Privacy Policy

1. Data controller

The controller of your personal data is Nerdy Nerd IT (operating as a sole trader, Vanessa Henriques Dupret, NIF 323077498), established at Rua 25 de Abril, 8200-647 Olhos de Água, Faro, Portugal.

For any question about this policy or your data, contact us at info@nerdynerdit.com.

2. What data we collect

We only collect data you provide yourself or that is strictly necessary for the website to function. Specifically:

• Contact form: your name, email address, optionally your company name, the enquiry type and the content of your message.
• Technical data: on every visit our hosting provider keeps standard server logs (such as your IP address, browser type and the time of your visit) to keep the site secure and available.
• We do not collect special categories of personal data and do not build profiles.

3. Purposes and legal basis

We process your data only for the following purposes, each on a valid GDPR legal basis:

• To respond to your enquiry and communicate about a possible collaboration — basis: your consent and/or taking pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR).
• To keep our website secure, stable and functional and to prevent abuse — basis: our legitimate interest (Art. 6(1)(f) GDPR).
• To comply with legal obligations, for example regarding administration and taxes — basis: legal obligation (Art. 6(1)(c) GDPR).

4. Retention

We keep your data no longer than necessary for the purposes for which it was collected. Contact-form enquiries are kept for as long as needed to handle your request and, where a collaboration follows, for its duration. If your message does not lead to an engagement, we generally delete it within 12 months. Data we are legally required to retain (such as invoices) is kept for the statutory period.

5. Sharing with third parties (processors)

We never sell your data. We do rely on a small number of service providers who process data on our behalf, solely on our instructions and under a data-processing agreement:

• Web3Forms — processes the contact-form submission so it reaches us as an email.
• Vercel — hosts the website and processes the technical server logs.
• Google Fonts — the website loads fonts via Google, which involves sharing your IP address with Google.

6. International transfers

Some of the providers above are located outside the European Economic Area (EEA) or process data there, including in the United States. Where that happens, we ensure the transfer is covered by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or a valid adequacy decision.

7. Cookies

This website sets no tracking, analytics or marketing cookies and uses no tracking software. Only strictly necessary technical features required to make the site work are used. No consent is required for these by law.

8. Security

We take appropriate technical and organisational measures to protect your data against loss, misuse and unauthorised access. The website is served encrypted over HTTPS. No internet transmission is ever 100% secure, however; we do our utmost but cannot guarantee absolute security.

9. Your rights

Under the GDPR you have the following rights regarding your personal data:

• Right of access to the data we process about you.
• Right to rectification of inaccurate or incomplete data.
• Right to erasure (the "right to be forgotten").
• Right to restriction of processing.
• Right to object to processing based on legitimate interest.
• Right to data portability.
• Right to withdraw any consent at any time, without affecting processing already carried out.

10. Complaints

You can exercise your rights or raise a complaint by emailing info@nerdynerdit.com. We typically respond within 2 working days.

If you disagree with how we handle your data, you have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), www.cnpd.pt. If you live in another EU country, you may also contact your local authority.

11. Changes

We may update this privacy policy from time to time. The latest version is always on this page, with the date of last change shown at the top.