Privacy Policy

1. Data controller

The controller responsible for processing personal data is:

Eduardo Silva, trading commercially under the brand esDEV.

For questions related to personal data protection, or to exercise your rights, you may contact us through:

• Email: geral@esdev.pt
• Contact form: https://www.esdev.pt/en#contacto
• WhatsApp: +351 967 309 924

2. Personal data we collect

Depending on how you contact us, we may process the following categories of personal data:

Through the contact form

• Name;
• Email address;
• Subject;
• Message content.

Certain technical data, such as the IP address or connection-related information, may also be processed when necessary to ensure the security of the website and prevent abusive use, such as repeated or automated message submissions.

Through email

When you contact us directly by email, we process the data you provide in that communication, including your email address, name, contact details and the content of the message.

Through WhatsApp

If you choose to contact esDEV through WhatsApp, we may process your phone number and the content of the communication you send us.

We do not request, through the website, data such as national ID numbers, bank details or payment data.

We recommend that you do not submit, through the form or other contact channels, personal data that is not necessary to handle your request.

3. Purposes and legal grounds for processing

Personal data collected through the contact channels is used to:

• Respond to contact and information requests;
• Understand the needs presented by a potential client;
• Prepare commercial proposals when requested;
• Contact the data subject regarding the request made;
• Enter into and perform contracts, where applicable;
• Comply with legal obligations to which esDEV is subject;
• Ensure the security and proper functioning of the systems and services used by esDEV.

Depending on the specific purpose, processing may be based on:

• Taking steps prior to entering into a contract, at the data subject's request, when the contact is intended to prepare a possible engagement;
• Performance of a contract, where a contractual relationship exists;
• Compliance with legal obligations;
• esDEV's legitimate interest, namely to manage communications, ensure system security and prevent abusive use, provided that the rights and freedoms of data subjects do not override that interest.

Article 6 of the GDPR provides for, among others, pre-contractual steps, contract performance, compliance with legal obligations and legitimate interest as possible legal grounds for processing personal data.

Data collected through contact is not currently used to send newsletters or advertising campaigns.

Should esDEV use the data for direct marketing purposes in the future, such processing will be carried out in accordance with applicable legal requirements, including obtaining consent when legally required.

4. Who we share data with

esDEV does not sell or trade the personal data of its contacts.

To provide and operate the website, the contact system and the email service, we may rely on technology service providers that process certain data on our behalf, namely:

• Vercel — website hosting and infrastructure, as well as usage statistics through Vercel Analytics;
• Resend — processing and delivery of messages submitted through the contact form and any automated messages associated with it;
• Google Workspace / Gmail — service used to provide and manage the geral@esdev.pt mailbox, where received communications may be stored;
• Google reCAPTCHA — anti-spam verification on the contact form, when this protection is active;
• WhatsApp / Meta — service used should the data subject choose to contact esDEV via WhatsApp.

Service providers may process personal data in different jurisdictions. Where personal data is transferred outside the European Economic Area, the transfer mechanisms provided for under the GDPR will apply, including, where applicable, adequacy decisions or standard contractual clauses and other legally required safeguards.

5. Retention period

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected, without prejudice to retention periods imposed by law.

Contact requests without engagement

Where no contractual relationship exists, data may be retained for the period necessary to respond to the request and carry out any related contacts, generally being deleted or no longer used for that purpose within 12 months after the last contact, unless there is a legitimate reason or legal obligation justifying its retention for a longer period.

Clients and contracted projects

Where a proposal has been accepted, a contractual relationship exists, or invoicing obligations apply, certain data may be retained for the period necessary to fulfil the contract and applicable legal obligations, namely accounting and tax obligations.

The retention period may also be extended where necessary for the exercise or defence of rights in judicial or administrative proceedings.

6. Data subject rights

Under the GDPR, and within the legally established conditions and limits, data subjects may exercise the following rights:

• Right of access to your personal data;
• Right to rectification of inaccurate or incomplete data;
• Right to erasure of data;
• Right to restriction of processing;
• Right to data portability, where applicable;
• Right to object to processing, where applicable.

The CNPD (Portuguese data protection authority) confirms these rights and states that their exercise must be facilitated by the controller.

To exercise any of these rights, you may contact esDEV through geral@esdev.pt.

Requests will be reviewed and answered within the legally applicable time limits. As a general rule, the CNPD indicates a one-month period for responding to requests to exercise rights, without prejudice to the situations provided for in the GDPR allowing for an extension.

Exercising these rights is, in principle, free of charge. Additional information may be requested to confirm the identity of the requester where necessary to protect personal data.

7. Complaints to the supervisory authority

If you consider that the processing of your personal data violates the GDPR or applicable law, you have the right to lodge a complaint with the competent supervisory authority.

In Portugal, the supervisory authority is the:

Comissão Nacional de Proteção de Dados (CNPD)

You can visit the CNPD website at:

https://www.cnpd.pt/

8. Automated decisions and profiling

The esDEV website does not use exclusively automated decision-making or profiling mechanisms that produce legal effects, or similarly significant effects, on data subjects.

9. Cookies and statistics

esDEV does not currently use cookies for advertising, marketing, or social-media tracking purposes.

The website uses Vercel Analytics to obtain usage statistics. Under the configuration currently in use, these statistics do not rely on identifying cookies.

The contact form may use Google reCAPTCHA v3 to reduce automated submissions. In that case, Google processes usage data in accordance with its own privacy policy and terms, referenced next to the form.

Should cookies or other technologies requiring consent under applicable law be introduced in the future, appropriate information and consent mechanisms will be implemented before their use, where legally required.

10. Security

esDEV seeks to apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, disclosure, or accidental or unlawful destruction.

Despite the measures adopted, no system for transmitting or storing information over the Internet can be considered completely secure.

11. Changes to this Privacy Policy

This Privacy Policy may be updated whenever necessary, namely as a result of changes to the website, the services used, or applicable law.

The most recent version will always be available on this page, with the corresponding update date indicated at the beginning of the document.

Last updated: 24 August 2026