Privacy
Policy

Data controller

The data controller is Providere, based in Lisbon, Portugal, which can be contacted at info@provideregroup.com. This is Providere’s only point of contact for any question about personal data, including the exercise of the rights described below.

Data we process

Providere processes two kinds of data in connection with this website. The first is the data you send us when you get in touch: your name, email address, telephone number (if you choose to give one), the subject and the content of your message. The second is the technical records kept by the server, such as the IP address, the date and time of the visit, the page requested and the browser used.

The website does not use visitor statistics tools, tracking pixels or analytics or marketing cookies, and it does not embed third-party content such as videos, maps or social media. The fonts and the video at the top of the site are served by the website itself, without requests to third-party servers.

Contact form

The form on the Contact page asks for your name, email address, telephone number (optional), subject and message, and includes a box to accept this Privacy Policy. The website does not store or send what you type into the form. When you submit it, your own email application opens with the message already filled in, and it is you who sends the email to info@provideregroup.com.

Providere only begins to process this data when the email reaches its mailbox. What your email application and your email provider do with the message before that point is outside Providere’s control.

Purposes and legal basis

Data received through the form or by email is used only to reply to your request and, where there is interest, to prepare an initial conversation. The legal basis is pre-contractual steps taken at the request of the data subject and the consent given by accepting this policy in the form (Article 6(1)(b) and (a) of the GDPR).

The server’s technical records are processed to keep the website working and secure, on the basis of Providere’s legitimate interest in keeping it available and protected (Article 6(1)(f) of the GDPR). The data is not used for marketing or profiling, and Providere does not sell it.

Retention

Data from a contact request is kept for as long as necessary to reply to and follow up that request. If no client relationship arises, it is deleted no later than 24 months after the last contact. If the contact leads to an engagement for services, the data is then processed as part of that relationship.

The server’s technical records are kept by the hosting provider for the period it sets for security and operational purposes. The data from the administrative area described below has its own retention period, stated in the relevant section.

Recipients and service providers

Providere does not share personal data with third parties for their own purposes. It relies on two technical service providers. Hostinger hosts the website and processes the server’s technical records, such as the IP address, the date and time, the page requested and the browser, for the operation and security of the website. Cloudflare provides the domain and DNS service, that is, the resolution of the name provideregroup.com, without acting as an intermediary for the website’s traffic, which does not pass through its servers.

Messages received are kept in Providere’s email mailbox, which is run by a provider of that service. Data may also be disclosed to public authorities where the law requires it.

International transfers

Hosting and email services may involve servers located outside the European Economic Area. Where that is the case, the transfer relies on the safeguards provided for in the GDPR, namely an adequacy decision of the European Commission or standard contractual clauses. Anyone who would like more information about these safeguards can ask for it at info@provideregroup.com.

Administrative area and security

The website’s administrative area (/admin/) is for Providere’s team only, to publish content. Anyone who signs in to that area receives a strictly necessary session cookie, described in the Cookie Policy. Ordinary visitors do not receive any cookie.

To protect that area against unauthorised access attempts, the server temporarily records a code derived (a hash) from the IP address of failed sign-in attempts. That code is deleted within 24 hours, and the basis is Providere’s legitimate interest in protecting the area. Providere also applies appropriate technical and organisational measures to protect personal data against loss, unauthorised access and improper disclosure.

Your rights

Under the GDPR, data subjects have the right of access, rectification, erasure, restriction of processing, objection and portability, and may withdraw any consent they have given at any time, without affecting the lawfulness of processing carried out until then.

To exercise any of these rights, send a request to info@provideregroup.com. Providere replies within one month of receiving the request, extendable in the cases provided for by law. If you believe the processing of your data breaches the law, you may lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Individuals in Brazil

Providere serves clients abroad, mainly in Brazil. Anyone located in Brazil also has the rights provided for in the Brazilian General Data Protection Law (LGPD, Law No. 13,709/2018), which can be exercised through the same contact, info@provideregroup.com, and may lodge a complaint with the Autoridade Nacional de Proteção de Dados (ANPD), the Brazilian data protection authority.

Changes to this policy

Providere may update this policy, for example if it activates new features on the website. The date of the last update is shown at the top of this page, and the version in force is always the one published at provideregroup.com.