1. Introduction
Hefesto Technology & Consulting values the privacy and security of the personal data of everyone who visits our website. This document explains clearly how we collect, use and protect the information provided to us, in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable legislation.
By browsing our website or using our services, you confirm that you have read and understood this Privacy Policy.
2. Who we are
Hefesto Technology & Consulting is a company specialising in technology solutions, IT consulting and cybersecurity. For the purposes of this Policy, Hefesto acts as the controller of the personal data collected through the website www.htc-tech.pt.
Address: Rua Alferes Veiga Pestana, 1 L, Escritório 28A, 9050-079 Funchal, Madeira, Portugal
Email for privacy matters: geral@htc-tech.pt, with the subject line
“Data Protection”.
3. Data we collect
We collect only the data you send us voluntarily through the contact form:
- Name, so that we can address you.
- Email address, so that we can reply.
- The content of your message.
The server hosting this website also records, automatically and temporarily, the IP address and browser type of each request. These records exist for security reasons — in particular to detect and stop attempts to abuse the form — and are deleted after 30 days.
4. Purposes of processing
The personal data collected is used solely to:
- Respond to enquiries or requests for information.
- Prepare commercial proposals or provide technical support, where requested.
- Ensure the security and operation of the website.
- Comply with legal or contractual obligations.
We do not use your data for advertising or profiling, and we do not share it with third parties for commercial purposes.
5. Legal basis for processing
- Steps taken prior to entering a contract (Article 6(1)(b) GDPR), when you contact us with a request for a proposal or for information.
- Legitimate interest (Article 6(1)(f)), to ensure the security of the website and prevent abuse.
- Compliance with legal obligations (Article 6(1)(c)), where applicable.
6. Data retention
Messages received through the form are kept for the duration of the commercial contact and for up to three years after the last interaction, after which they are deleted. Technical server logs are deleted after 30 days.
7. Processors
To operate the website and respond to your enquiries, we use the following processors, each covered by a data processing agreement:
- Sendinblue SAS (“Brevo”), France — delivery of contact form messages. It processes your name, email and message only for as long as is needed to deliver the email, and the data remains within the European Union.
- Microsoft Ireland Operations Limited — hosting of Hefesto's email (Microsoft 365). Your message is held in the mailboxes of this service, and it is from there that we reply to you.
- The hosting provider of the server on which this website runs, within the European Economic Area.
- Google Ireland Limited — only if you choose to load the map embedded on the contact page. The map is requested only when you reach that part of the page.
8. Your rights
Under applicable legislation, you have the right to:
- Access your personal data.
- Request the correction of inaccurate or outdated data.
- Request the erasure of your data (the “right to be forgotten”).
- Restrict or object to the processing of your data.
- Request the portability of your data to another controller.
- Withdraw consent at any time, where applicable.
To exercise any of these rights, send a request to geral@htc-tech.pt with the subject line “Data Protection”. We respond within 30 days at the latest.
You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.
9. Information security
Hefesto applies appropriate technical and organisational measures to protect personal data against destruction, loss, alteration, unauthorised disclosure or improper access. All traffic to this website is encrypted with TLS, access to the server is limited to authorised staff, and data submitted through the form is never written to a database — it is sent directly by encrypted email.
10. Cookies
This website uses no cookies of its own and no traffic analytics tools. No browsing data is collected for statistical or advertising purposes, which is why no consent banner is shown.
The single exception is the map embedded on the contact page: when it loads, Google may set its own cookies. That map is requested only when the visitor reaches that part of the page.
11. Links to third-party websites
The Hefesto website may contain links to external websites. Hefesto is not responsible for the privacy practices or content of those websites. We recommend that you always read their privacy policies before providing any personal information.
12. Changes to this Policy
Hefesto reserves the right to update this Privacy Policy whenever necessary to reflect legal, technical or operational changes. The most recent version will always be available on this page, with its date of update.
13. Contact
For privacy matters, access requests or complaints, contact us at geral@htc-tech.pt or by telephone on +351 965 121 377.