This Privacy Policy explains how Finse (“Finse”, “we”) collects, uses and protects the personal data of visitors to this website (finse.pt) and of clients who engage our services, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.
1. Who we are
Finse — iTech Accounting, Lda. (“Finse”, “we”) is a Portuguese limited liability company, corporate tax number 506 837 386, with its registered office in Penacova, district of Coimbra, and an office at Av. Fernão de Magalhães N.º 153, 2nd Floor – Office 5, 3000-176 Coimbra, Portugal.
We are the controller of the personal data collected through this website. For any question about this policy, or to exercise the rights described in section 6, contact us at geral@finse.pt or on 910 920 980.
We only ask for personal data when it is genuinely needed to provide you with a service, and we always tell you why we are collecting it. You are free to decline, bearing in mind that without that data we may not be able to provide some of the services you are looking for.
2. What data we collect
Depending on how you interact with us, we may collect:
- Identification and contact details (name, email, phone, company, tax number) submitted through contact forms, recruitment applications, proposal requests, or the store checkout;
- Billing and address details, when you make a purchase;
- Browsing data (IP address, device and browser type, pages visited), collected through cookies and analytics tools, subject to your prior consent (see our cookie banner);
- Documents you submit as part of a job application or of the accounting services we provide.
We do not collect or store payment card data — payments are processed directly by Stripe, which complies with PCI-DSS security standards (see section 5).
3. Purposes and legal basis for processing
- Responding to enquiries and proposal requests — pre-contractual steps taken at your request;
- Providing the services you contract — performance of the service agreement;
- Processing orders and payments — performance of the sales contract;
- Managing job applications — pre-contractual steps taken at your request;
- Marketing communications — only with your explicit consent, revocable at any time;
- Compliance with legal obligations — namely accounting, tax and invoicing obligations;
- Analytics and website improvement — legitimate interest, subject to consent for non-essential cookies.
4. Data retention
We keep data only for as long as necessary for the purposes for which it was collected:
- Enquiries and contact requests — up to 2 years after the last contact, unless it leads to a contractual relationship;
- Job applications — up to 2 years, during which your CV may be considered for other openings. You may request earlier deletion at any time by writing to geral@finse.pt;
- Orders, invoicing and accounting records — 10 years, as required by Portuguese VAT and tax legislation;
- Browsing data and cookies — as set out in section 8.
Once these periods end, data is deleted or irreversibly anonymised.
5. Sharing data with third parties
We do not sell or share your personal data with third parties for commercial purposes. We share only what is strictly necessary, and only with providers acting as processors under contracts that bind them to the same data protection obligations:
- SiteGround — hosting of the website and its database, on servers located in the European Union;
- Stripe — payment processing. Your card details are entered directly into Stripe’s secure environment and never reach our servers; we receive only the payment confirmation and the billing details;
- CentralGest Cloud — the platform through which clients access their private area and accounting documents;
- Email provider — delivery of the site’s automated messages (order confirmations, form replies and job applications).
We may also disclose data where legally required, namely to judicial, tax or supervisory authorities.
This website may contain links to external sites that we do not operate. We have no control over their content or privacy practices and cannot accept responsibility for their policies. We recommend reviewing them before providing any personal data.
6. Your rights
Under the GDPR, you have the right to access, rectify, erase and port your personal data, as well as to object to or request restriction of its processing, and to withdraw consent at any time, without affecting the lawfulness of processing carried out on the basis of consent given prior to its withdrawal. To exercise any of these rights, contact us at geral@finse.pt. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD), at www.cnpd.pt.
7. Data security
We adopt appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or improper alteration, including encrypted connections (HTTPS), encryption of sensitive data at rest, and access controls.
8. Cookies
Cookies are small files stored on your device that let the site work properly and remember your choices. Below is what we use and why.
Essential cookies
Required for the site to function. They cannot be switched off and do not require your consent:
- Cookie preference — stores the choice you made in the banner so we do not ask again on every visit (1 year);
- Shopping cart — remembers the service you configured while you complete your purchase (1 hour);
- Orders from this device — lets you view the confirmation of orders placed in this browser, without anyone else being able to access them (30 days);
- User session — only for those with backoffice access, so they need not sign in on every page.
Analytics cookies
These help us understand which pages are most visited and how to improve the site. They are only set if you accept them in the cookie banner, and you may withdraw that consent at any time. Until you accept, no analytics script is loaded.
What we do not use
This site does not use advertising cookies, ad network cookies, behavioural profiling, or affiliate partner cookies. We do not sell advertising space and we do not share your browsing behaviour with advertisers.
How to disable
You can decline non-essential cookies in our banner, and you may block or delete cookies at any time in your browser settings. Note that blocking essential cookies will prevent parts of the site, in particular the store, from working.
9. Job applications
If you apply for a position through our recruitment form, we process your data as pre-contractual steps taken at your request.
The CV you send us receives reinforced protection: it is never publicly accessible, is never sent as an email attachment, and does not appear in any public file listing on the site. Access requires an authenticated backoffice session with the appropriate permission, and every download is logged.
Application data is used solely to assess your suitability for opportunities at Finse, is not shared with third parties, and is not used for any other purpose.
10. Changes to this policy
We may update this Privacy Policy from time to time to reflect changes to our practices or for legal reasons. The date of the last update is always shown at the top of this page.
