Privacy Policy

1. Data controller

The controller of the personal data collected through the website onegest.com is Idealbrand Unipessoal Lda, owner of the ONEGEST trade mark, Tax ID (NIF) PT515295515, with its registered address at Avenida da Liberdade 615, 1º, 4710-251 Braga, Portugal, UE. For any question relating to your personal data, you can write to us at info@onegest.com or call +351 965853634.

2. What data we collect

We collect personal data mainly through the contact and assessment forms on the Site:

• Name;
• Company name (where applicable);
• Telephone number;
• Email address;
• Service(s) of interest selected;
• Content of the message you write to us.

For support requests (Support page or chat), we also collect the company's tax ID (NIF/CIF), the subject and description of the issue, and the messages exchanged until it is resolved. To measure use of the Site, we collect technical browsing data (pages viewed, source of the visit, device type, browser, language and approximate country based on the time zone), without using third-party services — see the Cookie Policy.

We do not collect special categories of data (Article 9 GDPR) through the Site. If, in the course of a service already contracted, it becomes necessary to access personal data of third parties (for example, the client's employees, when managing email or backups), that relationship is governed by the service agreement and by our Data Protection (GDPR) for Clients page, not by this policy, which relates only to visitors to and contacts made through the Site.

3. Purposes and legal basis for processing

• Responding to contact requests and requests for a free assessment — basis: pre-contractual measures taken at the request of the data subject (Article 6(1)(b) GDPR).
• Managing the commercial relationship and sending proposals — basis: performance of a contract or pre-contractual measures.
• Sending communications about our services (only if the data subject expressly authorises it) — basis: consent (Article 6(1)(a) GDPR), which may be withdrawn at any time.
• Providing technical support to clients (tickets) — basis: performance of the service agreement (Article 6(1)(b) GDPR).
• Measuring Site audience — basis: consent, when you accept statistics cookies; without consent, only aggregated measurement without cookies, based on our legitimate interest in keeping the Site operational and secure (Article 6(1)(f) GDPR).
• Compliance with legal obligations (for example, tax and accounting obligations, once the contractual relationship has been established) — basis: legal obligation (Article 6(1)(c) GDPR).

4. Retention period

Data collected through the contact form is kept for as long as necessary to respond to the request and, if it gives rise to a contractual relationship, for the legal retention period for commercial and tax documents (as a general rule, 10 years from the end of the contractual relationship). Requests that do not give rise to a contractual relationship are kept for a maximum of 24 months, after which they are deleted or anonymised.

5. Recipients and processors

Your data is not sold or passed on to third parties for marketing purposes unrelated to ONEGEST. The following processors may have access to it, exclusively for the technical processing of the form and of the commercial relationship:

• Hostinger (hosting of the Site and of the database in which contact and support requests are stored, and sending of automatic confirmation and notification emails);
• Google (only if the chat assistant is in AI mode: the text of chat questions is processed by the Gemini model to generate the reply);
• Cegid (only for clients who have contracted the ERP service, in the context of managing the business management and invoicing software).

Some of these processors may process data on servers located outside the European Economic Area (for example, in the United States). In such cases, we ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission or equivalent certification mechanisms (e.g. the EU-U.S. Data Privacy Framework).

6. Your rights

Under Articles 15 to 22 GDPR, you have the right to:

• Access the personal data we process about you;
• Request its rectification, if it is inaccurate or incomplete;
• Request its erasure, where applicable ("right to be forgotten");
• Request the restriction of processing, in certain circumstances;
• Object to processing, in particular for direct marketing purposes;
• Request the portability of your data to another controller;
• Withdraw your consent at any time, without affecting the lawfulness of processing carried out before.

You can exercise these rights by writing to us at info@onegest.com. We will reply within a maximum of one month, in accordance with Article 12 GDPR.

You also have the right to lodge a complaint with the competent supervisory authority: in Spain, the Agencia Española de Protección de Datos (AEPD) — www.aepd.es; in Portugal, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

7. Data security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or accidental or unlawful alteration, in particular: encrypted transmission (HTTPS) across the whole Site, restricted access to client data, and the engagement of processors offering appropriate security guarantees.

8. Minors

The Site and ONEGEST's services are aimed at businesses and professionals, not at minors. We do not knowingly collect personal data from minors.

9. Changes to this policy

This Privacy Policy may be updated from time to time to reflect legal, regulatory or operational changes. The date of the last update is always shown at the top of this page.