This policy explains which personal data the website www.zetasystems.pt processes, why, and what your rights are under the General Data Protection Regulation (GDPR).
1. Data controller
Zeta Systems, Sistemas Avançados de Gestão e Projectos Lda, VAT no. (NIF) 504812041. For any question about your data, contact: comercial@zetasystems.pt
2. What data we collect
The website only collects personal data when you fill in the contact or demo request form:
- Name and email (required)
- Company and phone (optional)
- Subject, product of interest and your message
- The language you were viewing the site in (PT or EN)
For users with a client area account, we also store name, email, company, role, the encrypted password (never in plain text) and the date of last access, to manage access to support.
The website has no newsletter or open registration: client area accounts are created by Zeta Systems for its customers.
3. Why we use the data and on what legal basis
We use the data only to answer your information or demo request and to contact you about it. The legal basis is taking steps at your request prior to a contract and our legitimate interest in replying to those who contact us (Art. 6(1)(b) and (f) GDPR) [TO CONFIRM: legal basis]. We do not use the data for marketing or automated decision-making.
4. How the data is sent and stored
The website does not store form data in a database. When you click Send, the content is emailed, through the email (SMTP) server of PTisp (AlmourolTec, Lda), which hosts the Zeta Systems website and email, to the mailbox comercial@zetasystems.pt, where it is handled by our team.
5. How long we keep it
Emails received through the form are kept for 2 years after the last contact and then deleted, unless they lead to a business relationship, in which case legal retention periods apply.
6. Data sharing
We do not sell or share your data. Website hosting and email are provided by PTisp (AlmourolTec, Lda), which processes the data only on behalf of Zeta Systems, as a processor, as far as needed to provide that service. PTisp's data centres are in Portugal and Spain, so the data stays in the European Union [TO CONFIRM: server location of this hosting plan and data processing agreement with PTisp].
7. Cookies and external resources
The website uses only one technical cookie, zs_lang, which stores the chosen language (PT or EN) for 1 year. We do not use analytics, advertising or social media cookies. The website does not load fonts, scripts, maps or other third-party resources: all files come from the website itself.
In the client area the technical cookie .ZSAUTH is also used, which keeps you signed in for up to 8 hours and is deleted when you sign out.
As with any website, the server logs technical access data (IP address, date and page requested) for security and operation, kept according to the hosting provider's (PTisp) policy [TO CONFIRM: log retention period].
8. Your rights
You may request access, rectification, erasure, restriction of processing and portability of your data, and object to processing, by writing to comercial@zetasystems.pt.
9. Complaints
If you believe your data was not handled properly, you may lodge a complaint with the Portuguese Data Protection Authority (CNPD): www.cnpd.pt.
10. Changes
This policy may be updated. The date of the last update is shown at the top of the page.