Privacy Policy

Introduction

This Privacy Policy explains how traxelinoa.top S.A. ("we", "our", or "us") collects, uses, and protects your personal information when you visit our website at traxelinoa.top or use our restaurant feedback automation services. We are committed to protecting your privacy and ensuring transparency about our data practices.

Data Controller Information

The data controller responsible for your personal information is:

Data Collection

We collect the following types of personal data from users of our website and services:

Information You Provide Directly

• Contact Information: Name, email address, phone number, restaurant name, and business address when you contact us or request our services
• Communication Data: Messages, feedback, and correspondence you send to us through our contact forms or email
• Account Information: Login credentials, profile information, and preferences if you create an account with our service
• Service Data: Information about your restaurant operations, feedback collection preferences, and service configuration

Information We Collect Automatically

• Technical Data: IP address, browser type, device information, operating system, and referring website
• Usage Data: Pages visited, time spent on our website, click patterns, and interaction with our content
• Cookie Data: Information collected through cookies and similar tracking technologies as detailed in our Cookie Policy

How We Use Your Data

We use the personal data we collect for the following purposes:

Service Provision

• To provide our restaurant feedback automation services and platform access
• To process your service requests and manage your account
• To customise and improve our services based on your needs
• To provide technical support and customer service

Communication

• To respond to your enquiries and provide requested information
• To send service-related notifications and updates
• To provide newsletters and marketing communications (with your consent)

Legal and Business Operations

• To comply with legal obligations and regulatory requirements
• To protect our rights and prevent fraud or abuse
• To analyse and improve our website and services

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Contract Performance: To provide our services and fulfil our contractual obligations
• Legitimate Interest: To improve our services, ensure security, and conduct business operations
• Consent: For marketing communications and non-essential cookies (where applicable)
• Legal Obligation: To comply with applicable laws and regulations

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

For detailed information about the cookies we use, please refer to our Cookie Policy.

Data Sharing and Disclosure

We may share your personal data in the following circumstances:

Service Providers

We may share data with trusted third-party service providers who assist us in operating our business, including:

• Cloud hosting and data storage providers
• Email communication services
• Analytics and marketing platforms
• Payment processing services

Legal Requirements

We may disclose your data when required by law, court order, or to protect our rights and safety.

Business Transfers

In the event of a merger, acquisition, or sale of assets, your data may be transferred to the new entity.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Specifically:

• Account Data: Retained for the duration of your service agreement plus 3 years for legal and business purposes
• Contact Information: Retained for 5 years after last contact or until you request deletion
• Technical Data: Retained for 2 years for security and analytical purposes
• Marketing Data: Retained until you withdraw consent or request deletion

We regularly review our data retention practices and securely delete data that is no longer required.

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data in certain circumstances
• Right to Restrict Processing: Request limitation of how we use your data
• Right to Data Portability: Request transfer of your data to another service provider
• Right to Object: Object to processing based on legitimate interests or for marketing purposes
• Right to Withdraw Consent: Withdraw consent for processing where consent is the legal basis

To exercise any of these rights, please contact us at [email protected] or +351 217 884 973. We will respond to your request within one month.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication systems
• Staff training on data protection practices
• Secure data backup and recovery procedures

International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses approved by the European Commission
• Binding Corporate Rules or certification schemes

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date. We encourage you to review this policy periodically.

Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) or your local supervisory authority if you believe we have not handled your personal data in accordance with applicable law.