Privacy policy

The controller of the data collected on this website is Several Ways – Engenharia de Sistemas de Informação, Lda. (trading as Sevways), NIPC 509133380, with registered office at Rua da Criatividade, Edifícios Centrais, Sala 3, 2510-216 Óbidos, Portugal.

For any privacy question, write to geral@sevways.com.

We only collect the data you send us through the website forms: contact, newsletter, support requests and campaign assessments. Depending on the form, this may include:

• name, company and, if you provide it, the company's tax identification number (NIF);
• email and phone number;
• the message you write, the subject or product you choose and, in support requests, the amount indicated;
• your answers to a campaign assessment;
• your consent choices (contact and newsletter) and the date you made them;
• the country and language of the site, the page where you submitted the form and the source of the visit (the page you came from, campaign UTM parameters and ad click identifier, if any).

To limit abuse (repeated or automated submissions), we store a fingerprint (hash) of the IP address, calculated with a secret key. We do not store the IP address in plain text.

The website does not use analytics or marketing cookies. How the site stores the theme and your choices in your browser is described in the cookie policy.

Each processing activity has a legal basis under Article 6 of the General Data Protection Regulation (GDPR):

• Responding to contact, support and assessment requests: steps taken at your request prior to entering into a contract (Article 6(1)(b)) and, where the request comes from a company, our legitimate interest in responding to those who contact us (point (f)).
• Sending the newsletter and legislation alerts: your consent (point (a)), which you may withdraw at any time.
• Recording the consents you have given us: compliance with the legal obligation to demonstrate consent (point (c)).
• Knowing which campaign or page the request came from: our legitimate interest in understanding which content and campaigns bring in contacts (point (f)).
• Preventing abusive submissions and protecting the website: our legitimate interest in the security of the service (point (f)).

We do not make automated decisions with legal effects concerning you, and we do not sell your data.

Your request goes to the Sevways team for the country you chose on the website:

• Portugal: the Sevways team in Portugal.
• Angola, Mozambique, Cabo Verde and São Tomé and Príncipe: the Sevways team responsible for these countries, with management in Portugal kept informed.

We only share data with authorities when required by law.

We use the following providers, which process data on our behalf and according to our instructions:

• Supabase: the database where requests and consents are stored, hosted in the European Union (region eu-west-1, Ireland).
• Microsoft Azure: website hosting, in the West Europe region.
• Microsoft 365: sending, from a Sevways mailbox, the internal emails that notify the team of a new request.
• Brevo (Sendinblue SAS, France): sending the newsletter and the subscription confirmation emails.
• Cloudflare (Cloudflare, Inc., United States): anti-spam check on the forms (Turnstile). It receives the IP address and technical browser data when a form is sent. The transfer to the United States relies on the EU-US Data Privacy Framework, under which Cloudflare is certified.

• Contact, support or assessment requests that did not lead to a business relationship: 24 months after the last contact.
• Newsletter subscription: until you withdraw your consent.
• Record of consents: for as long as we have a relationship with you, plus 5 years, so that we can demonstrate that consent was given.
• If the request leads to a proposal or contract, the data then follows the retention periods of that relationship and the legal retention periods (for example, tax).

At the end of these periods, the data is deleted or anonymised.

You may, at any time:

• find out what data we hold about you and obtain a copy (access);
• correct inaccurate or incomplete data (rectification);
• ask us to delete your data (erasure);
• object to processing based on our legitimate interest (objection);
• receive the data you gave us in a commonly used format or ask us to send it to another organisation (portability);
• request restriction of processing while we assess a request from you;
• withdraw your consent to the newsletter, without affecting processing carried out before.

To exercise these rights, write to geral@sevways.com. We reply within one month. We may ask you for information to confirm your identity.

To stop receiving the newsletter, you can also use the unsubscribe link included in each email.

If you believe we have mishandled your data, you can lodge a complaint with the Comissão Nacional de Proteção de Dados – CNPD (Portuguese Data Protection Authority): https://www.cnpd.pt

We would appreciate it if you contacted us first, so that we can try to resolve the matter.

If you are in Angola, your data is also protected by Law No. 22/11 of 17 June (Lei da Protecção de Dados Pessoais – Personal Data Protection Law). You may exercise the rights that law gives you with us and lodge a complaint with the Agência de Protecção de Dados – APD (Data Protection Agency).

In other countries, local data protection law also applies, where it exists.

If we change the way we process data, we will update this page and the version date. If the change is relevant to newsletter subscribers, we will notify them by email.