Privacy Policy

1. Introduction

Authuman is committed to protecting your personal data and ensuring compliance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and applicable Portuguese data protection laws.

This Privacy Policy explains how personal data is collected, used, stored, and protected when you visit our website or engage with our services.

By using this website or contacting Authuman, you acknowledge that you have read and understood this Privacy Policy.

2. Data Controller

Authuman is a registered brand operated by Sara Daniela Félix Gomes, who acts as the data controller for the purposes of applicable data protection legislation, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

As data controller, Sara Daniela Félix Gomes is responsible for ensuring that personal data is processed lawfully, fairly, and transparently.

Controller Details:

Sara Daniela Félix Gomes
Rua das Grevilias, Edificio Ondamoura
8125-469 Vilamoura
Portugal
VAT: 246438908
Email: team@authuman.pt

For any questions relating to this Privacy Policy or the processing of personal data, you may contact us at: team@authuman.pt

3. Personal Data We Collect

We collect personal data only when necessary and proportionate to the purpose of our activities.

3.1 Website Visitors

When you access our website, we may process limited technical data such as:

• IP address
• Browser type and version
• Device type
• Date and time of access
• Pages visited and interactions on the website
• Cookie and consent preferences

This information is used for security, website functionality, and — where consent has been given — to understand how visitors interact with the website through analytics tools.

3.2 Contact Inquiries

If you contact us through a form or email, we may collect:

• Name
• Company name
• Email address
• Phone number (if provided)
• Content of your message

3.3 Clients and Prospective Clients

In the context of consultancy and service provision, we may process:

• Professional contact details
• Company information
• Project-related information
• Contractual and billing data

We do not intentionally collect special categories of personal data unless required by law or contract.

4. Legal Basis for Processing

Under GDPR, personal data is processed on the following legal bases:

• Consent (Art. 6(1)(a)) — for website analytics and statistics cookies, and where consent is otherwise explicitly requested.
• Pre-contractual measures (Art. 6(1)(b)) — when responding to inquiries, discussing services, or preparing proposals.
• Contract performance (Art. 6(1)(b)) — when delivering agreed services.
• Legitimate interest (Art. 6(1)(f)) — for website security, fraud prevention, and basic operational integrity.
• Legal obligation (Art. 6(1)(c)) — for accounting, tax, and regulatory compliance.

Where consent is relied upon, it may be withdrawn at any time.

5. Purpose of Processing

Personal data is processed strictly for the following purposes:

• Responding to inquiries and communication requests
• Providing consultancy and operational services
• Managing contractual relationships
• Issuing invoices and fulfilling legal obligations
• Maintaining website functionality and security
• Understanding website usage through analytics, where consent has been given
• Improving service quality and website performance

Personal data is not used for automated decision-making that produces legal or similarly significant effects without human oversight.

6. Use of AI and Automation Tools

As part of its operational and consultancy services, Authuman may use AI-assisted tools and automation systems.

Such tools are used strictly to support efficiency and analysis. Final decisions and outputs involving client matters are subject to human oversight.

Where personal data is processed through digital tools, appropriate data protection safeguards are applied.

7. Data Sharing and Processors

Personal data may be processed by trusted third-party service providers supporting:

• Hosting and infrastructure
• Email communications
• Website analytics and technical services
• Consent management services
• Payment and accounting services
• Operational software tools

These providers act as data processors and are bound by contractual obligations ensuring confidentiality, security, and GDPR compliance.

We do not sell personal data.

8. International Data Transfers

Where service providers operate outside the European Economic Area (EEA), appropriate safeguards are implemented, including:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions adopted by the European Commission

Data transfers are conducted in accordance with GDPR requirements.

9. Data Retention

Personal data is retained only for as long as necessary for the purposes described in this policy, including:

• Inquiry data: up to 24 months after last contact
• Contractual and accounting data: as required by Portuguese law (typically 10 years)
• Marketing data: until consent is withdrawn

After the applicable retention period, data is securely deleted or anonymised.

10. Your Rights Under GDPR

You have the following rights:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability
• Right to object
• Right to withdraw consent at any time
• Right to lodge a complaint with the supervisory authority

In Portugal, the supervisory authority is: Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt

To exercise your rights, please contact: team@authuman.pt

11. Cookies and Technical Data

This website uses cookies and similar technologies to ensure proper functionality, improve security, and — where consent has been given — understand how visitors interact with the website.

Some cookies are strictly necessary for the operation of the website. Other cookies, including statistics cookies, are only activated with your consent.

Users can accept, reject, or manage their cookie preferences through the consent banner or at any time via the Cookie Settings link available on the website.

For more detailed information about the cookies currently in use, please consult our Cookie Policy.

12. Security Measures

Authuman implements appropriate technical and organisational measures to protect personal data against:

• Unauthorized access
• Accidental loss
• Alteration
• Disclosure

Access to personal data is restricted to authorised individuals only.

13. Changes to This Policy

This Privacy Policy may be updated periodically to reflect legal, technical, or operational changes.

The most current version will always be available on our website.