Privacy and Cookie Policy

01Data controller

The controller of the personal data collected through this site is the entity identified below. For any privacy-related question, please use the contact address provided.

02What data we collect

We collect only the data needed for the purposes described in this policy:

• Application data: name, email address, LinkedIn profile and the area you are applying for, when you submit the application form.
• Technical data: IP address, device and browser type, logged transiently by the infrastructure serving the site, for security and diagnostics.
• Usage data: pages visited, language and referral source, collected only if you allow analytics cookies.

03Purposes and legal bases

We process your data on the following bases under the General Data Protection Regulation (GDPR):

• Reviewing and replying to speculative applications — steps taken at the request of the data subject prior to entering a contract, Article 6(1)(b).
• Keeping the site secure and preventing automated or abusive submissions — legitimate interest, Article 6(1)(f).
• Measuring site audience through aggregated statistics — consent, Article 6(1)(a), which you may withdraw at any time.

04Cookies and similar technologies

We use local storage and cookies that are strictly necessary for the operation and security of the site, which do not require consent, and analytics cookies, which are only set after you allow them.

The Google Analytics tag is loaded on every page, but in consent mode: until you allow analytics cookies it writes no cookies and collects no identifiers, and only signals to Google that consent is absent. The cookies listed below are set only once you accept.

You can change or withdraw your choice at any time through the cookie settings button in the footer of every page. Withdrawing consent does not affect the lawfulness of processing carried out beforehand.

05Processors and recipients

We do not sell or share your data with third parties for commercial purposes. We rely on the following providers, which process data on our behalf under data processing agreements:

• Vercel Inc. — hosting and delivery of the site.
• Resend (Plus Five Five, Inc.) — delivery of the email messages generated by the application form.
• Google Ireland Limited — Google Analytics 4, subject to consent, and reCAPTCHA, to prevent automated submissions.
• Cloudflare, Inc. — DNS services for the domain.

06International transfers

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on standard contractual clauses approved by the European Commission or on applicable adequacy decisions, complemented by the providers technical and organisational measures.

07Retention periods

We keep speculative applications for as long as needed to assess them and for no more than twelve months from receipt, unless you allow us to keep them longer for future opportunities. Technical logs are kept for short periods defined by our infrastructure providers. Aggregated analytics data is kept for up to fourteen months.

08Your rights

You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time. To exercise these rights, contact us at the address given in this policy; we will reply within the statutory period of one month.

If you believe the processing of your data breaches applicable law, you may lodge a complaint with the Comissão Nacional de Protecção de Dados (CNPD), the competent supervisory authority in Portugal, or with the authority in your country of residence.

09Security

The site is served exclusively over an encrypted connection. We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or improper disclosure, and we limit access to the people who need it for the purposes described.

10Changes to this policy

We may update this policy to reflect legal or operational changes. The date of the last update is shown at the top of this page.