Privacy noticePrivacy notice

Who we are

Codentures is a trade name of Semântica Nómada Lda, a company registered in Braga, Portugal. The company is the data controller for personal data collected through this website.

• Legal entity: Semântica Nómada Lda
• NIPC / NIF: 519533879
• Data protection contact: hello@codentures.eu

Given the scale and nature of our processing, we have not appointed a Data Protection Officer under Article 37 GDPR. Privacy questions are handled directly by the company’s management.

What we collect and why

When you use the contact form

• Your name, work email address and, optionally, your company name.
• The enquiry type and timeline you select.
• The message you write.

Purpose: to reply to your enquiry and, if it leads somewhere, to continue the commercial conversation. Lawful basis: Article 6(1)(b) GDPR, steps taken at your request before entering a contract, and, where an enquiry does not lead to a contract, our legitimate interest in responding to business enquiries under Article 6(1)(f).

Please do not send special-category data, financial credentials or passwords through the form. If you do, we will delete it and tell you.

When you apply to join our engineering network

Applications arrive by email. We process the CV and details you send to assess you for engagements. Lawful basis: Article 6(1)(b) and (f). We keep your details in our engineering network so we can contact you about future work; ask us to remove them at any time and we will.

Server logs

Our hosting provider records standard request information, including IP address, timestamp, requested URL and user agent, for operational and security purposes such as rate limiting and abuse prevention. Lawful basis: legitimate interest in operating the service securely, Article 6(1)(f).

What we do not do

• No advertising, remarketing or ad personalisation of any kind.
• No analytics without your consent, and nothing you type into a form is ever sent to analytics. See the cookie notice.
• Fonts are self-hosted, so loading a page sends no request to a font provider.
• We do not sell, rent or share personal data for anyone else’s marketing.

Website analytics

If, and only if, you choose “Accept” in the cookie banner, we use Google Analytics 4 to understand how the site is used. Until then the Google Analytics script is not loaded and nothing is sent to Google.

• What is collected: pages viewed, how far you scroll, which sections and links you engage with, the site or AI assistant that referred you, approximate location (country and city, derived from your IP address, which Google Analytics 4 does not store), device type, browser, screen size, page performance, and which form fields were completed (never their contents).
• Identifiers: a random identifier in the _ga cookies, used to count returning visits. We do not link it to your name or email address.
• Purpose: improving the content and usability of the site. Lawful basis: your consent, Article 6(1)(a) GDPR and Article 5(1) of Lei n.º 41/2004.
• Disabled: Google signals, advertising features and ad personalisation.
• Withdrawing consent: use “Cookie settings” in the footer at any time. Withdrawing deletes the analytics cookies from your browser. A browser Global Privacy Control signal is treated as a refusal.

Who processes data for us

• Cloudflare, Inc.: website hosting and edge delivery.
• Google Ireland Limited: website analytics, only with your consent (Google LLC as sub-processor, under the EU-US Data Privacy Framework).
• Our transactional email provider: delivery of contact-form messages to our inbox.
• Our email and business productivity providers: for the conversation that follows your first message.

Where a processor transfers data outside the European Economic Area, the transfer relies on an adequacy decision, such as the EU-US Data Privacy Framework, or on standard contractual clauses. A current list of processors is available on request.

How long we keep it

• Enquiries that do not become engagements: up to 24 months after our last contact.
• Enquiries that become engagements: for the duration of the relationship and afterwards as required by Portuguese commercial and tax law.
• Engineering network details: while you remain in the network, and deleted on request.
• Server logs: as retained by our hosting provider under its own policy.
• Analytics data: 14 months, then deleted automatically by Google Analytics.

Your rights

Under the GDPR, and the UK GDPR where it applies to you, you have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to data portability where applicable. Email hello@codentures.eu and we will respond within one month.

If you are not satisfied, you can complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), to the authority in your EU country of residence, or, in the United Kingdom, to the Information Commissioner’s Office.

Changes

If this notice changes materially we will update this page and the date shown alongside it.