Privacy policy

1. Data controller

The entity responsible for processing your personal data is Broccolli.xyz, based in Porto, Portugal. Contact: sales@broccolli.xyz.

2. Data we collect

• —Identification and contact data: name, company, email address — provided voluntarily through the contact form.
• —Browsing data: pages visited, time on site, traffic source — collected via Google Analytics 4 only with your prior and explicit consent.
• —Communication data: content of messages sent through the contact form or by email.

3. Purpose and legal basis for processing

• —Responding to contact requests and providing information about our services — legal basis: pre-contractual measures (Art. 6(1)(b) GDPR).
• —Website performance analysis via Google Analytics 4 to improve user experience — legal basis: consent (Art. 6(1)(a) GDPR). Google Analytics is only activated after your explicit consent via the cookie banner.
• —Compliance with legal obligations — legal basis: legal obligation (Art. 6(1)(c) GDPR).

4. Retention periods

Contact data is retained for the period necessary to provide the requested service and for a maximum of 3 years after the last contact. Analytics data in Google Analytics is retained for 14 months (default setting). After those periods, data is deleted or anonymised.

5. Cookies and tracking

• —This website uses analytics cookies (Google Analytics 4) only with your explicit consent.
• —Before you accept, Google Analytics is not loaded and no cookies are placed on your device.
• —You may withdraw your consent at any time by clearing browser data or contacting us.
• —We do not use advertising, remarketing, or social media cookies.

6. Sharing data with third parties

• —We do not sell or share your personal data with third parties for commercial purposes.
• —We may share data with service providers who support the operation of our website (e.g. email services, Google Analytics), always under a data processing agreement with adequate safeguards.
• —Google LLC acts as a sub-processor for analytics purposes. Google has committed to compliance with the Standard Contractual Clauses approved by the European Commission.

7. International transfers

Data processed by Google Analytics may be transferred to Google's servers in the United States. This transfer is carried out under the Standard Contractual Clauses approved by the European Commission and the EU-US Data Privacy Framework.

8. Your rights

• —Right of access: you can request a copy of the data we hold about you.
• —Right to rectification: you can request the correction of inaccurate or incomplete data.
• —Right to erasure: you can request deletion of your data, except where processing is required by law.
• —Right to restriction: you can request suspension of processing in certain circumstances.
• —Right to portability: you can receive your data in a structured, machine-readable format.
• —Right to object and withdraw consent: you may withdraw your analytics consent at any time via the cookie banner or by contacting us.
• —To exercise any of these rights, contact us at sales@broccolli.xyz.

9. Right to lodge a complaint

If you believe that processing of your data violates the GDPR, you have the right to lodge a complaint with the Portuguese data protection authority (CNPD): www.cnpd.pt, or with the supervisory authority in your country of residence.

10. Changes to this policy

We may update this policy periodically. The date of last update is shown at the top of this page. Significant changes will be communicated by email if we have your contact details.