Privacy policy
This policy explains, in plain terms, what personal data we process when you visit this site or write to us, what we use it for and what rights you have, under the General Data Protection Regulation (GDPR). We process as little as possible.
1. Who we are and who is responsible
2k3software is a project by independent professionals providing software engineering services to businesses and professionals. The controller of the data described in this policy is Tiago Miguel Silva, founder of the 2k3software project.
For any privacy question, write to geral@2k3software.com.
2. What this policy covers
It covers this site and the messages you send us. It does not cover data that our clients process in the systems we build for them, such as Estiva. In those projects, the client is the controller of the data and we act as independent providers, as processors (Article 28 GDPR). Each party’s responsibilities are set out in a data processing agreement agreed with each client.
3. What data we process and why
Messages through the form or by email. If you write to us through the contact form or by email, we process your name, your email address, your business name (if you give it) and the content of your message. Form messages reach us by email and are not stored on the site. We use this data only to reply to you and prepare the quote you asked for. The legal basis is taking steps at your request before entering into a contract and, when the message has no such purpose, our legitimate interest in replying to people who contact us. We keep the conversation while the contact lasts and for up to 24 months after the last message. If we start working together, we keep the necessary data for the periods required by law.
Technical access data. When you open the site, the service hosting it receives your IP address and technical request data (for example, browser type and the page requested). This is needed to deliver the site and protect it from abuse. The legal basis is our legitimate interest in the security and operation of the site. We do not use this data to identify you or to build profiles.
Visit statistics. To understand how many people visit the site and which pages they view, we use Cloudflare Web Analytics. It does not use cookies or store anything on your device, does not track you across sites and does not build profiles: it only produces anonymous, aggregated statistics (for example, number of visits, most viewed pages, country and browser type). The legal basis is our legitimate interest in knowing how the site is used and improving it.
4. Cookies and browser storage
This site does not use analytics, advertising or third-party cookies, not even for the visit statistics described above. It only uses your browser’s local storage (localStorage) to remember that you have seen the notice at the bottom of the page and pressed "OK", and which language you chose, so we do not ask again. This information stays on your device, is not sent to us and can be deleted in your browser settings.
5. What we do not do
- We do not share, sell or transfer your data to third parties.
- We do not send advertising or newsletters unless you ask.
- We do not use analytics tools that follow you across sites or build profiles. The only statistics are anonymous and aggregated, without cookies.
- We have no user accounts. The contact form is only for writing to us.
- We do not load fonts or images from external services. Everything is served from the site itself, except Cloudflare’s small statistics script.
6. Technical services we use
To host the site and receive email, we use two services that process data only on our behalf and according to our instructions, without using it for their own purposes:
- Cloudflare, which hosts the site, measures the anonymous visit statistics and forwards to our email the messages sent through the contact form or to our email addresses;
- Google (Gmail), where we receive and keep the messages.
These services may process data outside the European Economic Area. In those cases, the transfer relies on mechanisms provided for in the GDPR, such as an adequacy decision or standard contractual clauses.
We only disclose data to authorities when the law requires it.
7. Your rights
You can ask us at any time for:
- access to the personal data we hold about you;
- correction of inaccurate data;
- erasure of your data;
- restriction of processing;
- that we stop processing your data based on our legitimate interest (right to object);
- the data you gave us, in a structured format (portability).
To exercise any of these rights, write to geral@2k3software.com. We reply within one month. To confirm the request is yours, we may ask you to confirm from the email address you used with us.
If you believe the processing of your data breaks the law, you have the right to complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
8. Security
We protect data with appropriate technical and organisational measures: encrypted connections, access limited to those who need it, and two-step authentication on the accounts we use for work.
9. Changes to this policy
We may update this policy. The date at the top shows the version in force. If a change is significant, we will say so visibly on this site.