GPSS – Digital Solutions
Last updated: January 28, 2026
1. Introduction
GPSS – Digital Solutions (hereinafter referred to as “GPSS”, “we” or “our”) is committed to protecting the privacy and personal data of users of its website. gpss.pt. This Privacy Policy describes how we collect, use, store, and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) – Regulation (EU) 2016/679 – and other applicable legislation in Portugal.
By using our website, the user declares to have read and understood this Privacy Policy.
2. Responsible for Treatment
The entity responsible for processing the personal data collected through this website is:
GPSS – Digital Solutions
Localização: Oeiras, Portugal
Contact email: info@gpss.pt
3. Personal Data Collected
In connection with the use of our website and services, we may collect the following categories of personal data:
3.1 Contact Details
When you contact us through the website or by email, we may collect: your name, email address, phone number, company or organization name, and any other information you choose to share in your message.
3.2 Navigation Data
QWhen you visit our website, technical data is automatically collected, including: IP address, browser type and version, operating system, pages visited and time spent on the site, date and time of access, and referral data (referring website).
3.3 Cookies
Our website uses cookies to improve your browsing experience. For more information, please see section 8 of this policy.
4. Purposes of Treatment
The personal data collected is used for the following purposes: to respond to contact and information requests; to provide the requested services in the areas of Security and Privacy, Design and Communication, and Computer Systems Engineering; to send communications related to our services (with prior consent); to improve the operation and security of the website; to comply with legal and regulatory obligations; and to protect our rights and legitimate interests.
5. Legal Basis of Processing
The processing of your personal data is carried out based on the following legal bases, as provided for in Article 6 of the GDPR:
- Consent: when you voluntarily provide us with your data through a contact form or email.;
- Contract execution:when treatment is necessary for the provision of requested services;
- Legitimate interest: to ensure website security and improve our services;
- Legal obligation: when processing is necessary to comply with applicable legal obligations.
6. Data Recipients
Your personal data is not sold, transferred, or shared with third parties for commercial purposes. However, it may be shared with: service providers acting on our behalf (e.g., web hosting services), always bound by confidentiality and data protection agreements; public authorities, when required by law or court order; and professional consultants (lawyers, accountants), within the scope of their duties.
7. International Transfers
As a rule, your personal data is processed in Portugal or the European Economic Area (EEA). If it is necessary to transfer data outside the EEA, we guarantee that such transfer is carried out in accordance with the GDPR, namely through adequacy decisions of the European Commission or approved standard contractual clauses.
8. Cookies Policy
Cookies are small text files stored on your device when you visit a website. Our website may use:
- Essential cookies: necessary for the basic functioning of the website;
- Performance Cookies: to collect anonymous statistical information about website usage;
- Functional cookies: to remember your browsing preferences.
Users can manage their cookie preferences through their browser settings. Disabling certain cookies may affect the functionality of the website.
9. Storage Period
Personal data is kept only for the period necessary for the purposes for which it was collected, or as required by law. Contact details are kept for the duration of the business relationship and for the legally required period after its termination. Browsing data is kept for a maximum period of 12 months. Data for marketing purposes is kept until consent is withdrawn.
10. Data Subject Rights
Under the GDPR, the user has the following rights regarding their personal data:
- Right of access: to obtain confirmation as to whether your data is being processed and to access it.;
- Right to rectification: request the correction of inaccurate or incomplete data;
- Right to erasure: request the deletion of your personal data, where applicable.;
- Right to limitation: requesting the limitation of treatment in certain circumstances;
- Right to portability: to receive your data in a structured and commonly used format;
- Right to object: to object to the processing of your data for certain purposes.;
- Right to withdraw consent: at any time, without compromising the lawfulness of the previous treatment.
To exercise any of these rights, please contact us via email info@gpss.pt.
11. Right to Complain
If you believe that the processing of your personal data violates data protection legislation, you have the right to lodge a complaint with the National Data Protection Commission (CNPD), the supervisory authority in Portugal:
National Data Protection Commission
Av. D. Carlos I, 134 – 1.º, 1200-651 Lisboa
Website: www.cnpd.pt
E-mail: geral@cnpd.pt
12. Data Security
GPSS implements appropriate technical and organizational measures to protect personal data against unauthorized access, alteration, disclosure, or destruction. As a company specializing in security and privacy, we apply industry best practices in information protection.
13. Changes to the Privacy Policy
This Privacy Policy may be updated periodically to reflect changes in our practices or applicable law. We recommend that you check this page regularly. The date of the last update is indicated at the beginning of the document.
14. Contacts
For questions related to this Privacy Policy or the processing of your personal data, please contact us through:
E-mail: info@gpss.pt
Location: Oeiras, Portugal
Website: https://gpss.pt