Privacy Policy

1. Who processes your data

The controller of the personal data collected through the Remarks application is the entity identified on the Legal Information page (Provider Identification).

For any data-protection matter, please use the contact indicated there.

2. What data we collect

Account data: name, e-mail address, employee number, permission group and department(s).

Content you enter: non-conformities (remarks), comments, drawings, feedback and service requests, including any attachments or images you add.

Technical data: browser information (user agent) associated with feedback, and server logs (which may include the IP address) used for security and troubleshooting.

3. Purposes and legal basis

We use the data to authenticate access, manage the flow of non-conformities, inspections and corrective actions, provide support and improve the application.

Processing is based on the performance of the contract/relationship with the using organisation, compliance with applicable legal obligations, and the legitimate interest in managing and securing the service.

4. Who we share it with

Processors that provide services to us: Atlassian (Jira and Confluence), when service requests/feedback are synchronised to Jira or documentation is published; the e-mail delivery provider (for password recovery); and the application hosting provider.

Transfers outside the European Economic Area may occur under appropriate safeguards (e.g. the European Commission's Standard Contractual Clauses). We do not sell personal data to third parties.

5. How long we keep it

We keep data while the account and service are active and for as long as necessary for the purposes above and to meet legal obligations. Specific retention periods are defined by the organisation responsible for the processing.

6. Your rights

You may request access to, rectification, erasure, restriction or portability of your data, and object to certain processing, via the data-protection contact listed in the Legal Information.

You also have the right to lodge a complaint with the supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).

7. Cookies

The application uses only strictly necessary and functional cookies: a session cookie to keep you signed in, and a language-preference cookie. These cookies are essential to the operation and to delivering the service you request, so they do not require prior consent.

We do not use advertising, analytics or third-party tracking cookies. Should any be introduced, your consent will be requested and this policy updated.

8. Security

We apply appropriate technical and organisational measures, including role-based access control, encryption of sensitive secrets and the use of secure connections (HTTPS).

9. Changes

This policy may be updated. The date of the last update is shown at the top. We recommend checking it periodically.