Privacy policy

1. Who the controller is

The controller of the personal data collected on this site is MCIT, a self-employed professional trading under the MCIT brand, with tax identification number (NIF) 212077236 and business address at Rua Familia Farelo n48, 2925-761, Azeitão ("MCIT").

For any matter relating to personal data you can write to geral@mcit.pt or call 961 624 169.

2. What data we process

We process only the data we need for each purpose:

• News newsletter: email address, the origin and date of consent, and the record of mailings and unsubscription.
• Contact form: name, email address, phone, company, the need you selected and the message, as well as the IP address and browser identifier at the time of sending, to prevent abuse.
• Visit statistics: the page viewed, the page you came from, the language, the type of device and the time. We do not use cookies for this and we do not store the IP address: at the time of the visit, the address and browser are turned into a code that changes every day, and at the end of each day the records of individual visits are deleted and only totals remain.
• Client area: name, email address, access profile, password stored in encrypted and irreversible form, and a log of sessions and actions performed, with date, IP address and browser.
• Client area content: support requests, documents, photographs and other information that the client or MCIT uploads in the course of the contracted service.

3. What we use the data for and on what legal basis

• Sending the weekly News newsletter to those who subscribed, on the basis of your consent (Article 6(1)(a) GDPR), which you can withdraw at any time using the link included in every mailing.
• Replying to contact requests and preparing proposals, on the basis of pre-contractual steps taken at your request (Article 6(1)(b) GDPR).
• Providing the contracted services and managing the client area, on the basis of the performance of the contract (Article 6(1)(b) GDPR).
• Understanding which pages are useful and improving the site, based on those anonymous statistics, on the basis of MCIT’s legitimate interest (Article 6(1)(f) GDPR).
• Ensuring the security of the site and the client area, preventing abuse and keeping access logs, on the basis of MCIT's legitimate interest (Article 6(1)(f) GDPR).
• Complying with legal obligations, namely accounting and tax obligations (Article 6(1)(c) GDPR).

We do not use your data for advertising, we do not sell it and we do not take automated decisions that produce legal effects concerning you.

4. Who else has access

The site and the client area are hosted on servers managed by MCIT. We use a small number of service providers, who process data only on our behalf and in accordance with our instructions:

• Microsoft, for email and the notifications sent by the client area (Microsoft 365).
• Anthropic, a provider of artificial intelligence models, used by the MCIT team for internal tasks such as reading photographs of equipment and preparing draft proposals. It receives only the information needed for each task and does not use it to train models.

Some of these providers may process data outside the European Economic Area. In such cases the transfer is based on an adequacy decision of the European Commission, such as the EU-US Data Privacy Framework, or on standard contractual clauses approved by the Commission.

We may also disclose data to public authorities where required by law.

5. For how long

• Newsletter: while the subscription is active; after unsubscribing, we keep only the address and the date of unsubscription for three years, to prove it was respected.
• Contact requests that did not lead to a contract: up to two years after the last contact.
• Client area data: for as long as the contractual relationship lasts. After that, only what the law requires to be kept, for the legal period.
• Security and access logs: up to twelve months.
• Visit statistics: the records of individual visits are deleted at the end of the day; the daily totals, which identify no one, are kept for up to twenty-five months.

6. Your rights

You can request access to, rectification, erasure or portability of your data, restriction of processing, or object to processing, by writing to geral@mcit.pt. We reply within one month.

If you believe your data has not been processed in accordance with the law, you can lodge a complaint with the Comissão Nacional de Protecção de Dados (CNPD, the Portuguese data protection authority), at www.cnpd.pt.

7. Security

Connections to the site are encrypted. Passwords are never stored in plain text, access to the client area may require a second authentication factor, and each client sees only their own company's information. We keep verified backups and a record of who accessed what.

8. Cookies

This site uses only the cookies that are strictly necessary for it to work. The details are in the cookie policy.

9. Changes

This policy may be updated. The date of the latest version is shown at the top of the page.