Legal documentation
Privacy Policy
1. Data controller
Ahkoris Lda, registered in Vila Nova de Gaia, Portugal. NIF (Portuguese Tax ID) 519402901.
Privacy contact: privacy@ahkoris.com
Ahkoris has not appointed a Data Protection Officer, as it does not consider itself subject to a mandatory DPO appointment under Article 37 GDPR. Privacy requests and questions are nevertheless centralised through the contact above.
2. Personal data processed
In connection with the website and Ahkoris's services, the following personal data may be processed:
- Contact data — name, email address, company, voluntarily provided through forms or direct communications;
- Scheduling data — name, email and availability information, collected via the Zeeg scheduling system (zeeg.me), only when the user chooses to load the scheduler or accepts external services;
- Browsing and technical data — IP address, browser type, pages visited, access date/time, technical preferences and information necessary for website security, availability and operation.
3. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Responding to contact requests and commercial proposals | Pre-contractual steps (Art. 6(1)(b)) |
| Scheduling diagnostic meetings | Consent (Art. 6(1)(a)) |
| Performance of consultancy contracts | Contract performance (Art. 6(1)(b)) |
| Compliance with legal obligations (invoicing, accounting) | Legal obligation (Art. 6(1)(c)) |
| Website security and integrity | Legitimate interests (Art. 6(1)(f)) |
4. Recipients and transfers
Personal data is not sold or shared with third parties for marketing purposes. Data may be shared with:
- Zeeg (Deezel GmbH, Germany) — scheduling service provider, loaded only after user choice;
- Hetzner Online GmbH (Germany) — hosting and infrastructure provider (Frankfurt, DE), ISO 27001 certified, subject to GDPR;
- LinkedIn — external institutional page; the website only provides links and navigation to LinkedIn is initiated by the user;
- Competent authorities — when legally required.
Some providers or external pages may involve processing outside the European Economic Area or by entities subject to third-country laws. Where this applies to processing under Ahkoris's responsibility, appropriate GDPR safeguards will be adopted, including adequacy decisions, standard contractual clauses or supplementary measures where necessary.
5. Retention periods
Data is retained for the period necessary for the purpose for which it was collected, or for the legally required period. Contact data from prospective clients is deleted within 12 months of the last contact, if no contractual relationship is established.
6. Data subject rights
Under the GDPR, data subjects have the right to:
- Access, rectification and erasure of their data;
- Restriction of processing and objection;
- Data portability (where applicable);
- Withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
To exercise your rights, contact privacy@ahkoris.com, indicating the right you wish to exercise and the information needed to confirm your identity and locate the request. Ahkoris will respond within the GDPR deadlines and may request additional information where necessary.
You also have the right to lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados — Portuguese Data Protection Authority), Av. D. Carlos I, 134 — 1.º, 1200-651 Lisbon, Portugal, geral@cnpd.pt, www.cnpd.pt.
7. Cookies and similar technologies
This website does not use behavioural advertising cookies or third-party behavioural analytics tools. Necessary technologies may be used for technical preferences, such as language and external-service choices.
The Zeeg scheduling service is loaded only after consent or an explicit user action to load the scheduler. Further information is available in the Cookie Policy.
8. Automated decisions, profiling and minors
Ahkoris does not use data collected through the website for solely automated decisions producing legal or similarly significant effects, nor for behavioural profiling.
The website and Ahkoris services are not directed at minors. If undue collection of minors' data is identified, appropriate steps will be taken to delete or regularise the processing.
9. Security
Ahkoris adopts appropriate technical and organisational measures to protect personal data against unauthorised access, loss or disclosure, including encrypted communications (HTTPS) and HTTP security headers.
10. Changes
This Privacy Policy may be updated. The version in force is always the one published at this address. Significant changes will be communicated appropriately.