Privacy Policy

At Shiftworks we take the protection of your personal data seriously. This Privacy Policy sets out, clearly and transparently, how we collect, use, retain and protect the information you entrust to us through the website www.shiftworks.pt and through our other points of contact.

This document has been drawn up in compliance with Regulation (EU) 2016/679 (the General Data Protection Regulation — GDPR), Portuguese Law no. 58/2019 of 8 August, and all other applicable Portuguese and European legislation.

1. Data Controller

The entity responsible for processing your personal data is:

Shiftworks Unipessoal Lda.

Company number (NIPC): 519245970

Registered office: Rua de Vergadas 184A, 4595-290 Penamaior, Paços de Ferreira, Portugal

Share capital: €5,000

Email: dgoncalves@shiftworks.pt

Website: www.shiftworks.pt

2. Privacy Contact

For any question about the processing of your personal data, or to exercise your rights (see section 8), you can reach us through:

  • Dedicated email: dgoncalves@shiftworks.pt
  • Contact person: Daniel Gonçalves — dgoncalves@shiftworks.pt
  • Post: care of the registered office given above

We undertake to answer any request within a maximum of 30 days. That period may be extended in particularly complex cases, as provided for in the GDPR.

3. Personal Data We Collect

We collect only the data strictly necessary for the purposes it serves. Data may be provided by you directly or collected automatically as you browse our website.

3.1. Data you provide directly

  • Contact form and Strategic Diagnosis: name, email, phone, company, and your message or information about your project.
  • AI readiness check (the tool at shiftworks.pt/ai-readiness-check): the website address you submit for analysis and, if you request the full report, your name, work email and, optionally, your company. The address analysed is treated as company data, not personal data. From your IP address we store only the country, the region and the organisation the connection belongs to (typically the telecoms operator or, on corporate connections, the company itself), for statistical purposes; the IP itself is not retained — what remains is an irreversible code, used solely to tell analyses by different visitors apart and to apply usage limits.
  • Newsletter: email address (and, optionally, name).
  • Direct communications: emails, calls, and WhatsApp, Instagram, Facebook or LinkedIn messages you send us, including their content.
  • Commercial relationship: billing details (name, tax number, address), professional contact details and contractual information once you become a client.

3.2. Data collected automatically

  • Browsing data: IP address, device and browser type, operating system, pages visited, time spent, traffic source.
  • Our own site measurement: with your consent under the “Analytics” category, we record pages viewed, reading depth, clicks on buttons and links, and how far you get in forms. The measurement runs on our own server, with no sharing with third parties and no cookies: an anonymous identifier is stored on your device, which does not identify you and disappears if you clear your browser data. The values you type into fields are not recorded — only which field you were in, so we can see where forms fail. If your browser sends the “Do Not Track” signal, nothing is measured.
  • Cookies and similar technologies: see the details in our Cookie Policy.

4. Purposes and Lawful Bases

We process your personal data on specific legal grounds set out in Article 6 of the GDPR:

4.1. AI readiness check (GEO Auditor)

The technical analysis tool available at shiftworks.pt/ai-readiness-check examines a website address publicly — the same way any search engine does — and returns a score for how eligible that site is to be cited by artificial-intelligence engines. No personal data is required to use the tool or to see the result.

If you choose to receive the full report by email, we process the data you give us (name, work email and, optionally, company) on the following bases and for the following purposes:

  • Sending the report you asked for — steps taken at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Follow-up commercial contact about services related to the analysis — express consent, collected through a checkbox that is not pre-ticked (Article 6(1)(a) GDPR). You may withdraw this consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

The result of the analysis is stored temporarily on our server, for a maximum of one hour, solely to allow the report to be delivered. The contact details you give us are kept for as long as the commercial interest lasts, or until you ask for their removal, up to a maximum of three years after the last contact.

Reports and follow-up communications are sent from the subdomain send.shiftworks.pt. Every communication includes an unsubscribe link, and unsubscribing takes effect immediately.

We also keep, in aggregate form and without any personal data, the domain analysed, the score obtained and the date, for our own statistics and for research into how ready Portuguese companies are for AI engines. These records do not make it possible to identify who ran the analysis.

5. Sharing Data with Third Parties

Shiftworks does not sell, rent or trade your personal data. We share information only with service providers (processors) that meet GDPR requirements and act exclusively on our instructions:

To determine the country and region from the IP address, and only at that moment, the IP is looked up with the ipwho.is service. Shiftworks does not retain the IP address; it stores only the country, region and organisation returned.

Whenever data is transferred internationally outside the European Economic Area, we make sure appropriate safeguards are in place, in particular Standard Contractual Clauses approved by the European Commission.

6. Data Security

We put in place appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or improper alteration, namely:

  • Encryption of data in transit over HTTPS/TLS;
  • Role-based access controls and multi-factor authentication;
  • Regular backups and recovery plans;
  • Regular auditing of processors and their security standards;
  • Ongoing data-protection training and awareness.

7. Data Retention

We keep personal data only for as long as is strictly necessary for the purposes of the processing, or for the periods required by law (see the table in section 4). Once that period ends, the data is securely deleted or anonymised.

8. Your Rights

As a data subject, the GDPR gives you the following rights, which you may exercise at any time by contacting us at dgoncalves@shiftworks.pt:

  • Access — obtain confirmation of the processing and a copy of your data;
  • Rectification — correct inaccurate or incomplete data;
  • Erasure (“right to be forgotten”) — ask for your data to be deleted, where applicable;
  • Restriction of processing — limit the use of your data in certain circumstances;
  • Portability — receive your data in a structured, commonly used format;
  • Objection — object to processing based on legitimate interest or direct marketing;
  • Withdrawal of consent — at any time, without affecting the lawfulness of earlier processing;
  • Not to be subject to automated decisions producing significant legal effects.

If you believe the processing of your personal data breaches the GDPR, you have the right to lodge a complaint with the competent supervisory authority — the Portuguese Data Protection Authority (CNPD): Av. D. Carlos I, no. 134, 1st floor · 1200-651 Lisbon · Portugal · Tel.: +351 213 928 400 · www.cnpd.pt

9. Newsletter and Marketing Communications

Our newsletter is sent only with prior consent that is freely given, specific, informed and unambiguous. You may withdraw your consent at any time by clicking the unsubscribe link in the footer of every communication, or by sending a request to dgoncalves@shiftworks.pt

10. Minors

Our website and services are intended solely for people aged 18 and over. We do not knowingly collect data from minors. If you become aware that a minor has given us personal data without parental consent, please contact us and we will delete it.

11. Links to External Sites

Our website may contain links to third-party sites (partners, social networks, the Portuguese Electronic Complaints Book). Shiftworks is not responsible for the privacy practices of those sites — we recommend reading their respective policies.

12. Changes to this Policy

We reserve the right to update this Privacy Policy whenever necessary, to reflect legal, technical or business changes. The version in force is always the one published on this page, with its update date. In the event of material changes, we will give notice in advance through the website or by email.

13. Governing Law and Jurisdiction

This Policy is governed by Portuguese law. Any dispute arising from its application falls under the jurisdiction of the courts of the district where Shiftworks has its registered office, with express waiver of any other.

For more information about our use of cookies, see our Cookie Policy.

PTEN