Privacy Policy

1. Data controller

The controller responsible for processing your personal data is FluxForge, headquartered in Portugal.

Email for privacy-related questions: contacto@fluxforge.pt

FluxForge is not required to appoint a Data Protection Officer. Any request relating to personal data may be directed to the contact above.

2. What data we collect and why

We only collect the data necessary for the purposes described below.

2.1 Contact form and email enquiries

When you fill in the form at fluxforge.pt/en/contact or write to us at contacto@fluxforge.pt, we process the data you provide: name, company, role, email address, phone number (optional), company size, areas of interest and the content of your message.

• Purpose: to respond to your request, schedule a conversation and, where applicable, prepare a service proposal.
• Legal basis: pre-contractual steps taken at your request (Article 6(1)(b) GDPR) and our legitimate interest in responding to business enquiries (Article 6(1)(f)).
• Retention: up to 12 months after the last contact, or for the duration of the contractual relationship and applicable legal time limits should you become a client.

Fields marked as required are necessary for us to respond to you. Without them we are unable to process your request.

2.2 Technical browsing data

When you visit the site, our hosting infrastructure automatically logs technical data: IP address, date and time of access, pages visited, browser type and operating system.

• Purpose: to ensure the security, availability and correct operation of the site, and to detect abuse.
• Legal basis: legitimate interest (Article 6(1)(f) GDPR).
• Retention: 30 days, unless a security incident requires further investigation.

2.3 Marketing communications

We only send you marketing communications if you have requested them or if you are already our client and the communications relate to services similar to those contracted. You may object at any time, free of charge, through the contact given in this policy or the link included in each communication.

3. Cookies and similar technologies

The fluxforge.pt website does not use tracking, advertising or behavioural-analytics cookies, nor does it load third-party resources that do. Fonts, icons and images are served directly from our own domain.

We may use local browser storage solely for functional preferences, such as your chosen language. This information never leaves your device and is not used to identify you.

If we introduce traffic-analytics tools in the future, we will update this policy and, wherever the law requires it, ask for your prior consent.

4. Who we share your data with

We do not sell or transfer your personal data to third parties. We only share it with service providers acting as processors, under contract and on our instructions, to the extent necessary:

• GitHub, Inc. (United States): hosting and delivery of the website through the GitHub Pages service. GitHub is certified under the EU-US Data Privacy Framework and offers Standard Contractual Clauses.
• Web3Forms: the service that receives the data submitted through the contact form and forwards it by email to FluxForge. Data is transmitted encrypted and is not used by the provider for any other purpose.
• Email provider used by FluxForge to receive and reply to messages.

We may also disclose data to public authorities when required by law.

5. International transfers

Some of our processors are established outside the European Economic Area, notably in the United States. Where a processor accesses data from a country outside the European Economic Area, we ensure that such a transfer relies on an adequacy decision of the European Commission or on the Commission's Standard Contractual Clauses, together with any supplementary measures that prove necessary.

6. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure, including encrypted communication (HTTPS), least-privilege access control and infrastructure access logging. No system is entirely secure; in the event of a personal data breach presenting a risk to your rights, we will notify the supervisory authority and, where required, the data subject, within the legal time limits.

7. Your rights

Under the GDPR, you have the right to:

• Access your personal data and obtain a copy of it;
• Rectify inaccurate or incomplete data;
• Erase your data, once it is no longer necessary or where processing is unlawful;
• Restrict processing in certain circumstances;
• Portability: receive the data you provided to us in a structured, commonly used format;
• Object to processing based on legitimate interest, including at any time to direct marketing;
• Withdraw consent, where processing is based on it, without affecting the lawfulness of processing carried out beforehand.

To exercise these rights, write to contacto@fluxforge.pt. We respond within one month at most, extendable by a further two months in complex cases, in which case we will inform you of the extension. We may ask you for information confirming your identity.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisbon, Portugal, www.cnpd.pt, or with the supervisory authority of your Member State of residence.

8. Automated decisions

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or significantly affect you.

9. Minors

The site and our services are aimed at companies and professionals. We do not knowingly collect data from minors under 16. If you become aware that a minor has provided us with data, please contact us so that we can delete it.

10. Links to other websites

The site may contain links to third-party websites, such as LinkedIn. This policy does not apply to those websites, whose privacy practices we recommend you review.

11. Changes to this policy

We may update this policy to reflect legal, technical or business changes. The current version is always available on this page, together with the date of its last update. In the event of material changes, we will inform you through appropriate means.

12. Contact

For any question about this policy or the processing of your personal data, contact us at contacto@fluxforge.pt.