Notice · This page is maintained by the site owner to answer common questions about Enso Systems. It is not a legal certification and may be updated at any time. For binding terms, please contact us at the address below.
This policy explains how Enso Systems ("we", "us") handles personal data on this website (enso.systems) in alignment with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Portuguese data protection law (Lei n.º 58/2019).
1. Data controller
The data controller is the site owner identified in our Legal Notice. Contact: cunharuben22@gmail.com.
2. What we collect
This website is largely a static marketing site. We collect only what is strictly necessary:
- Contact form / email: when you write to us, we receive your name, email address and the contents of your message.
- Language preference: a first-party cookie (
enso_locale) stores your selected interface language. No personal data, no tracking. - Aggregate analytics: we plan to use a privacy-friendly, cookieless analytics provider (Plausible or Fathom — [TODO: confirm choice]) that collects aggregated, anonymous traffic statistics. No personal identifiers, no cross-site tracking, no IP storage.
We do not use advertising cookies, profiling, fingerprinting, social-media trackers, or third- party retargeting pixels.
3. Legal bases
- Consent (Art. 6(1)(a) GDPR) — when you send us a message.
- Legitimate interest (Art. 6(1)(f)) — for aggregated, cookieless analytics used to understand site usage.
- Legal obligation (Art. 6(1)(c)) — for any accounting or tax-related retention.
4. Retention
- Email correspondence: kept while the relationship is active, then deleted within 24 months unless legal obligations require longer retention.
- Locale cookie: 12 months from your last visit.
- Aggregated analytics: anonymous, retained at the provider's default.
5. Subprocessors
Personal data is processed by the controller and a limited set of infrastructure providers:
- Cloudflare — website hosting (EU edge locations).
- Google (Gmail) — email delivery for the contact address, until a custom domain mailbox is provisioned. [TODO: update once hello@enso.systems is live]
- Plausible / Fathom — cookieless analytics. [TODO: confirm provider]
6. International transfers
Where any subprocessor processes data outside the EEA, transfers rely on Standard Contractual Clauses or equivalent safeguards required by the GDPR.
7. Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15).
- Request rectification of inaccurate data (Art. 16).
- Request erasure ("right to be forgotten") (Art. 17).
- Restrict or object to processing (Art. 18, 21).
- Data portability (Art. 20).
- Withdraw consent at any time, without affecting prior lawful processing.
To exercise any of these rights, email cunharuben22@gmail.com. You also have the right to lodge a complaint with the Portuguese supervisory authority, Comissão Nacional de Proteção de Dados (CNPD).
8. Security
Data is transmitted over HTTPS. We apply reasonable technical and organisational measures to protect personal data, but no system is absolutely secure. This is not a guarantee against incidents.
9. Changes
We may update this policy as the service evolves. Material changes will be reflected in the "Last updated" date above.