We respect your privacy and appreciate the trust you place in us. This policy explains which personal data we process, for what purposes, on what legal basis, who we share it with, how long we keep it and how you can exercise your rights under the General Data Protection Regulation (GDPR).
1. Data controller
The controller of your personal data is aiodo, Lda, company no. 517305909, with registered office at Rua da Paz 14, 2120-062 Foros de Salvaterra, Santarém, Portugal. For any question about your personal data, contact us at info@aiodo.com.
2. What data we process
- Contact and quote requests: name, email, phone (optional), subject and message you send us through the form, by email, phone or WhatsApp.
- Clients: identification and billing details (name, company, tax number, address, contacts) needed to provide the services you contract.
- Free tools: if you request the GDPR checklist report by email, we process the company name, industry, your name, email, phone (optional) and your answers. Secure messages are encrypted in your browser: we only store encrypted data that we cannot read, and delete it once viewed (for one-time messages) or when it expires. The email domain and SSL checkers only query public records (DNS and certificate) of the domain you enter; the speed analysis is performed by Google PageSpeed Insights. We do not keep the domains you check, apart from a temporary log to prevent abuse and a one-hour cache of speed results. The “What is my IP?” tool sends the IP address to the ip-api.com service to obtain the approximate location and internet provider; we cache the result for 24 hours to avoid repeated requests. The other tools run in your browser and send no data to us.
- Anonymous site statistics: we count pages viewed, where visits come from (for example, Google or another website), device type, browser, language and contacts made through the site (form, WhatsApp, phone or email), without cookies and without storing your IP address: it is turned into an irreversible daily code used only to count unique visitors on that day. We do this based on our legitimate interest in understanding and improving the site, and this data is deleted after 25 months.
- Browsing data: IP address, device and browser type, pages visited and interactions with the site, collected through cookies and similar technologies, only when you allow it (see section 8).
3. Purposes and legal basis
- Replying to contact and quote requests: based on your consent and on pre-contractual steps taken at your request.
- Providing contracted services, invoicing and support: based on the performance of a contract.
- Sending the GDPR checklist report and a one-off contact about compliance services: based on your consent.
- Complying with legal obligations, namely tax and accounting: based on legal obligation.
- Protecting the site against spam and abuse (reCAPTCHA and server security logs): based on our legitimate interest in keeping our systems secure.
- Usage statistics and site improvement (Google Analytics and Hotjar): based on your consent.
- Advertising campaign measurement (Google Ads): based on your consent.
4. Who we share data with
We do not sell your data. We may only share it with entities that help us provide our services, always with appropriate safeguards:
- Google (Google Analytics, Google Ads, reCAPTCHA and Google Maps), when used as described in this policy;
- ip-api.com, to obtain the approximate location of an IP address in the “What is my IP?” tool;
- Hotjar, for site usage analysis, only with your consent;
- Meta / WhatsApp, when you choose to contact us via WhatsApp;
- invoicing, accounting and domain registration providers, as necessary;
- public authorities, when legally required.
Our clients' websites and email are hosted on servers we manage. Some of the providers above may process data outside the European Economic Area; in those cases, transfers rely on adequacy decisions or standard contractual clauses approved by the European Commission.
5. How long we keep data
- Contact and GDPR report requests that don't lead to a contract: up to 2 years after the last contact.
- Secure messages: until viewed or until the chosen expiry (30 days at most).
- Client data: for the duration of the contractual relationship and then for the period required by law (for example, 10 years for invoicing records).
- Browsing data: according to the duration of each cookie (see section 8).
6. Your rights
You may at any time request access to your data, rectification, erasure, restriction of processing or portability, object to processing and withdraw any consent you have given, without affecting the lawfulness of prior processing. Simply email info@aiodo.com.
You also have the right to lodge a complaint with the Portuguese Data Protection Authority, CNPD (www.cnpd.pt).
7. Security
We apply appropriate technical and organisational measures to protect your data, including encrypted connections (HTTPS), our own servers with restricted access, backups and regular security updates.
8. Cookies
Cookies are small files stored on your device when you visit a website. We use cookies and similar technologies in the following categories:
- Necessary: essential for the site to work and stay secure, such as storing your cookie preferences and protecting the contact form against spam (Google reCAPTCHA). They cannot be disabled.
- Statistics: help us understand how the site is used, in aggregate, so we can improve it (Google Analytics and Hotjar). Only enabled with your consent.
- Marketing: let us measure the effectiveness of our advertising campaigns (Google Ads). Only enabled with your consent.
| Service | Category | Purpose | Duration |
|---|---|---|---|
| aiodo (preferences) | Necessary | Store your cookie choices | 12 months |
| Google reCAPTCHA | Necessary | Protect the contact form against spam | Session to 6 months |
| Google Analytics (_ga, _ga_*) | Statistics | Site usage statistics | Up to 2 years |
| Hotjar (_hj*) | Statistics | Browsing analysis to improve the site | Up to 1 year |
| Google Ads (_gcl_*) | Marketing | Campaign conversion measurement | Up to 90 days |
The contact page includes a Google Maps map, which may set Google's own cookies when it loads.
You can change your choices at any time using the "Cookie preferences" link in the site footer. You can also delete or block cookies in your browser settings; if you do, some site features may not work properly.
9. Changes to this policy
We may update this policy to reflect legal changes or changes to our services. The date of the last update is always shown at the top of this page.