Privacy Policy

LIZAR Systems Lda. ("LIZAR", "we") operates lizarsystems.com. This policy explains what personal data we collect through this website, why we collect it, and what you can do about it. It is written to meet Articles 13 and 14 of the General Data Protection Regulation (EU) 2016/679.

Who is responsible

The controller is LIZAR Systems Lda., R. das Fontaínhas 82-86, 1300-257 Lisboa, Portugal. Write to sales@lizarsystems.com about anything in this policy.

We have not appointed a Data Protection Officer, and are not required to.

What this website does not do

• No analytics, no advertising and no tracking scripts of any kind. We do not profile you and we do not build an audience picture.
• Fonts are served from our own servers, so opening a page sends no request to any third party.

Cookies

The site sets one cookie for ordinary visitors, named NEXT_LOCALE. It holds a two-letter language code and nothing else, so that the site opens in the language you last read it in. It does not identify you and is not used to track you.

TO CONFIRM: we treat this as a preference cookie exempt from consent, which is why you are not asked to accept anything. Confirm that view, or ask us to switch language detection off — the language is already in the address of every page, so the cookie can be removed entirely.

Staff signed in to the administration area also receive a session cookie. It is strictly necessary for logging in and is not used for anything else.

What we collect, and why

Requesting documents

When you use the demo request form we collect your name, business email address, company, job title, the topic you selected and which documents you asked to see. We use them to contact you about your request. On the same record we also keep the language you were reading the site in, so we can reply in it. Submitting the form does not send you anything automatically — the documents you tick tell us what you are interested in, and a person follows up.

Every field on the form is required. If you do not provide them the form will not submit and we cannot get back to you; there is no other consequence.

Our lawful basis is your consent, Article 6(1)(a), given by ticking the box on the form. You can withdraw it at any time — see "Your rights" below. Withdrawing does not affect processing already carried out.

Partnership enquiries

When you use the partner form we collect your company, name, email address and the partnership type you selected, and use them to assess and answer your enquiry. Every field is required; without them we cannot assess the enquiry.

Our lawful basis is our legitimate interests, Article 6(1)(f), in responding to a business proposal you chose to send us. You may object at any time.

Preventing abuse of the demo request form

To stop the form being used to flood us with automated submissions, we count recent submissions per email address and per network origin. TO CONFIRM: this limit was originally written to stop the form being used to send unsolicited mail in our name, which it no longer can, since it sends nothing.

The network address itself is never stored. It is put through a keyed one-way function and only the result is kept, which cannot be turned back into the original address.

That covers the application. Our web server also keeps ordinary access logs, and those record the address of every request. TO CONFIRM: how long those logs are kept and who can read them.

Our lawful basis is our legitimate interests, Article 6(1)(f), in the security of the service and of our sending domain. Article 32 requires us to take measures of this kind.

Who else sees it

• Our email provider, which delivers the messages we send you. TO CONFIRM: name and country of the provider.
• Our hosting provider, which runs the servers this site and its database sit on. TO CONFIRM: name and country of the provider.

We do not sell personal data, and we do not share it for advertising.

TO CONFIRM: whether any recipient is established outside the European Economic Area and, if so, the safeguard relied on under Article 46 — usually the European Commission's standard contractual clauses — and where you can obtain a copy of it.

How long we keep it

We keep enquiries and document requests until you ask us to erase them, and review them periodically so that records we no longer need are deleted. If you ask us to erase your data we will do so, unless we are legally required to keep it.

TO CONFIRM: a definite retention period, or the criteria used to arrive at one. Until one is set, records are kept indefinitely unless erasure is requested.

Your rights

Under the GDPR you may ask us to confirm whether we hold data about you and give you a copy (Article 15), correct it (Article 16), erase it (Article 17), restrict how we use it (Article 18), provide it in a portable format (Article 20), or stop processing that rests on our legitimate interests (Article 21). Where we rely on consent you may withdraw it at any time (Article 7(3)).

Write to sales@lizarsystems.com. We will answer within one month.

If you believe we have handled your data improperly you may complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134 — 1.º, 1200-651 Lisboa, www.cnpd.pt. You may also complain to the authority in the country where you live.

Security

The administration area requires a login, and network addresses used for abuse prevention are pseudonymised as described above.

TO CONFIRM: every administration account currently carries the same full access. If enquiry data should be visible only to some staff, a role has to be added — there is none today.

Changes

When this policy changes we update the date shown at the top of this page. We will bring material changes to your attention.