Privacy and Cookies Policy

1. Data controller

Planck Technologies, Lda., with registered office at Rua Tierno Galvan 10, Torre 3, 10th Floor, Amoreiras, 1070-274 Lisbon, Portugal, registered under tax number 517470829, is the data controller responsible for the personal data collected through this website.

2. Data protection contact point

For any questions regarding the processing of your personal data, or to exercise your rights, you may contact the person responsible for data protection at protecaodados@planck.pt or by telephone on (+351) 212 698 440.

3. What data we collect

We collect the data you provide through the contact form on this website: name, email address, subject and the content of your message. Where you apply for a published position by email, we also process the data contained in your application and curriculum vitae. With your consent, we also collect browsing data through cookies, as described in section 8.

We also record the date, time and IP address at the moment the form is submitted, solely as proof of the consent given.

4. Purposes and legal bases

Purpose	Legal basis	Retention
Responding to contact requests	Legitimate interest and pre-contractual steps — Art. 6(1)(f) and (b)	2 years after last contact
Managing applications submitted by email	Pre-contractual steps — Art. 6(1)(b)	Until the selection process ends, plus 6 months
Retaining your CV for future opportunities	Consent — Art. 6(1)(a)	2 years, renewable
Analytics and advertising cookies	Consent — Art. 6(1)(a)	See section 8
Strictly necessary cookies	Exemption — Art. 5 of Law 41/2004	Session to 1 year

5. Provision of data

Providing the data marked as mandatory in our forms is necessary for us to respond to your request, consider your application or provide the service requested; without it we are unable to do so. Providing any other data is optional.

6. Recipients and processors

Your data may be processed by service providers acting on our behalf, under processing agreements providing the safeguards required by the GDPR, namely: our website hosting provider, our cookie consent management platform and Google tools (Analytics, Tag Manager and Google Ads). We do not sell or transfer your data to third parties for their own purposes.

7. International transfers

This website uses tools provided by Google LLC (United States of America), namely Google Analytics, Google Tag Manager, Google Ads and Google Sign-In. Any resulting transfers of personal data are carried out under the European Commission’s adequacy decision on the EU-U.S. Data Privacy Framework (Implementing Decision (EU) 2023/1795), Google being certified under that framework. You may request further information on the transfer mechanism through the contact indicated in section 2.

8. Cookies

We use cookies that are necessary for the website to function and, subject to your consent, analytics and advertising cookies. Non-necessary cookies are only installed after active consent and remain technically blocked until such consent is given. You may accept, reject or customise your choice in the cookie banner, and change or withdraw it at any time through the preferences panel available on the website.

Cookie	Purpose	Category	Duration	Provider
Consent management	Store cookie preferences	Necessary	1 year	First party
Session and interface	Website operation	Necessary	Session to 1 year	First party
Google Analytics	Measure website usage	Analytics	Up to 13 months	Google
Google Ads	Advertising and campaign measurement	Advertising	Up to 13 months	Google
g_state	Google Sign-In state	Functional	6 months	Google

We plan to host the fonts used on the website ourselves, thereby eliminating the data transfer associated with remotely loading them from the Google Fonts service.

9. Your rights

You have the right to access your data, to rectify it, to request its erasure, to restrict or object to processing, the right to data portability and, where processing is based on consent, the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out beforehand. You also have the right not to be subject to a decision based solely on automated processing, including profiling, under Article 22 GDPR. To exercise these rights, please contact us at the address indicated in section 2. We will reply, as a rule, within one month, extendable by up to two further months in complex cases, under Article 12(3) GDPR.

10. Complaints to the supervisory authority

If you consider that the processing of your data infringes applicable law, you have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Protecção de Dados — CNPD — www.cnpd.pt).

11. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including encrypted transmission (HTTPS) of the website, access control on a need-to-know basis, regular backups and an internal procedure for the detection of and response to security incidents.

12. Changes and last update

This policy may be updated. The version in force is the one published on this website.

Last updated: 3rd september 2026.