Privacy Policy
This policy explains what personal data we collect through starthrop.com, what we use it for, on what legal basis, how long we keep it, and how you can exercise your rights. Written in plain language.
01Who the controller is
STARTHROP DYNAMICS, UNIPESSOAL LDA, legal person no. 519488261, with its registered office at Rua da Sociedade, n.º 4, 2695-567 São João da Talha, Portugal. Further formal identification is on the Legal Notice page.
For any question about this policy or about your personal data, write to info@starthrop.com.
No Data Protection Officer has been appointed.
02What data we collect
We collect only the data you send us through the contact form:
- Name — optional.
- Email address — required: without it we have no way to reply, and the form will not send the message.
- Message — required, containing whatever you choose to write.
In order to deliver the pages to you, the hosting service technically processes each request to the server, which involves data such as the IP address, the date and time of the request and the browser type. These records are inherent to the operation of any website and are not used by us to identify visitors. They are generated and kept by the hosting provider under its own policies: we do not set that period and we do not have access to those records.
We do not collect data through cookies or any tracking technology. See the Cookie Policy.
03What we use your data for
Solely to receive your message, reply to you, and follow up on the conversation you start.
We do not use your data for newsletters, marketing, advertising, profiling or automated decision-making, and we do not sell or share it for commercial purposes.
04On what basis we process it
- Pre-contractual steps, where your enquiry concerns a possible provision of services, partnership or commercial relationship — Article 6(1)(b) GDPR.
- Legitimate interest of Starthrop Dynamics in receiving and responding to general communications related to its activity — Article 6(1)(f) GDPR. You may object to this processing at any time.
We do not ask for your consent for this processing, because consent is not the applicable legal basis: the form has no consent checkbox and the data is used only to answer the enquiry you sent us.
05Who has access to your data
- Netlify, Inc. — website hosting and form service. Messages sent through the form are stored in the project dashboard.
- Google — the email service where we receive the notification of each message, at info@starthrop.com.
Both act as processors, meaning they handle the data on our behalf and under our instructions. Netlify in turn uses its own sub-processors; the up-to-date list is published and maintained by Netlify itself.
We do not disclose your data to anyone else, unless legally required to do so.
06International transfers
Netlify, Inc. is a company based in the United States of America. According to Netlify's public documentation, data transfers are covered by the EU-U.S. Data Privacy Framework — including the UK Extension and the Swiss-U.S. Data Privacy Framework — and, where applicable, by the Standard Contractual Clauses approved by the European Commission through Implementing Decision (EU) 2021/914. Netlify's data processing agreement is incorporated into its terms and conditions.
We do not state a specific physical storage region because that information is not publicly confirmed by the provider. We prefer not to assert what we cannot verify.
You may ask us by email for details of the applicable safeguards and where to consult them. We reply with the provider references in force at the date of the request.
07How long we keep it
Messages received through the contact form will be kept for up to 12 months after the last contact, except where they need to be kept longer for a commercial or contractual relationship, compliance with a legal obligation, or the defence of legal claims.
The 12 months are an operational decision by Starthrop Dynamics, taken by applying the principles of data minimisation and storage limitation. They are not a period directly imposed by law.
In practice, we review the messages stored in the hosting provider's dashboard and in the info@starthrop.com mailbox every month, and delete them in both places.
08Your rights
Under the GDPR, and on the conditions set out therein, you have the right to:
- Access — know what data of yours we process and obtain a copy.
- Rectification — correct inaccurate or incomplete data.
- Erasure — ask for your data to be deleted.
- Restriction — ask us to suspend processing in certain situations.
- Objection — object to processing based on legitimate interest.
- Portability — receive the data in a structured, commonly used format, where applicable.
To exercise any of these rights, simply write to info@starthrop.com. We may need to confirm your identity before proceeding. We reply within one month, extendable as provided by law where the request is complex — and in that case we will tell you.
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt.
09Security
The site is served exclusively over an encrypted connection (HTTPS). The form includes a hidden automated bot-detection field, which collects no information about you. Access to received messages is limited to company accounts.
10Cookies
As at the last check, this site used no cookies and no local storage on your device. The details, and what we checked in order to be able to state that, are in the Cookie Policy.
11Changes to this policy
If this policy changes, we publish the new version on this page, with a new version number and a new effective date. The European Portuguese version is the canonical one; the other languages are faithful translations of the same text.