Privacy policy

Who we are

Cryomatica is a brand of Sun Lda. On this site, the controller is Sun Lda.

Sun Lda has its registered office at Rua Hermenegildo Gomes Pereira 27 G, 2500-833 Caldas da Rainha, Portugal. Contact for data requests: info@cryomatica.com.

This site and the agency sites

This policy covers the Cryomatica site, where agencies ask for a quote. It does not cover a website an agency later runs with us: that site has its own policy.

• Enquiries and leads collected on an agency site belong to the agency. The agency is the controller and manages them.
• Sun Lda is then only the hosting and service provider (the processor), under a data-processing clause in the client contract, as set out in GDPR article 28.
• Each agency site’s privacy policy names the agency as controller.
• Sun Lda is controller only for its own business contacts with agencies.

Data we collect on this site

If you send the contact form, we process what you type and a few technical details tied to that submission.

• Name, agency, email, phone if you give one, number of listings, message, and the plan you were looking at, if any.
• The language of the form and the date of the enquiry.
• IP address and browser identifier, to limit abuse and to understand technical failures.
• A record of your consent.

Why we use them, and the legal basis

We do not sell this data, and we do not use it for newsletters or third-party advertising.

• To reply to the enquiry and, if you go ahead, to prepare a quote and the contract. Basis: steps prior to a contract and, because you asked us to write back, the consent you tick on the form (GDPR article 6(1)(b) and 6(1)(a)).
• To limit automated submissions and protect the site. Basis: legitimate interest in the security of the service (article 6(1)(f)). You can object. If the objection and the enquiry cannot both stand, we may be unable to handle the enquiry.
• To meet invoicing duties if there is a contract. Basis: legal obligation (article 6(1)(c)).

How long we keep them

When the period ends, we delete or anonymise the data, unless a legal period requires us to keep it.

• Enquiries that do not become a contract: 24 months.
• Billing data, if there is a contract: for the applicable tax period, usually 10 years.
• Technical security logs: up to 12 months, unless an incident means they have to be kept while it is reviewed.

Who receives them

Only people and providers who need them to reply and to run the site.

• People at Sun Lda who handle enquiries.
• The host of this site (Hostinger), as an infrastructure processor.
• The email provider, only if the internal notice of new enquiries is switched on. In that case it receives the enquiry so it can deliver it to Sun Lda.
• Authorities, when the law requires it.

Transfers

Hosting is contracted with Hostinger. If a processor handles data outside the European Economic Area, we require appropriate safeguards, such as the European Commission’s standard contractual clauses.

The email notice, when it is on, may involve a provider outside the EEA, with the same safeguards. If the notice is not configured, the enquiry stays only in our system.

Cookies

This site does not use marketing cookies, advertising pixels, social-network logins, or third-party analytics.

There is one strictly necessary session cookie, set when you open the contact form or the internal area. It is named cryomatica.sid, it lasts up to 12 hours, and it protects the form against forged submissions and, in the internal area, keeps the session. We do not use it to follow you on other sites.

Your rights

You can ask for access, rectification, erasure, restriction, portability and objection, and you can withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing already carried out.

Write to info@cryomatica.com. We may ask for something that confirms you are the person the data is about. We will reply within the legal time limit.

You can also lodge a complaint with the Portuguese data protection authority, the CNPD: CNPD.

Automated decisions

We do not take automated decisions with legal effects, and we do not build profiles for that purpose. The form’s submission limit is a technical measure against abuse.

Children

This site is aimed at agencies and their staff. We do not knowingly collect data from children.

Changes

If this policy changes, we update the date at the top of the page. When a change affects an enquiry already sent, we will write to the email you gave us, if that contact is still appropriate.