Privacy Policy

1. Data controller

The controller of your personal data is IrisTech, Lda. ("IRIS Tech"), located at Praceta Teixeira Gomes, n.º 7, 2700-801 Amadora, Portugal.

For any data protection matter, contact us at [email protected].

2. What data we collect

Contact and professional data you voluntarily provide in the website forms: name, email, phone number, professional area and seniority, location/availability, LinkedIn profile, message and the CV file you choose to attach.

Technical data collected automatically in aggregate (e.g. via analytics cookies, where you consent): pages visited and usage statistics. See the Cookie Policy.

We do not intentionally collect special categories of data (e.g. health, beliefs). Please do not include such information in your CV or messages.

3. Purposes and legal basis

Responding to contact and proposal requests — pre-contractual steps and our legitimate interest in communicating with clients and prospects.

Managing spontaneous applications and recruitment processes — based on your consent and on pre-contractual steps taken at your request.

Complying with applicable legal obligations and, where you consent, improving the website through usage statistics.

4. Recipients and processors

Your data may be processed by service providers acting on our behalf and under our instructions (processors), namely hosting/infrastructure and transactional email services, with contractual data protection safeguards.

In a recruitment context, and only with your authorisation, data may be shared with the client company you apply to. We do not sell your personal data.

5. International transfers

Where a provider processes data outside the European Economic Area, we ensure adequate safeguards (e.g. adequacy decisions or the European Commission's standard contractual clauses).

6. Retention period

We keep data only for as long as necessary for the stated purposes. Contact data is kept for the duration of the relationship or while handling your request.

CVs from spontaneous applications are kept for a defined period (to be confirmed with IRIS Tech, e.g. 12 months), after which they are deleted unless you renew your consent.

7. Your rights

You have the right to access, rectify, erase, restrict and object to the processing of your data, as well as the right to data portability and to withdraw consent at any time (without affecting the lawfulness of prior processing).

You can exercise these rights at [email protected]. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD — www.cnpd.pt).

8. Security

We adopt appropriate technical and organisational measures to protect your data against unauthorised access, loss, alteration or disclosure, including encrypted connection (HTTPS) and access control.

9. Changes to this policy

This policy may be updated. We will publish the current version on this website, with its update date.