1. Global Overview
This privacy policy explains how Inygon, Lda., operating under the Inygon brand, processes personal data received through this website and used for professional contacts and commercial proposals. Inygon, Lda. is the data controller for the processing described here. For questions about your data, use our public contact form. Independent websites and services have their own privacy policies.
2. Commitment
We limit the personal data we collect and use to what is necessary for the purposes described in this policy, keep it accurate and protect it against unauthorised access. Access and sharing are limited to those purposes and applicable legal obligations.
3. Collected Data
When you contact us through our contact form, we collect the information you provide to respond to your enquiry and, where applicable, take steps towards providing our services:
- · Identification: first and last name and IP address.
- · Contact: email address and phone number.
- · Enquiry: subject, message and other information you choose to provide.
For professional outreach, we may also collect names, positions or functions, the organisation represented, and published professional email addresses, telephone numbers and postal addresses. We record the source and date of collection, relevant correspondence and any request to stop commercial contacts.
4. Professional Contacts and Commercial Proposals
We use professional information published in official public sources to identify and contact organisations about relevant Inygon services, partnerships and commercial proposals. These sources include official websites and contact pages of companies, public bodies, associations and other organisations, and official public directories and registers.
We use information made available for professional or institutional purposes. We do not obtain prospect contacts from purchased marketing lists or sources whose origin cannot be verified, or infer private contact details. Public availability does not, by itself, constitute consent to marketing.
Where appropriate, this processing is based on our legitimate interest in establishing relevant commercial relationships, under Article 6(1)(f) of the General Data Protection Regulation (GDPR). Before relying on this basis, we assess the necessity and proportionality of the processing against the rights and reasonable expectations of the people concerned, taking account of their professional role, the publication context and the relevance of the proposed contact.
Sending electronic marketing communications also depends on the applicable communications rules. For recipients who are natural persons, we obtain prior consent where required by law; a professional address published online does not remove that requirement. For subscribers that are legal persons, we respect objections and applicable exclusion lists, including the list maintained by Portugal's Directorate-General for Consumers (DGC). Each commercial communication identifies the sender and provides a free and straightforward way to refuse further commercial contacts.
We may use research and artificial intelligence tools to help locate and organise information from these official sources. Contact details are checked against the original sources before use. These tools support research; we do not use them to make decisions about individuals that produce legal or similarly significant effects solely through automated processing.
When we obtain personal data indirectly, we provide the required privacy information, including the source of the data and how to object, within the deadlines in Article 14 of the GDPR: within one month of collection at the latest, or earlier at the first communication or first disclosure to another recipient, as applicable.
5. Data Storage and Retention
Data is stored in our systems and those of the service providers needed for the purposes described here. Information received through the contact form is kept for as long as necessary to handle the enquiry and any resulting service relationship or applicable legal obligations.
Prospect data is kept while the relevant outreach or proposal is being pursued. It is deleted when that outreach or proposal ends without a business relationship, or earlier if the contact is no longer current or relevant. If a business relationship develops, information needed for that relationship is retained for its duration and any applicable legal retention requirements.
If you object to direct marketing, we stop using your data for that purpose. We retain only the minimum information needed to respect your request, such as the contact identifier and the date of your objection, for as long as necessary to prevent further commercial contacts.
6. Data Access, Sharing and International Transfers
Access is limited to the team responsible for enquiries, professional contacts and service delivery, and to providers whose involvement is necessary. Provider categories include hosting and data storage, email and collaboration services, contact management systems, and research and artificial intelligence tools where used. Providers processing data on our behalf are subject to appropriate data protection and confidentiality obligations. We may also share information with suppliers involved in delivering a requested service and with authorities where legally required. We do not sell professional contact data.
Where a provider's processing involves a transfer of personal data outside the European Economic Area, the transfer must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission's standard contractual clauses, with additional measures where required. You can use our public contact form to request information about the providers involved and the safeguards applicable to your data, including how to obtain a copy.
7. Your Rights
Under the GDPR, and subject to the conditions applicable to each right, you have the following rights:
- · Right of information: You have the right to be provided information regarding the processing of your personal data.
- · Right of access: You have the right to obtain confirmation as to whether or not we are processing your personal data and access to that data, including available information about its source.
- · Right to rectification: You have the right to obtain correction of inaccurate or incomplete personal data associated with you.
- · Right to erasure: You have the right to request erasure of your personal data.
- · Right to restriction: You have the right to obtain the restriction of processing of your personal data.
- · Right to data portability: You have the right to receive the personal data provided in a commonly used and readable format.
- · Right to object: You have the right to object to the processing of personal data.
- · Right to file a complaint: You may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), or another competent supervisory authority.
- · Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
- · Right not to be subject to a decision based solely on automated processing that produces legal or similarly significant effects, subject to the applicable legal exceptions.
You may object to the use of your personal data for direct marketing at any time, free of charge and without giving a reason. We will cease processing your data for that purpose, including any related profiling.
To exercise your rights, ask about your data or refuse further commercial contacts, use our public contact form. We respond to rights requests without undue delay and normally within one month; if a lawful extension is necessary, we explain it within that month.
8. Cookies
This website includes Google Analytics to measure website usage. Google Analytics uses cookies to distinguish visitors and sessions. You can manage or delete cookies through your browser settings. Further information is available in Google's explanation of Analytics cookies.
9. Security
We use technical and organisational measures appropriate to the risks of the processing to protect personal data against loss, misuse and unauthorised access. No storage or transmission system can guarantee absolute security.
10. Privacy Policy Updates
Any updates to this privacy policy will be reflected in this page.