PRIVACY POLICY

1. Data Controller

Your personal data is processed by the following data controller:

ULTRAS-SITES — ultras-sites.com

Controller: TIAGO ALEXANDRE FERREIRA MOREIRA (Trabalhador Independente)

NIF: 306288230 · VAT: PT306288230

Address: Avenida Doutor João Carlos Noronha 38, 1.º Esq, 5360-302 Vila Flor, Portugal

Contact: contact@ultras-sites.com — +351 920 782 244

2. Data We Collect

We only collect strictly necessary data, and only when you choose to share it:

Through the contact form: your name, email address, phone number (if provided) and your message.

Technical browsing data: fully anonymous traffic statistics (page views, device type), measured without cookies and without identifying you. No advertising profiling.

3. Purposes

Your data is used solely to:

• Respond to your request for a quote, information or contact;

• Manage the commercial follow-up of our exchange;

• Improve the website through anonymous audience measurement.

4. Legal Basis

Processing rests on two GDPR grounds:

Pre-contractual measures (Art. 6(1)(b)): when you fill in the form to request a quote or get in touch, processing is necessary to respond and prepare a possible collaboration.

Legitimate interest (Art. 6(1)(f)): following up our B2B relationship and improving our services, with full respect for your rights. Anonymous audience measurement also relies on this.

5. Recipients

Your data is for the sole use of ULTRAS-SITES and is never sold, rented or shared with third parties for commercial purposes.

Technical processor: our host Cloudflare, Inc. provides hosting and message delivery, on our instructions and under strict confidentiality.

6. Transfers Outside the EU

Our host Cloudflare, Inc. is based in the United States. Any transfer outside the EU is governed by appropriate safeguards (EU Standard Contractual Clauses and additional measures), per Articles 44 et seq. GDPR.

7. Data Retention

Your contact data is kept as long as needed to handle your request, then for our business relationship, and for a maximum of 3 years from our last exchange. After that it is deleted or anonymised.

8. Your Rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability.

To exercise them, write to us at contact@ultras-sites.com.

You may also lodge a complaint with the competent authority: the CNPD in Portugal (www.cnpd.pt), the lead authority, or your own — the CNIL in France (www.cnil.fr) or the AEPD in Spain (www.aepd.es).

9. Security

We implement appropriate technical and organisational measures: encrypted connections (HTTPS), access restricted to authorised persons, and secure hosting.

10. Contact

For any question about this policy, write to us at contact@ultras-sites.com.