Privacy Policy

1. Data controller

The entity responsible for processing personal data collected through the website assimilar.com is:

Assimilar has not appointed a Data Protection Officer, as it is not legally required to. Any privacy-related enquiry may be sent to the address above.

2. Data we process

2.1. Browsing data

When you visit the site, the server automatically records, in log files, technical data such as your IP address, the date and time of access, the pages viewed, the HTTP response code, and your browser and operating system. This data is necessary for the operation and security of the service.

2.2. Contact data

If you contact us by e-mail, we process the data you provide — typically your name, e-mail address and the content of your message — in order to respond to your request.

3. Purposes and legal basis

• Ensuring the operation, stability and security of the site — Assimilar's legitimate interest (Art. 6(1)(f) GDPR).
• Responding to enquiries and pre-contractual steps — steps taken at the data subject's request prior to entering into a contract, and legitimate interest (Art. 6(1)(b) and (f) GDPR).
• Complying with legal obligations to which Assimilar is subject — Art. 6(1)(c) GDPR.

The site does not use analytics, behavioural advertising or profiling tools.

4. Retention periods

• Server logs: up to 12 months, unless a longer period is needed to investigate security incidents.
• Correspondence: for as long as needed to handle the request and, where applicable, for the duration of the contractual relationship and subsequent statutory retention periods.

5. Recipients and processors

Data is processed by Assimilar and by its service providers acting as processors, namely:

• the website hosting and infrastructure provider;
• the e-mail service provider.

These providers process data only on Assimilar's instructions and under a contract imposing appropriate safeguards. Assimilar does not sell, rent or disclose your personal data to third parties for marketing purposes.

6. International transfers

Data is, as a rule, processed within the European Economic Area. Where a processor processes data outside the EEA, this takes place under a European Commission adequacy decision or appropriate safeguards, such as standard contractual clauses.

7. Security

Assimilar implements appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction, including encrypted transmission (HTTPS) and access control.

8. Your rights

Under the GDPR, you have the right to request access to your personal data, its rectification or erasure, the restriction of processing, as well as the right to object to processing and the right to data portability. You may exercise these rights via geral@assimilar.com.

You also have the right to lodge a complaint with the supervisory authority, the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.

9. Third-party links

The site contains links to third-party websites (for example, LinkedIn). Assimilar is not responsible for the privacy practices of those sites, which are governed by their own policies.

10. Changes to this policy

This policy may be updated at any time. The version in force is always the one published on this page, showing the date of the last update.