Privacy Policy
1. Data controller
Boundless Intelligence Group Lda., with its registered office at Rua H Parkurbis, Lt 73, 6200-823 Covilhã, Portugal, and Portuguese corporate tax number 519459369 (“Boundless”, “we”), is the controller of the personal data collected through this website, under Regulation (EU) 2016/679 (General Data Protection Regulation, “GDPR”) and Portuguese Law 58/2019 of 8 August.
For any question about this policy or your data, email us at info@boundlessgroup.pt or write to the address above. We have not appointed a data protection officer, as we are not required to under Article 37 GDPR.
2. What data we process
Contact form: name, company, work email, phone number (optional), product of interest and the content of your message. Please do not include special categories of data, such as health data, in your message.
Security check: when you open the contact page, a security service analyses technical signals from your browser, such as your IP address, to tell people apart from automated programs.
Preferences: your language, light or dark mode and cookie choice are stored on your own device, as described in the Cookie Policy.
Connection data: your IP address and the technical details of each request are processed only as far as needed to deliver the pages and protect the service. We do not keep your IP address or the content of the form in our technical logs.
Usage statistics: only if you accept analytics cookies, Google Analytics 4 collects the pages you visit, your device and browser type, your approximate location and a random identifier. Without your consent, none of this is collected.
3. Purposes and legal bases
Answering your request, arranging the demo and, if you ask for one, preparing a proposal: steps taken at your request before entering into a contract, and our legitimate interest in answering business enquiries (Article 6(1)(b) and (f) GDPR).
Protecting the form against abuse and automated submissions, and keeping the website secure: legitimate interest (Article 6(1)(f) GDPR).
Storing your preferences: storage strictly necessary to provide the service you asked for, which requires no consent under Article 5(2) of Portuguese Law 41/2004 of 18 August.
Measuring how the website is used: your consent (Article 6(1)(a) GDPR and Article 5(1) of Law 41/2004), which you can withdraw at any time from “Cookie Settings” in the footer.
We make no solely automated decisions with legal effects on you, and we do not profile you. We do not use your data to send marketing communications without your prior consent.
4. Who receives the data
We use service providers that process the data only on our instructions, under contracts that meet Article 28 GDPR. They fall into these categories: website hosting and infrastructure, sending and receiving email, security checks on the form and, only if you accept analytics cookies, audience measurement through Google Analytics, provided by Google Ireland Limited.
The security-check provider may also process the technical signals as a controller in its own right, to improve its detection of automated programs.
We do not sell your data or share it with third parties for their own purposes. We disclose it to authorities only when the law requires it. You can ask us, at the email above, to identify the providers that process your data.
5. Transfers outside the European Economic Area
The website’s data is hosted in the European Union. Some providers, such as Google, may process data outside the European Economic Area, in particular in the United States. These transfers rely on the European Commission’s adequacy decision on the EU–U.S. Data Privacy Framework of 10 July 2023, or on the standard contractual clauses approved by the Commission.
6. How long we keep the data
Contact requests: up to 24 months after the last interaction. If the contact leads to a contract, the data is kept for the life of the contract and for the applicable legal periods, including tax and accounting ones.
Preferences: for the periods set out in the Cookie Policy. Usage statistics: 14 months, in Google Analytics.
When these periods end, the data is deleted or anonymised.
7. Your rights
Under Articles 15 to 22 GDPR, you have the right of access, rectification, erasure, restriction of processing, portability and objection, including to processing based on our legitimate interest. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before.
To exercise these rights, write to info@boundlessgroup.pt. We reply within one month, which may be extended by two further months where the request is complex, as Article 12 GDPR provides. We may ask you to confirm your identity before replying.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
8. Security
We apply technical and organisational measures appropriate to the risk, under Article 32 GDPR, including encrypted communications, protection of the form against automated submissions and restricted access to the requests we receive. For security reasons, we do not disclose the detail of these measures.
9. Children
This website is intended for businesses and professionals. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy to reflect changes in the law or in how the website works. The date of the last update is shown at the top of the page. If a change affects processing based on your consent, we will ask for it again.