Note on this translation. This policy has been translated from Portuguese for your convenience. In the event of any discrepancy or doubt over its interpretation, the Portuguese version prevails; that is the official version.
1. Who the controller is
The controller of the personal data collected through this website is:
- Strong Answer, Lda
- Portuguese tax number: 510 413 277
- Registered office: Cercas S. José, Bloco 9A, Loja 1 — 8400-314 Lagoa, Algarve, Portugal
- Phone: +351 282 085 534
- Email: info@sasuite.app
For any question about privacy or data protection, including exercising the rights described in section 9, write to us at info@sasuite.app.
2. What data we collect
2.1. Data you give us directly
When you fill in the contact form on the site, we collect:
- Your name and email address (required);
- Your company and phone number (optional);
- The content of the message you write to us.
We do not ask you for special category data (health, beliefs, trade union membership, among others). Please do not include any in your message.
2.2. Data collected automatically
If you allow analytics cookies, Google Analytics collects browsing data — pages viewed, length of visit, device and browser type, traffic source and approximate location at city level. This data is processed in aggregate and is not used to identify you.
If you do not allow them, none of this data is collected. Google Analytics is only activated after explicit consent, through Google Consent Mode v2.
Regardless of consent, the server hosting the site (Vercel) automatically logs HTTP requests, including IP address, for security and abuse prevention. These technical logs are necessary for the service to run.
3. Purposes and legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering your enquiry or demo request | Name, email, company, phone, message | Art. 6(1)(b) — steps taken at your request prior to entering into a contract |
| Measuring and improving use of the site | Browsing data (Google Analytics) | Art. 6(1)(a) — your consent |
| Keeping the site secure and available | Server technical logs, IP address | Art. 6(1)(f) — legitimate interest in protecting the service |
| Recording your cookie choice | Preference stored in your browser | Art. 6(1)(c) — legal obligation to demonstrate consent |
We do not use your data for automated decision-making or profiling.
4. Cookies we use
Cookies are small files stored on your device. We use only two kinds: strictly necessary cookies and, with your permission, analytics cookies. We do not use advertising cookies and we do not share data with ad networks.
4.1. Strictly necessary
| Name | Source | Purpose | Duration |
|---|---|---|---|
sasuite_consent |
sasuite.app (localStorage) | Stores your cookie choice so we do not have to ask again | 6 months |
These cannot be turned off: without them we cannot respect your decision or demonstrate that we obtained it.
4.2. Analytics and statistics (only with your consent)
| Name | Source | Purpose | Duration |
|---|---|---|---|
_ga |
Google Analytics | Distinguishes visitors in order to count sessions | 2 years |
_ga_GQ2JFB8B3R |
Google Analytics | Maintains session state | 2 years |
If you withdraw consent, we stop writing these cookies and delete any this site has already set.
4.3. How to manage your choice
You can change or withdraw consent at any time, without affecting the lawfulness of processing carried out beforehand:
You can also block or delete cookies in your browser settings. If you do, the site keeps working normally — we simply stop being able to measure how it is used.
5. Who we share your data with
We do not sell or trade personal data. We use the following processors, which handle data on our behalf under a contract binding them to the GDPR:
| Processor | Service | Data it accesses |
|---|---|---|
| Vercel Inc. | Website hosting and running the form | Technical logs, form data in transit |
| Resend (Plus Five Five, Inc.) | Sending the email generated by the contact form | Name, email, company, phone and message |
| Google Ireland Ltd. | Google Analytics (only with consent) | Aggregated browsing data |
We may also disclose data where legally required to do so by a competent authority.
This site loads no third-party resources. The typefaces, icons, stylesheets and the rest of the code are served from sasuite.app, so no other server receives your IP address when a page opens. The one exception is Google Analytics, which is only downloaded after you allow it.
6. International transfers
Some of the processors above are based in the United States of America. Those transfers take place under the Standard Contractual Clauses approved by the European Commission and, where applicable, certification under the EU–U.S. Data Privacy Framework, with supplementary technical measures such as encryption in transit and at rest.
7. How long we keep data
- Contact messages: up to 24 months after the last interaction, unless the relationship becomes a contract — in which case the statutory accounting and tax retention periods apply (10 years).
- Google Analytics data: 14 months, the shortest period configurable on the platform.
- Cookie preference: 6 months, after which we ask you again.
- Server technical logs: according to the host's retention policy, typically up to 30 days.
8. Security
We take technical and organisational measures appropriate to the risk: encrypted communication over HTTPS/TLS across the whole site, mailbox access restricted to authorised staff, security headers on the server, and keeping the data we collect to what is strictly necessary. No system is infallible; should a data breach occur that poses a high risk to your rights, we will notify you and the CNPD under Articles 33 and 34 of the GDPR.
9. Your rights
As a data subject, you have the following rights:
- Access — to know what data of yours we process and obtain a copy;
- Rectification — to correct inaccurate or incomplete data;
- Erasure — to ask for the data to be deleted, where there is no ground to keep it;
- Restriction — to restrict processing in certain circumstances;
- Portability — to receive your data in a structured, commonly used format;
- Objection — to object to processing based on legitimate interest;
- Withdrawal of consent at any time, without affecting the lawfulness of processing carried out beforehand.
To exercise any of these rights, write to info@sasuite.app. We reply within one month at most, extendable by two months in complex cases, and we will tell you if that extension applies. We may ask for further details to confirm your identity.
If you consider that the processing of your data breaks the law, you have the right to lodge a complaint with the supervisory authority:
- Comissão Nacional de Protecção de Dados (CNPD) — the Portuguese data protection authority
- Av. D. Carlos I, 134 — 1.º, 1200-651 Lisbon, Portugal
- www.cnpd.pt
10. Changes to this policy
We may update this policy to reflect legal changes or changes in the services we use. The date of the last update is shown at the top of the page. If a change is substantial and affects processing based on your consent, we will ask for fresh consent before applying it.