Data Privacy Policy

Introduction

metroproluxium S.A. ("we", "our", or "us") is committed to protecting your privacy and personal data. This privacy policy explains how we collect, use, store, and protect your personal information when you use our restaurant analytics services, visit our website, or interact with our company. We are the data controller responsible for your personal data and comply with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data We Collect

We collect and process various types of personal data depending on how you interact with our services. The data we collect includes:

Information You Provide Directly

When you contact us, request services, or use our analytics platform, we collect information such as your name, email address, phone number, company name, job title, and any messages or enquiries you send us. This data collection occurs when you fill out contact forms, request consultations, subscribe to our communications, or engage with our customer support team.

Technical Information

When you visit our website or use our services, we automatically collect technical information including your IP address, browser type, device information, operating system, referring website, pages visited, and timestamps of your interactions. This data collection helps us improve our services and ensure system security.

Business Data

For clients using our analytics platform, we process restaurant operational data including inventory levels, sales information, waste measurements, and other business metrics necessary to provide our analytics services. This data is processed under our service agreements and is essential for delivering our waste reduction analytics.

How We Use Your Information

We use the personal data we collect for legitimate business purposes and to fulfil our contractual obligations. How we use your information includes:

We use your contact information to respond to enquiries, provide customer support, deliver our analytics services, and communicate important updates about our platform. We analyse technical data to improve our website performance, enhance user experience, and ensure system security. For our business clients, we process operational data to generate analytics insights, create reports, and provide recommendations for waste reduction and operational optimisation.

We may also use your information to send you relevant business communications, including service updates, industry insights, and information about new features that may benefit your operations. You can opt out of marketing communications at any time by following the unsubscribe instructions in our emails or contacting us directly.

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner.

Our website uses various types of cookies including necessary cookies for basic functionality, analytics cookies to understand how visitors use our site, functional cookies to remember your preferences, and marketing cookies for advertising purposes. For detailed information about the specific cookies we use, please refer to our cookie policy.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your data only in the following circumstances:

We work with trusted service providers who assist us in operating our website, conducting business, and providing services to you. These providers are contractually bound to protect your information and use it only for the purposes we specify. We may also share data when required by law, to protect our rights, or in connection with legal proceedings.

In the event of a business transfer, merger, or acquisition, your information may be transferred to the new entity, but only under the same privacy protections outlined in this policy.

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. Our security measures include encryption of data in transit and at rest, regular security assessments, access controls, and staff training on data protection practices.

While we strive to protect your personal information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but are committed to maintaining industry-standard security practices.

Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Contact information is typically retained for the duration of our business relationship plus a reasonable period thereafter. Website analytics data is generally retained for up to 26 months. Business operational data is retained according to the terms of our service agreements and applicable legal requirements.

When personal data is no longer needed, we securely delete or anonymise it in accordance with our data retention policies and applicable legal requirements.

Your Rights

Under GDPR and applicable data protection laws, you have several rights regarding your personal data:

• Right of Access: You can request information about the personal data we hold about you
• Right to Rectification: You can request correction of inaccurate or incomplete personal data
• Right to Erasure: You can request deletion of your personal data in certain circumstances
• Right to Restrict Processing: You can request that we limit how we use your personal data
• Right to Data Portability: You can request a copy of your personal data in a structured format
• Right to Object: You can object to certain types of processing, including direct marketing
• Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time

To exercise any of these rights, please contact us using the information provided below. We will respond to your request within one month, though this may be extended in complex cases.

International Data Transfers

metroproluxium is based in Portugal, and we primarily process data within the European Economic Area (EEA). If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions, standard contractual clauses, or other approved transfer mechanisms under GDPR.

Children's Privacy

Our services are designed for business use and are not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately so we can take appropriate action.

Changes to This Privacy Policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "last updated" date. We encourage you to review this policy periodically to stay informed about how we protect your information.

Contact Information

If you have any questions about this privacy policy, wish to exercise your rights, or need to contact us about data protection matters, please reach out to us:

You also have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data appropriately.

Legal Basis for Processing

We process personal data based on the following legal grounds under GDPR:

• Contractual Necessity: To perform our services and fulfil contractual obligations
• Legitimate Interests: For business operations, security, and service improvement
• Consent: For marketing communications and certain cookies
• Legal Compliance: To meet regulatory and legal requirements