Privacy Policy.

VerITech Solutions is the data controller responsible for your personal data. For any privacy matter, including to exercise your rights, you can reach us at:

• Email: privacy@veritechsolutions.net
• General enquiries: contact@veritechsolutions.net
• Address: VerITech Solutions, Lisbon, Portugal

We have not appointed a statutory Data Protection Officer as we are not required to, but the contact above is responsible for overseeing privacy matters.

This policy applies to personal data we process about visitors to the Site, prospective clients, newsletter subscribers, and candidates who apply for a role with us. It does not apply to: (a) personal data we process on behalf of our clients while delivering consulting engagements, where the client is the controller and we act as processor under a separate data-processing agreement; or (b) third-party websites we link to, which have their own privacy policies.

We collect the following categories of personal data:

3.1 Information you provide to us

• Contact & enquiry data — your name, email address, company, project description, and any other details you choose to include when you submit our contact form or email us.
• Recruitment data — your name, email, links (e.g. LinkedIn or GitHub), CV/résumé, cover letter, and any information you provide when applying for a role.
• Newsletter data — the email address you use to subscribe.

3.2 Information collected automatically

• Usage & device data — IP address, browser type, device type, operating system, referring URLs, pages viewed, and the dates/times of your visits, collected through server logs and privacy-respecting analytics.
• Cookies & similar technologies — small files and local storage used to remember your preferences (for example, your selected language and colour-theme). See Section 6.

We do not intentionally collect special categories of personal data (such as data revealing health, religion, or political opinions). Please do not send us such information unless strictly necessary.

Under the GDPR we must have a lawful basis for each processing activity. We use your personal data as follows:

• To respond to enquiries and provide quotes — based on our legitimate interests in responding to you and on taking steps at your request prior to entering a contract.
• To evaluate job applications — based on taking steps at your request prior to a potential employment relationship and our legitimate interest in recruiting.
• To send our newsletter — based on your consent, which you may withdraw at any time using the unsubscribe link in every email.
• To operate, secure, and improve the Site — based on our legitimate interests in running a reliable, secure service and understanding how it is used.
• To remember your preferences — based on our legitimate interest in providing a functional experience (strictly-necessary/functional cookies).
• To comply with legal obligations and to establish, exercise, or defend legal claims — based on legal obligation and legitimate interests.

The Site uses a minimal set of cookies and browser storage. We use strictly necessary / functional storage to remember your language and theme preference, and we may use privacy-respecting analytics that do not build cross-site advertising profiles. We do not sell your data or use third-party advertising cookies. You can control or delete cookies through your browser settings; disabling functional storage may affect some features (for example, your saved language).

We do not sell your personal data. We share it only with trusted service providers who process it on our behalf and under contract, including:

• Hosting & infrastructure providers who serve and store the Site.
• Email delivery providers (e.g. our transactional email service) used to deliver form submissions and newsletter messages.
• Content & analytics providers used to operate the Site and understand aggregate usage.

We may also disclose personal data where required by law, to protect our rights, or in connection with a corporate transaction (such as a merger or acquisition), in which case we will require the recipient to honour this policy.

Some of our service providers may process data outside the European Economic Area (EEA). Where that happens, we ensure an adequate level of protection through legal safeguards such as European Commission adequacy decisions or Standard Contractual Clauses. You may contact us for more information about the safeguards in place.

We retain personal data only for as long as necessary for the purposes above:

• Enquiries: typically up to 24 months after our last interaction, unless they become part of a client relationship.
• Job applications: for the duration of the recruitment process and up to 12 months afterwards, unless you ask us to delete them sooner or consent to a longer talent-pool retention.
• Newsletter: until you unsubscribe.
• Server logs: for a short period for security and diagnostics.

When data is no longer needed, we securely delete or anonymise it.

Subject to conditions and exemptions in the law, you have the right to:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — have inaccurate or incomplete data corrected.
• Erasure — ask us to delete your data (“right to be forgotten”).
• Restriction — ask us to limit how we process your data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to processing based on our legitimate interests, and to direct marketing at any time.
• Withdraw consent — where we rely on consent, withdraw it at any time without affecting prior processing.

To exercise any right, email privacy@veritechsolutions.net. We will respond within one month. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) (www.cnpd.pt), or your local EU data-protection authority.

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction — including encryption in transit (HTTPS), access controls, the principle of least privilege, and vendor due diligence. No method of transmission or storage is completely secure, so we cannot guarantee absolute security, but we work hard to safeguard your information and will notify you and the relevant authority of a personal-data breach where required by law.

The Site is intended for a professional, business audience and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

The Site may contain links to third-party websites and services (for example, our social profiles or status page). We are not responsible for the privacy practices of those sites; we encourage you to review their privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal reasons. We will post the updated version on this page and revise the “Last updated” date above. Material changes will be communicated where appropriate. Your continued use of the Site after changes take effect constitutes acceptance of the revised policy.

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at privacy@veritechsolutions.net. We are committed to resolving any concerns about our use of your data.