Privacy Policy

1. Who we are

ADDS - AI Data Digital Solutions (“ADDS”, “we”, “us”) is the brand under which the services described on this website are provided. The controller of the personal data collected here is the person identified below.

• Data Controller: João Ricardo Duarte Marques, NIF 277811015
• Contact email: geral@addssolutions.com
• Website: addssolutions.com

2. What data we collect

We only collect data strictly necessary to respond to your requests and improve your experience on our website:

2.1. Data you provide

Through the contact form, we may collect:

• Full name
• Email address
• Company / Organisation (optional)
• Phone number (optional)
• Area of interest
• How you found us (optional)
• Message

2.2. Data collected automatically

• Your cookie choice: stored in your browser's local storage, on your device. Until you consent, this website stores no cookies at all.
• Browsing data: IP address, browser type, pages visited and access time, collected through server logs.

3. How we use your data

• Respond to your messages: to follow up on the contact you initiated through the form or booking.
• Commercial communication: only when you explicitly request it (e.g. booking a Discovery Session).
• Improve the website: aggregated browsing analysis to optimise the user experience.
• Legal compliance: when required by law.

4. Legal basis for processing

The processing of your personal data is based on the following legal grounds under the GDPR:

• Pre-contractual steps and performance of a contract (Art. 6(1)(b)): this is the basis for processing the data you send us through the form or the booking widget. We process it because you asked us for a reply, and the processing is necessary to answer you and, if we go ahead, to prepare and deliver the service.
• Consent (Art. 6(1)(a)): for analytics cookies only. They are enabled only if you accept them in the banner, and you can switch them off at any time under Cookie preferences, at the foot of any page.
• Legitimate interest (Art. 6(1)(f)): to keep the website secure and to block automated spam submissions through the form.
• Legal obligation (Art. 6(1)(c)): where the law requires us to retain information, for example to meet tax and accounting obligations.

5. Who we share your data with

We do not sell, rent or share your personal data with third parties for marketing purposes. Your data may be processed by the following service providers, exclusively for the purposes described above:

• Microsoft 365 (Microsoft Ireland Operations Limited): hosts the geral@addssolutions.com mailbox, where the messages you send us are stored. This is the provider that keeps your data the longest.
• Resend (Plus Five Five, Inc., trading as Resend): sends the email that carries your form message to our mailbox.
• Vercel (Vercel, Inc.): hosts the website and the server logs.
• Google Analytics 4 (Google Ireland Limited): aggregated browsing analysis. Only enabled after your explicit consent.
• Calendly (Calendly, LLC): session booking, when you use the scheduling widget.

All of them are bound by data processing agreements and act only on our instructions, for the purposes described above.

5.1. Transfers outside the European Union

Some of these providers are US companies, or have US parent companies that may access the data for support and maintenance. This means your data may be transferred outside the European Economic Area.

Those transfers rely on the mechanisms set out in Chapter V of the GDPR: the European Commission's adequacy decision for the EU-US Data Privacy Framework, where the provider is certified under it, or the Standard Contractual Clauses approved by the European Commission, together with additional technical measures such as encryption in transit and at rest.

If you want to know which mechanism applies to a particular provider, write to geral@addssolutions.com and we will tell you.

6. How long we keep your data

• Enquiries that do not lead to a commercial relationship: the message and the data that came with it are kept for up to 24 months after the last contact, and then deleted.
• Enquiries that become clients: the correspondence is kept for the duration of the contractual relationship and, after it ends, for as long as the law requires, in particular to meet tax and accounting obligations.
• Server logs: retained for a maximum of 12 months.
• Your cookie choice: stays on your device until you change it or clear this site's data in your browser. We do not store it on our systems.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Access: you can request a copy of the data we hold about you.
• Rectification: you can correct inaccurate or incomplete data.
• Erasure: you can request the deletion of your data (“right to be forgotten”).
• Restriction: you can restrict the processing of your data in certain circumstances.
• Portability: you can request your data in a structured, machine-readable format.
• Objection: you can object to processing based on legitimate interest.
• Withdrawal of consent: you can withdraw consent at any time, without affecting the lawfulness of prior processing. For analytics cookies, withdraw it under Cookie preferences, at the foot of any page, in the same number of clicks it took to give it.

To exercise any of these rights, email us at geral@addssolutions.com. We will respond within one month, extendable by a further two months for complex requests, in which case we will let you know.

8. Cookies

Until you give us your consent, this website stores no cookies on your device. Your choice is kept in your browser's local storage, which is not a cookie. We do not use advertising or behavioural tracking cookies.

If you accept analytics cookies, Google Analytics 4 stores two cookies on the addssolutions.com domain, lasting two years, for aggregated browsing analysis. Each one is listed individually in our Cookie Policy. Other third-party services integrated on the website, such as Calendly, may set cookies on their own domains when you use them.

You can see and change your choice at any time under Cookie preferences, at the foot of any page. If you withdraw consent for analytics cookies, the page reloads so that Google Analytics actually stops running, rather than merely being recorded as refused.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or destruction, including encrypted communications via HTTPS and secure storage.

10. Changes to this policy

We may update this privacy policy periodically. Any significant changes will be published on this page with the corresponding update date.

11. Complaints

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority:

• CNPD, Comissão Nacional de Proteção de Dados (Portuguese Data Protection Authority)
• Website: www.cnpd.pt (opens in new tab)