Version dated 22 October 2026 · in force from that date
This is a translation. If it differs from the Portuguese version, the Portuguese version prevails.
This policy applies to the www.digisousa.pt website and to business communications with DigiSousa, under the General Data Protection Regulation (GDPR) and Portuguese Law no. 58/2019. Data processed in our products is governed by the contract with each client and, where the product has one, by its own privacy policy.
1. Who is responsible
DigiSousa, Lda., NIPC 518 320 820, with its registered office in Vila Real, Portugal, is the controller for the processing of the data described in this policy. For any question about personal data: geral@digisousa.pt.
2. The website
The website has no forms, accounts, cookies, analytics tools or third-party content: the images, the video at the top, the icons and the logo are served by the site itself, and the text uses your device’s fonts.
The server logs technical data about each visit (IP address, date and time, page requested and browser), used only for security and troubleshooting, on the basis of our legitimate interest (Article 6(1)(f) GDPR). These logs are deleted after 14 days.
3. When you write to us
If you write to us, for example to ask for a proposal or a demo, we use your email address, your name and what you tell us about your organisation to reply and to prepare the proposal (pre-contractual steps, Article 6(1)(b) GDPR). If you do not become a client, we delete these messages after 2 years.
4. Service providers
- Google Cloud EMEA Limited (Ireland): website hosting, in a data centre in Madrid, Spain.
- Microsoft Ireland Operations Limited (Ireland): DigiSousa’s email, which receives the messages you send us.
These providers process data only on our behalf and in accordance with our instructions, under contracts that comply with the GDPR. If a provider needs to access data from outside the European Economic Area, it does so under the safeguards provided for in the GDPR, such as the European Commission’s standard contractual clauses. We may also have to disclose data to the authorities where the law requires it.
5. Cookies
The www.digisousa.pt website does not use cookies, so we do not ask for cookie consent.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Write to us at geral@digisousa.pt; we reply within one month.
If you believe your rights have not been respected, you can lodge a complaint with the CNPD (the Portuguese data protection authority, www.cnpd.pt).
7. Our products
On the platforms we provide to clients, the data recorded generally belongs to the client organisation, which is the controller; DigiSousa processes it on the client’s behalf, as a processor (Article 28 GDPR), under the contract with each client. The details are set out in that contract and, where the product has one, in the privacy policy published on the product’s website.
8. Changes to this policy
If we change this policy, the version and date at the top of this page will change.