Legal

Privacy Policy

The short version: this site uses no cookies and no analytics, and we only process the data you voluntarily send us.

Last updated: 11 June 2026

1. Data controller

The controller for personal data collected through this website is Daniel Barreiros, reachable at [email protected].

2. What data we collect

This website was designed to collect as little as possible:

  • Cookies: none. We use no cookies, first-party or third-party.
  • Analytics: none. We use no behavioural analytics tools.
  • Contact form: if you write to us, we receive the name, email, company (optional) and message you submit. We use this data exclusively to reply to your message.
  • Interest registration: if you sign up on a form on this site to be notified of a service launch, your email is collected and used exclusively for that announcement. We send no newsletters or commercial communications.

3. Technical logs

The site is served through a content delivery network (CDN), which may process technical logs, such as IP addresses, for security and performance purposes, under the privacy policies of the respective provider (Cloudflare). Forms are processed by a service under our control and delivered directly to our mailbox.

4. Data sharing

We do not sell, rent or share your data with third parties for marketing purposes. Form data is delivered by email to the data controller and is not used for any other purpose.

5. Retention

Contact messages are kept only for as long as needed to handle the matter. Interest-registration emails are deleted after the corresponding announcement is sent.

6. Your rights

Under the GDPR, you have the right to access, rectify, erase and restrict the processing of your data, as well as to object to processing and to lodge a complaint with the supervisory authority (in Portugal, the CNPD). To exercise any of these rights, write to [email protected].

7. Platform evaluation trial

Trial accounts at trial.nis2pme.pt are governed by the Terms of Use. In short: they are for evaluation only, they are suspended after 14 days and automatically deleted, with all data, 5 days later, and they must not be used with sensitive or confidential data, or third parties' personal data. Hosting runs on servers in the European Union, from a European hosting provider.

8. Changes

This policy may be updated to reflect changes to the website. The date of the latest update is shown at the top of this page.