Privacy Policy

Data controller

escalla is the controller of the personal data collected through this site and decides the purposes and means of that processing.

For any question about personal data, including exercising your rights, write to geral@escalla.pt.

What we collect

Only what you voluntarily send through the contact form: name, email address, company name (optional) and the message you write.

We do not collect data through tracking cookies, we use no third-party analytics, and we build no profiles. The request IP address is held in memory only, for a few minutes, purely to rate-limit abusive form submissions.

What we use it for

To answer your request and to carry out the preliminary steps towards a possible engagement. We do not use your data for marketing and we do not sell it to third parties.

The legal bases are your consent, given when you submit the form, and pre-contractual steps taken at your request, under Article 6(1)(a) and 6(1)(b) GDPR.

Who processes data for us

Email delivery is handled by Resend, Inc., acting as a processor, which may process the data in the United States. That transfer is covered by the Standard Contractual Clauses approved by the European Commission.

The site is hosted by Vercel Inc. No other third party receives the data you submit.

How long we keep it

Contact messages are kept for 24 months from our last contact with you, after which they are deleted. If the request leads to a contract, the associated data is then kept for the statutory periods that apply to the contractual relationship and to tax obligations.

Security

All traffic to this site is encrypted in transit over HTTPS. Access to the messages we receive is limited to those at escalla who need to read them in order to answer your request.

We take no solely automated decisions and build no profiles from the data you send us. The form is not intended for anyone under 16, and we do not knowingly collect data from minors.

Storage in your browser

The site sets no cookies. It stores a single entry in your browser's local storage:

That entry is strictly functional within the meaning of Article 5(3) of the ePrivacy Directive, so it requires no prior consent. You can clear it at any time from your browser settings.

• escalla.locale-hint: records that you have dismissed the language notice, so it is not shown again.

Your rights

As a data subject you have the right to:

To exercise any of these rights, write to geral@escalla.pt. We reply within one month. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

• access the data we hold about you;
• ask for incorrect or incomplete data to be corrected;
• ask for the data to be erased;
• ask for processing to be restricted;
• object to the processing;
• receive the data in a structured, commonly used format;
• withdraw consent at any time, without affecting the lawfulness of earlier processing.

Changes to this policy

If we change this policy we update the date at the top of the page. Material changes are notified by email to anyone with an active conversation with us.