Privacy Policy
01Who we are
Nomev Labs Lda ("Nomev", "we", "us") is a software development company and the controller of the personal data described in this policy. For any matter relating to this policy or to your personal data, you can reach us at [email protected].
02Scope
This policy applies to the website nomev.io and to the personal data you share with us when you contact us by email, including through the contact form on our website. It explains what data we process, why we process it, on what legal basis, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
03What this website does not do
This website is a self-contained, static site. It sets no cookies, uses no analytics or tracking, serves no advertising, requires no accounts, and loads no resources from third-party services — all assets, including fonts, are delivered together with the page itself.
We do not sell personal data, we do not share it for marketing purposes, and we do not use automated decision-making or profiling.
04Personal data we process
- Contact and correspondence data. When you write to us — the contact form on our website opens a message in your own email client — we receive your name, your email address, and whatever you include in your message.
- Job application data. If you apply to join our team, we receive the information you choose to send us, such as your CV, portfolio links, and correspondence.
- Technical log data. Like virtually every website, our hosting infrastructure records basic technical information when pages are requested, such as your IP address, browser type, the pages requested, and the date and time of the request. This happens at the level of the hosting provider and is used solely to deliver the website and keep it secure.
05Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Responding to your inquiry and taking steps prior to entering into a contract | Contact and correspondence data | Art. 6(1)(b) — contract and pre-contractual steps; Art. 6(1)(f) — our legitimate interest in responding to messages addressed to us |
| Recruitment and evaluating applications | Job application data | Art. 6(1)(b) — steps prior to entering into a contract |
| Delivering the website and keeping it secure | Technical log data | Art. 6(1)(f) — our legitimate interest in operating a secure and reliable website |
| Complying with legal obligations, such as accounting and tax rules where a business relationship exists | Contact, contract, and billing data | Art. 6(1)(c) — legal obligation |
06How long we keep your data
- Correspondence is kept for as long as needed to handle your inquiry and any follow-up, after which it is deleted.
- Contract-related records are kept for the statutory retention periods that apply to commercial, accounting, and tax documentation.
- Unsuccessful job applications are deleted no later than six months after the process ends, unless you ask us to keep your details for future openings.
- Technical logs are retained by our hosting provider for a short, limited period consistent with security practice, and are then deleted or anonymized.
07Who receives your data
We do not sell or rent personal data. We share it only with service providers that we need in order to operate — specifically our website hosting provider and our email provider — each of which processes data on our behalf under data processing agreements pursuant to Art. 28 GDPR. Beyond that, we disclose personal data only where we are legally required to do so, or where necessary to establish, exercise, or defend legal claims.
08International transfers
Where a service provider processes personal data outside the European Economic Area, we ensure an adequate level of protection through an adequacy decision of the European Commission or through the European Commission's Standard Contractual Clauses, together with any additional safeguards that are appropriate.
09Your rights
Under the GDPR you have the right to:
- Access the personal data we hold about you (Art. 15);
- Rectification of inaccurate or incomplete data (Art. 16);
- Erasure of your data (Art. 17);
- Restriction of processing (Art. 18);
- Data portability (Art. 20);
- Object to processing based on legitimate interest (Art. 21);
- Withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing carried out before the withdrawal.
To exercise any of these rights, email us at [email protected]. We will respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD, www.cnpd.pt) — or with the supervisory authority of your place of residence or work.
10Security
We apply appropriate technical and organizational measures to protect personal data against accidental or unlawful destruction, loss, alteration, and unauthorized disclosure or access, taking into account the state of the art and the nature of the data we process.
11Children
Our website and services are directed at businesses and professionals, not at children. We do not knowingly collect personal data from anyone under 16 years of age. If you believe a child has provided us with personal data, contact us and we will delete it.
12Changes to this policy
If we change how this website works or how we process personal data, we will update this policy and revise the effective date shown at the top of this page. The version published here is always the current one.
13Contact
Nomev Labs Lda
Email: [email protected]