Who We Are
DEVLOU — Desenvolvimento e Consultadoria, Lda. ("DEVLOU", "we", "us") is an AI consulting and cybersecurity company registered in Portugal. We are the data controller for personal information collected through this website and our services. You can contact us at geral@devlou.pt.
Information We Collect
- Contact information you provide via our contact form: name, email address, and company name.
- Technical data automatically collected: IP address, browser type, pages visited, and session duration.
- Communications: any messages or enquiries you send us.
- Service delivery data: information necessary to perform contracted services.
How We Use Your Information
- To respond to your enquiries and provide requested services.
- To manage our contractual relationship with you.
- To send relevant updates about our services (only with your consent).
- To improve our website and user experience through anonymised analytics.
- To comply with our legal obligations under Portuguese and European law.
Legal Basis for Processing
- Contract performance: processing necessary to fulfil our service agreements.
- Legitimate interests: improving our services and communicating with prospects.
- Consent: for marketing communications and non-essential cookies.
- Legal obligation: compliance with applicable laws and regulations.
Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact enquiry data is retained for up to 3 years. Client data is retained for the duration of the contract plus 7 years to comply with Portuguese accounting law. You may request deletion at any time by contacting us.
Your Rights Under GDPR
- Right of access: you may request a copy of the personal data we hold about you.
- Right to rectification: you may request correction of inaccurate data.
- Right to erasure: you may request deletion of your data in certain circumstances.
- Right to restriction: you may request we limit processing of your data.
- Right to data portability: you may receive your data in a structured, machine-readable format.
- Right to object: you may object to processing based on legitimate interests.
- Right to withdraw consent at any time, without affecting prior processing.
Data Sharing and Transfers
We do not sell your personal data. We may share data with trusted service providers (hosting, analytics) who process data on our behalf under strict data processing agreements. All transfers outside the EEA are subject to appropriate safeguards as required by GDPR.
Security
We implement appropriate technical and organisational security measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. As a cybersecurity company, data protection is central to our operations.
Complaints
If you are dissatisfied with how we handle your personal data, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
For any enquiries regarding this policy or to exercise your rights, contact us at:
geral@devlou.pt