Privacy Policy
Preliminary text, to be legally reviewed before go-live.
This policy explains how Aetheris processes personal data collected through www.aetheris-st.com: when you contact us via the form or by email, and the minimal technical data needed to run and secure the website.
Data controller
Aetheris, Lda, company registration number (NIPC) 518 921 042, registered office at Avenida Grão Vasco, n.º 43, 8.º, 1500-336 Lisboa, Portugal. For any question about your data: hdc@aetheris-st.com.
What data we process
- Data you provide: name, organisation (optional), email address and the content of your message, sent via the form or directly by email.
- Technical data: IP address and request information, used to protect the form against automated submissions and to keep the website secure.
In this first contact, please do not share personal data about third parties or sensitive data (for example, health data). If your topic requires it, we will agree on an appropriate way to do so.
Why we use your data and on what legal basis
- To reply to your message and, if you so request, to assess a possible collaboration. Legal basis: steps taken at your request prior to entering into a contract, and our legitimate interest in replying to those who contact us.
- Website security and abuse prevention. Legal basis: legitimate interest.
Providing your name, email and message is necessary for us to reply. We do not carry out automated decision-making or profiling.
How long we keep your data
- Contacts that do not lead to a business relationship: up to 24 months after the last contact, after which they are deleted.
- If we start working together: for the duration of the relationship and for the periods required by law (for example, accounting and tax obligations).
- IP address: Aetheris does not write it to any database. Our form provider uses it to block automated submissions and our hosting provider keeps its own access logs, each under its own policy.
Who we share your data with
We do not sell your data or share it with third parties for their own purposes, nor use it for advertising. We rely on service providers who process it on our behalf, under contract and only on our instructions: Cloudflare, Inc. (website hosting and security), Web3Forms (delivery of form messages) and the Aetheris email provider, to whom the message is delivered.
Some of these providers may process data outside the European Economic Area, namely in the United States. In such cases, the transfer is safeguarded by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure, including encrypted connections (HTTPS) and restricted access.
Your rights
You may request access to, rectification, erasure, restriction or portability of your data, and object to its processing, by writing to hdc@aetheris-st.com. We will reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados (www.cnpd.pt).
Changes
We may update this policy. The date of the last update is always shown at the top of this page.