This Privacy Policy describes how Corebrands,Lda. , owner of the Ignyten website and hereinafter referred to as the “Controller”, collects, uses, stores and protects the personal data of website users.

This document is intended to provide clear and transparent information about the categories of personal data processed, the purposes of processing, the applicable legal bases, the retention periods, the recipients of the data and the rights of data subjects, in accordance with Regulation (EU) 2016/679 of 27 April 2016 (General Data Protection Regulation or GDPR) and other applicable legislation.

1. Controller

The controller responsible for the processing of personal data is:

• Entity: Corebrands, Lda.

• Tax ID / VAT Number: 506 410 269

• Address: Via Norte Trade Center – Rua do Espido 74 A-B, 4470-177, Maia Portugal

• Privacy contact email: geral@corebrands.pt

2. Categories of personal data processed

In connection with the use of the website, the following categories of personal data may be processed:

2.1. Data provided directly by the user

• Name;

• Email address;

• Telephone number, where applicable;

• Company or organisation, where applicable;

• Content of messages sent through forms, contact requests or other means made available on the website.

2.2. Data collected automatically

• IP address;

• Date and time of access;

• Browser type and operating system;

• Pages visited and interaction with the website;

• Technical data necessary for the operation, security, administration and performance of the website.

Where the website uses multilingual functionality, technical data relating to the user’s language preference may also be processed through strictly functional cookies, as is common in this type of technical solution.

3. Purposes and legal bases of processing

Personal data may be processed for the following purposes:

• To respond to contact requests and information enquiries, on the basis of pre-contractual steps taken at the request of the data subject or the Controller’s legitimate interest, depending on the context.

• To manage communications related to potential services or proposals, on the basis of pre-contractual steps taken at the request of the data subject.

• To ensure the technical operation, security and administration of the website, on the basis of compliance with applicable legal obligations and/or the Controller’s legitimate interest.

• To manage technical preferences, including language preferences, where applicable, on the basis of legitimate interest or the technical necessity of properly providing the requested service.

• To collect statistical usage metrics, where non-essential analytics tools are used, on the basis of the user’s consent, where legally required.

• To comply with legal obligations or respond to requests from competent authorities, on the basis of compliance with a legal obligation.

The Controller undertakes to process only personal data that is adequate, relevant and limited to what is necessary in relation to the purposes for which it is processed.

4. Contact forms

Personal data provided through forms available on the website will be processed exclusively for the purpose of analysing, managing and responding to the request submitted and, where applicable, for carrying out pre-contractual steps related to the services requested by the user.

Unless otherwise stated and unless there is an appropriate legal basis, data collected through forms will not be used for direct marketing communications.

5. Cookies and similar technologies

The website may use cookies and similar technologies for different purposes, namely:

• Strictly necessary cookies, which are indispensable for the technical operation of the website and for providing functionalities requested by the user;

• Functional cookies, intended to remember user preferences, including, where applicable, language preferences in multilingual environments;

• Analytics cookies, intended to collect statistical information about the use of the website;

• Marketing or third-party cookies, where applicable, associated with embedded content, campaigns, advertising or external integrations.

The installation of cookies that are not strictly necessary depends on the user’s prior consent, under the applicable law and in line with the public position of the Portuguese data protection authority regarding the use of cookies for purposes such as analytics.

If the website uses specific tools such as Google Analytics 4, Google Tag Manager, YouTube, chat platforms, advertising pixels or other similar integrations, those tools should be expressly identified in the Cookie Policy or in the consent management mechanism actually implemented.

In multilingual WordPress websites using WPML, technical cookies such as wp-wpml_current_language, _icl_visitor_lang_js or wpml_browser_redirect_test may exist, depending on the active features, in order to remember the current language or support language redirection and cookie availability testing.

For detailed information on the cookies actually used, their purposes, providers and retention periods, the Privacy Policy available at https://ignyten.com/privacy-policy should be consulted.

6. Third-party content, services and processors

The website may rely on third parties for hosting, technical maintenance, electronic communications, analytics, form management, marketing, content integration or the provision of technological services associated with its operation.

Whenever those entities process personal data on behalf of the Controller, they shall act as processors under contracts or other appropriate legal instruments ensuring confidentiality, security and compliance with applicable law.

If the website integrates external content, such as videos, maps, fonts, iframes, email marketing platforms or measurement tools, interaction with those services may involve the processing of personal data by those entities under the terms set out in their own privacy policies.

7. International data transfers

Whenever the use of certain providers or services implies the transfer of personal data to countries outside the European Economic Area, the Controller shall seek to ensure that such transfers only take place on an appropriate legal basis and with the safeguards required by law, including, where applicable, standard contractual clauses or another mechanism recognised under applicable law.

8. Retention periods

Personal data shall be kept only for the period necessary for the purposes that justified its collection and processing, without prejudice to longer retention periods where required by law, necessary for the defence of rights in judicial proceedings or necessary for compliance with contractual obligations.

Without prejudice to adaptation to the actual operation, the following retention logic may be used:

• Contact requests and commercial forms: 12 Months

• Technical logs and security records: 90 Days;

• Data associated with analytics tools: 14 Months,depending on the configuration of the analytics service;

• Data required for legal compliance: for the period imposed by applicable law.

When data is no longer necessary, it shall be securely deleted or anonymised, where appropriate.

9. Data subject rights

Under the applicable law, data subjects may request:

• Access to their personal data;

• Rectification of inaccurate or incomplete data;

• Erasure of data, where legally admissible;

• Restriction of processing in the cases provided by law;

• Objection to processing, where applicable;

• Data portability, where applicable;

• Withdrawal of consent, where processing is based on consent, without affecting the lawfulness of processing carried out before such withdrawal.

These rights may be exercised in writing through the contact details provided in this Privacy Policy.

Without prejudice to any other administrative or judicial remedy, data subjects also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD – Comissão Nacional de Proteção de Dados).

10. Minors

The website is not specifically directed at minors.

If, in the context of certain functionalities, personal data of users under the age of 13 is collected on the basis of consent, such consent must be given or authorised by the holders of parental responsibility, in accordance with the law applicable in Portugal.

If the Controller becomes aware that personal data relating to a minor has been collected without the required legal basis, reasonable steps shall be taken to delete such data as soon as possible.

11. Automated decision-making and profiling

Personal data collected through the website will not be used for solely automated decision-making producing legal effects or similarly significantly affecting the data subject, unless this is expressly stated and properly framed under the applicable legal requirements.

Where analytics, segmentation or marketing tools are used, this does not in itself necessarily mean that automated decision-making with legal effects is taking place, but such operations should be assessed and described transparently whenever applicable.

12. Security

The Controller implements appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access, taking into account the state of the art, the costs of implementation, the nature, scope, context and purposes of the processing, as well as the risks to the rights and freedoms of data subjects.

However, no transmission of data over the Internet or electronic storage system can be guaranteed to be absolutely secure.

13. Changes to this Privacy Policy

This Privacy Policy may be updated at any time to reflect legal, regulatory, technical or operational changes.

Whenever such changes are relevant, the date of the latest revision shown at the beginning of this page will be updated accordingly.

14. Contact

For any questions relating to this Privacy Policy or to the processing of personal data, the following contact may be used:

• Email: geral@corebrands.pt