Legal
Privacy notice
A plain-language account of the personal data this website collects, what we do with it and the rights you have under the GDPR.
Last updated
Who is responsible
This website is operated by Overslep, a technology company based in Portugal. For any question about your personal data, or to exercise your rights, write to geral@overslep.pt.
What we collect, and when
Browsing this website does not require you to give us any personal data. We only receive personal data when you send us a message through the contact form or allow visit statistics (below). Through the form we receive:
- your name, company and email address;
- your phone number and a rough budget, if you choose to provide them;
- the area of work you select and the message you write;
- whether you asked to receive occasional news from us (this box is never pre-ticked);
- the website that referred you to the form (address without query string) and any campaign tags in the link you followed.
To protect the form from abuse, our server also uses a keyed, one-way hash of your IP address to apply rate limits. The address itself is not stored by the application. Like almost every website, our web servers also keep short-lived technical access logs, which include IP addresses, for security and troubleshooting.
If you allow visit statistics, our statistics tool, which runs on our own server, records how you use the site, such as the pages you open and the website you came from. From your IP address it works out your approximate location (country, region and city) and your internet provider's network, and it recognises repeat visits by a short code calculated from your IP address and browser, without storing the address itself. The cookie notice lists exactly what it records and lets you change your answer at any time.
Why we use it, and on what legal basis
- To reply to your enquiry and to prepare or manage a project you ask us about: steps taken at your request before entering into a contract, and performance of that contract (GDPR Article 6(1)(b)).
- To keep the form and our systems secure, including rate limiting and filtering automated spam: our legitimate interest in protecting our services (Article 6(1)(f)).
- To send occasional news and articles, only if you ticked the optional box: your consent (Article 6(1)(a)), which you can withdraw at any time without affecting how we handle your enquiry.
- To see which pages are useful, through visit statistics, only if you allow them: your consent (Article 6(1)(a)), which you can withdraw at any time on the cookie notice.
Where it goes
Your message is checked by our own server, then passed to our automation platform, which records it in our customer-relationship and email systems so the right person can reply. These systems are run by us or by service providers acting on our behalf under data-processing terms. If our automation platform is briefly unavailable, the message is held in encrypted form on our server and delivered as soon as possible; anything that cannot be delivered within 14 days is deleted.
We do not sell personal data, and we do not use it for advertising profiles.
How long we keep it
We keep enquiries for as long as needed to respond and, if we work together, for the duration of that relationship and any period required by law, for example for invoicing records. Enquiries that do not lead to a working relationship are deleted when they are no longer needed. Server logs that record the outcome of each submission contain no names, messages or full email addresses and are deleted automatically within 30 days. Visit statistics stay on our own server and are not deleted automatically.
Your rights
You can ask us for access to your personal data, and to correct, delete or restrict it, to object to its use, or to receive it in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to geral@overslep.pt and we will reply within the time limits set by the GDPR.
You also have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt), or to the authority in your own country.
Cookies
This website does not set cookies. If you allow visit statistics, our statistics tool keeps one random code in your browser's local storage. See the cookie notice for details and to change your answer.
Changes
If we change how we handle personal data, we will update this notice and the date at the top of the page.