Privacy notice
This notice explains what personal data the opcerto.com website collects, why, and what rights you have. It covers the website only. If your company uses the OpCerto product, a separate agreement covers the order documents you process with it.
Who is responsible
The data controller is OpCerto, Viseu, Portugal. Contact: [email protected].
What we collect
| When | Data | Why | Legal basis (GDPR) |
|---|---|---|---|
| You send the contact form | Name, work email, phone number, subject and your message | To reply to your enquiry | Steps taken at your request before a possible contract, Art. 6(1)(b); otherwise our legitimate interest in answering business enquiries, Art. 6(1)(f) |
| You send the demo request form | Name, company, work email, phone number, country, industry, the workflow you describe and a preferred call time | To arrange and prepare a demonstration | Art. 6(1)(b), as above |
| You email us | Your email address and what you write | To reply | Art. 6(1)(b) or 6(1)(f) |
| Any visit | IP address, browser type and request details, processed by our hosting provider | To deliver the site and protect it from abuse | Legitimate interest in running a secure website, Art. 6(1)(f) |
Please do not send sensitive personal data or real customer documents through the forms.
How form messages are handled
Form submissions are checked and forwarded by email to our inbox. The website itself does not store them in a database. They are kept in our mailbox only as long as needed for the conversation.
Who receives your data
- Cloudflare, Inc. hosts the website, protects it and forwards form messages by email. Cloudflare acts as our processor.
- Google LLC (Gmail) hosts the inbox where enquiries arrive.
We do not sell your data or share it for advertising.
Transfers outside the EU
Cloudflare and Google may process data outside the European Economic Area, including in the United States. These transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
How long we keep it
Enquiries that do not lead to a business relationship are deleted within 12 months of our last contact. If we start working together, the relevant correspondence is kept for the duration of the relationship and any period the law requires. Hosting logs are kept by Cloudflare for a limited period under its own policies.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, and to receive it in a portable format. Where we rely on legitimate interest, you can object at any time. Email [email protected] and we will answer within one month.
You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or to the authority in your own EU country.
Cookies
This website does not set cookies for analytics or advertising. See the cookie notice.
Automated decisions
We do not make decisions about you based solely on automated processing.
Changes
We will update this page if the way we handle data changes, and change the date at the top.