Who we are
Arcanex Unipessoal Lda (“Arcanex”, “we”) is the controller of the personal data described in this policy. Our registered office is Rua D. Filipa de Lencastre 9, 2510-453 Amoreira, Portugal, NIPC 518081869. For anything related to your data, write to hello@arcanex.pt.
What this website collects
This website sets no cookies, runs no analytics or tracking, and loads no third-party fonts or scripts. Our hosting provider keeps standard server logs (IP address, date and time, requested page, browser type) for security and troubleshooting. We delete these logs after 14 days.
When you contact us
If you email us or use our contact form, we process your name, email address, company and message so we can reply and, where relevant, prepare an offer. We rely on steps prior to a contract (Art. 6(1)(b) GDPR) and on our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR). We keep this correspondence for as long as the enquiry and any resulting business relationship need it, and for the periods Portuguese tax and commercial law require for business records.
To keep spam out, our forms use ALTCHA, an open-source check we host ourselves. Your browser solves a small calculation in the background. It sets no cookies, does not track you and sends nothing to third parties.
When you apply for a role
If you apply, we process your name, contact details, CV and anything else you choose to share, to assess your application. We rely on steps prior to a contract (Art. 6(1)(b) GDPR). Our application form passes your data straight to our recruitment mailbox, and the website itself stores none of it. We keep applications for 6 months after the role is filled. With your consent (Art. 6(1)(a) GDPR) we keep your profile longer to consider you for future roles, and you can withdraw that consent at any time.
Who processes data for us
We work with a small number of providers, each under a data processing agreement.
- IONOS, website hosting in EU data centres
- Microsoft, email, under the EU Data Boundary
- An EU-based email delivery provider, for sending form submissions to our mailbox
We never sell personal data and never use it for advertising.
Transfers outside the EU
We keep data in the EU wherever we can. Where a provider may access data from outside the EU or EEA, the transfer is covered by an adequacy decision or the European Commission’s Standard Contractual Clauses.
Your rights
You can ask to access, correct, delete, restrict or port your data, object to processing based on our legitimate interest, and withdraw consent at any time. Write to hello@arcanex.pt and we will answer within one month. You can also lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (cnpd.pt).
Changes
We update this policy when our processing changes. The date at the top shows the current version.