PRIVACY POLICY

1. Data Controller

Your personal data is processed by the following data controller:

ULTRAS-SITES — ultras-sites.com

Controller: TIAGO ALEXANDRE FERREIRA MOREIRA (Trabalhador Independente)

NIF: 306288230 · VAT: PT306288230

Address: Avenida Doutor João Carlos Noronha 38, 1.º Esq, 5360-302 Vila Flor, Portugal

Contact: contact@ultras-sites.com — WhatsApp

2. Data We Collect

We only collect strictly necessary data, and only when you choose to share it:

Through the contact form: your name, email address, phone number (if provided) and your message.

Technical browsing data: to measure the site's audience, we record the pages viewed, where the visit comes from (referring site, campaign parameters), approximate country and city, language, time zone, device, browser and connection type, time spent, scrolling, and clicks on buttons and forms (never what you type in them). Nothing is stored in your browser for this measurement: no cookie, no identifier, and your IP address is not recorded. Visits are grouped on our side, without ever linking two visits together. No advertising profiling.

Private contract link: if you open a contract link we sent you, the steps you take (opening, contract steps, leaving) are reported to us so we can help you. They are not linked to any other visit to the site.

3. Purposes

Your data is used solely to:

• Respond to your request for a quote, information or contact;

• Manage the commercial follow-up of our exchange;

• Improve the website through audience measurement without cookies or identifiers.

4. Legal Basis

Processing rests on two GDPR grounds:

Pre-contractual measures (Art. 6(1)(b)): when you fill in the form to request a quote or get in touch, processing is necessary to respond and prepare a possible collaboration.

Legitimate interest (Art. 6(1)(f)): following up our B2B relationship and improving our services, with full respect for your rights. Audience measurement also relies on this; you can object: if your browser sends a “Do Not Track” or “Global Privacy Control” signal, our measurement does not start.

5. Recipients

Your data is for the sole use of ULTRAS-SITES and is never sold, rented or shared with third parties for commercial purposes.

Technical processor: our host Cloudflare, Inc. provides hosting and message delivery, on our instructions and under strict confidentiality.

Messaging: form messages and contract-link alerts reach us through Telegram (Telegram Messenger Inc.).

6. Transfers Outside the EU

Our host Cloudflare, Inc. is based in the United States. Any transfer outside the EU is governed by appropriate safeguards (EU Standard Contractual Clauses and additional measures), per Articles 44 et seq. GDPR.

Telegram processes these messages under its privacy policy: data of accounts opened from the European Union is stored in the Netherlands.

7. Data Retention

Your contact data is kept as long as needed to handle your request, then for our business relationship, and for a maximum of 3 years from our last exchange. After that it is deleted or anonymised.

Visit statistics are kept for 3 months at Cloudflare, then deleted.

8. Your Rights

Under the GDPR you have the rights of access, rectification, erasure, restriction, objection and portability.

To exercise them, write to us at contact@ultras-sites.com.

You may also lodge a complaint with the competent authority: the CNPD in Portugal (www.cnpd.pt), the lead authority, or your own — the CNIL in France (www.cnil.fr) or the AEPD in Spain (www.aepd.es).

9. Security

We implement appropriate technical and organisational measures: encrypted connections (HTTPS), access restricted to authorised persons, and secure hosting.

10. Contact

For any question about this policy, write to us at contact@ultras-sites.com.