Privacy policy

Last updated: 5 August 2026

1. Who is responsible for your personal data

The controller responsible for the processing of personal data through this website is DOTARIS, a company registered in Portugal.

Email: [email protected]

2. Scope of this policy

This Privacy Policy explains how we collect and process personal data when you visit dotaris.com, use the contact form or otherwise communicate with us through the website.

The website is institutional and does not provide user accounts, online purchases, subscriptions or payment services.

3. Personal data we collect

Contact form data

When you use the contact form, we collect:

  • your email;
  • your telephone number;
  • the content of your message;
  • any other personal information that you voluntarily include in the message.

Please do not include confidential, commercially sensitive, classified or legally privileged information in an initial contact message.

Website usage and technical data

When you visit the website, certain technical and usage data may be collected through Google Analytics and Microsoft Clarity, subject to the consent choices available on the website where consent is legally required.

This data may include:

  • IP address and approximate location;
  • browser, device and operating system information;
  • pages visited and time spent on the website;
  • referring pages and navigation paths;
  • interaction data, such as clicks, scrolling and session behaviour;
  • cookie identifiers and similar technical identifiers.

We do not use these tools to intentionally collect the content entered into the contact form.

4. How and why we use personal data

We process personal data only for the following purposes:

  • to receive, assess and respond to enquiries submitted through the website;
  • to understand the nature of a potential project or service request;
  • to record and manage enquiries in our customer relationship management system;
  • to operate, secure, maintain and improve the website;
  • to understand how visitors use the website and improve its content and usability;
  • to comply with legal obligations and respond to lawful requests from public authorities or courts;
  • to establish, exercise or defend legal claims where necessary.

We do not use contact form data to send newsletters or unsolicited marketing communications.

5. Legal bases for processing

Depending on the context, we rely on the following legal bases:

  • Steps taken at your request before entering into a contract, when you contact us about a potential project or service;
  • Legitimate interests, including responding to general enquiries, managing business communications, operating and securing the website and improving its performance and usability;
  • Consent, where required for the use of analytics or session measurement technologies;
  • Compliance with legal obligations, where processing is required by applicable law.

Where processing is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

6. Who may receive your personal data

Personal data may be processed by service providers acting on our behalf and only to the extent necessary to provide their services, including:

  • our customer relationship management system provider, used to record and manage enquiries;
  • Hetzner, as website infrastructure and hosting provider;
  • Google, through Google Analytics;
  • Microsoft, through Microsoft Clarity;
  • technical or security providers where strictly necessary to maintain and protect the website.

We do not sell personal data and do not disclose contact form data to partners for their own marketing purposes.

We may also disclose data where required by law, court order or a lawful request from a competent authority.

7. International data transfers

Google Analytics and Microsoft Clarity may involve the processing of personal data outside the European Economic Area, including in the United States.

Where such transfers occur, they are subject to the safeguards made available by the relevant provider under applicable data protection law, which may include adequacy decisions, the EU–US Data Privacy Framework and Standard Contractual Clauses approved by the European Commission.

The specific safeguards may depend on the provider, service configuration and destination of the data.

8. Cookies and similar technologies

Google Analytics and Microsoft Clarity may use cookies or similar technologies to measure website usage and visitor interactions.

Where required by law, these technologies should only be activated after you have provided the relevant consent through the website’s consent controls. You can later change or withdraw your choices using the same controls, where available.

Further information is available in our Cookie Policy.

9. How long we retain personal data

Contact form enquiries that do not lead to an ongoing commercial or contractual relationship are normally retained for up to 12 months from the last relevant communication.

If an enquiry leads to a proposal, contract or ongoing business relationship, relevant data may be retained for longer where necessary to manage that relationship, comply with legal, tax or accounting obligations, or establish, exercise or defend legal claims.

Analytics and session measurement data are retained according to the settings configured in Google Analytics and Microsoft Clarity and the applicable retention periods of those services.

When personal data is no longer required, it will be deleted, anonymised or securely restricted from further use, unless continued retention is required by law.

10. Data security

We apply reasonable technical and organisational measures intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.

No website, transmission method or storage system can be guaranteed to be completely secure. You should therefore avoid sending unnecessary sensitive or confidential information through the contact form.

11. Your data protection rights

Subject to the conditions and limitations established by applicable data protection law, you may have the right to:

  • request access to your personal data;
  • request correction of inaccurate or incomplete data;
  • request deletion of your personal data;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request data portability, where applicable;
  • withdraw consent at any time, where processing is based on consent;
  • lodge a complaint with a competent supervisory authority.

In Portugal, the competent supervisory authority is the Comissão Nacional de Proteção de Dados.

To exercise your rights, contact us at [email protected]. We may request information reasonably necessary to confirm your identity before responding.

12. Third-party websites

The website may include links to third-party websites or services. This Privacy Policy does not apply to those third parties, which are responsible for their own privacy practices. You should review their privacy information before providing personal data.

13. Changes to this policy

We may update this Privacy Policy to reflect changes to the website, our processing activities, service providers or applicable legal requirements.

The current version will always be published on this page and identified by its “Last updated” date.

14. Contact

Questions about this Privacy Policy or the processing of your personal data may be sent to [email protected].