal, EU): provides the email hosting for the rfsoftwaresolutions.com mailbox where your message is received.

5. International transfers outside the EU/EEA

Some of our providers (Vercel, Web3Forms, and Google) are based in the United States. This means that, when you use the website or send us a message, your personal data may be transferred to and processed outside the European Union and the European Economic Area (EU/EEA).

When this happens, the transfer is protected by appropriate safeguards, such as the Standard Contractual Clauses approved by the European Commission and the providers' own data protection and compliance frameworks. PTisp, which hosts the receiving mailbox, is based in Portugal (EU).

6. Cookies

This website does not set tracking cookies. We do not use analytics, advertising, or any tracking technologies, and we do not run a newsletter.

Please note one technical detail: the website fonts are loaded from Google Fonts servers, which means Google may receive your IP address when a page loads. This is not a cookie, but we mention it so you have the full picture.

7. Data retention

We keep the personal data you send through the contact form only for as long as needed to handle your enquiry and any business relationship that may result from it. After that, the data is deleted.

Hosting access logs are kept by our hosting provider for the limited period needed for technical and security purposes.

8. Your rights under the GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

To exercise any of these rights, just send us an email at roberto@rfsoftwaresolutions.com. We will respond within the time limits set by law.

• Right of access: to know whether we hold your data and to obtain a copy of it.
• Right to rectification: to have inaccurate or incomplete data corrected.
• Right to erasure: to ask us to delete your data (the right to be forgotten).
• Right to restriction of processing: to limit how we use your data in certain cases.
• Right to data portability: to receive your data in a structured, commonly used, machine-readable format.
• Right to object: to object to processing based on our legitimate interest.
• Right to withdraw consent: where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.

9. Right to lodge a complaint

If you believe we have not handled your personal data properly, you have the right to lodge a complaint with the Portuguese supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados), at www.cnpd.pt.

We would, of course, appreciate the chance to address your concerns first, so feel free to contact us before doing so.

10. No automated decision-making

We do not carry out any automated decision-making or profiling that produces legal effects or similarly significantly affects you. Your message is always read and answered by a person.

11. Updates to this policy

We may update this Privacy Policy from time to time, for example if our services, providers, or legal obligations change. When we do, we will revise the "Last updated" date shown at the top of this page. We encourage you to review it occasionally.

This is a general policy. If you have any questions about it or about how we handle your data, please contact us at roberto@rfsoftwaresolutions.com.

12. Governing law

This Privacy Policy is governed by Portuguese law, and any matters relating to it fall under the jurisdiction of the Portuguese courts, without prejudice to the rights granted to you by the GDPR.