Privacy policy

This policy explains what personal data Galeto collects through this website, what we use it for and what your rights are. We've written it in plain language, in line with the General Data Protection Regulation (GDPR).

Who is responsible for your data

The data controller is Galeto. For any question about your data, reach us through the contact form.

What data we collect

• Contact form: name, email, phone (optional), project type and your message.
• Newsletter: your email.
• Visit statistics: anonymous, aggregated data such as pages visited, country and device type. It does not identify you.

We don't ask for or store sensitive data, and the site uses no advertising or tracking cookies.

What we use it for, and on what basis

• Replying to your enquiry and, where it makes sense, sending you a proposal. The legal basis is steps taken at your request before a contract.
• Sending the newsletter, if you subscribe. The legal basis is your consent, which you can withdraw at any time.
• Understanding how the site is used, to improve it. The legal basis is our legitimate interest, and the data is anonymous.

How long we keep it

• Contact enquiries: up to 2 years after our last contact, or for the length of our working relationship if you become a client.
• Newsletter: until you unsubscribe.

Who we share it with

We never sell or hand over your data. We only use the service providers the site needs to work, who process data on our behalf:

• Cloudflare: website hosting and cookie-free visit statistics.
• Resend: sending the form emails.

Some of these providers may process data outside the European Union. In that case, transfers use the safeguards set out in the GDPR, such as the European Commission's standard contractual clauses.

Your rights

At any time you can ask to access, correct or delete your data, restrict or object to its processing, and request data portability. If you gave consent, you can withdraw it whenever you like. Just get in touch through the contact form.

You also have the right to complain to the Portuguese data protection authority (CNPD).

Changes to this policy

If we change this policy, we'll publish the new version here with its update date.