Privacy & Cookies

1. Who is responsible

The data controller is Solvetus, an independent IT consulting and managed-services company operated by RJDSM — Ruben José Dos Santos Marques (ENI), registered in Portugal. You can reach us at the contact email published on this site.

2. What we collect

We collect personal data only when you choose to send it through our contact form. That is limited to:

• Your name
• Your email address
• The message you write

We use no tracking cookies and no advertising, and we build no profiles of visitors. We do measure audience, with our own cookieless Matomo — section 9 explains exactly how.

3. Purpose and legal basis

We use this data for one purpose: to read and respond to your enquiry. The legal basis is your consent and our legitimate interest in replying to messages you send us (Art. 6(1)(a) and 6(1)(f) GDPR). We never use it for marketing without a separate, explicit opt-in.

4. Who processes it

Your message is handled by the following processors on our behalf:

• Microsoft — our mailboxes run on Microsoft 365, hosted in the EU. The contact form sends your enquiry through Microsoft Graph to our own inbox — the message reaches the same place it always did, with one fewer party in between. See Microsoft's privacy policy.
• Cloudflare — hosts this website and processes technical request data (such as IP address) as infrastructure. See Cloudflare's privacy policy.

There is no Google Analytics, no advertising platform and no social media tracking on this site.

No page on this site makes a third-party request — submitting the contact form included. The form is sent from our own systems to our own mailbox.

5. How long we keep it

We keep enquiry messages for up to 12 months after our last exchange, or as long as reasonably necessary to deal with your enquiry, after which they are deleted.

6. Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, and to data portability (Art. 15–21). To exercise any of these, email us at the address published on this site.

7. Complaints

If you believe we have mishandled your data, you have the right to complain to the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — cnpd.pt.

8. Cookies and local storage

This site sets no cookies. It uses your browser's local storage only to remember two functional preferences — your theme (light or dark) and your language. Both are strictly functional, so no consent banner is required. There are no third-party cookies and no advertising. Our audience measurement is cookieless too — see the next section.

9. Audience measurement

We measure how this site is used with Matomo, which we host ourselves. There is no Google Analytics and no third-party analytics service — the data never leaves our own infrastructure.

• Cookieless — it sets no tracking cookies and stores nothing on your device.
• Your IP address is anonymized before it is stored.
• The data is processed on our own server in the European Union (OVH, France) and is never shared with third parties.
• No cross-site tracking, and no profiling across other websites.
• Served first-party — the measurement script and every measurement request come from solvetus.com itself, so your browser never connects to an analytics domain.
• Raw measurement data is kept for twelve months, then deleted automatically. Aggregated reports, which no longer identify an individual visit, are kept beyond that.

The legal basis is our legitimate interest in understanding how this site performs (Art. 6(1)(f) GDPR). The configuration follows the CNIL's guidelines for audience-measurement tools exempted from consent, which is why you are not asked to accept a banner.

We honour the Do Not Track and Global Privacy Control signals automatically. If your browser sends either one, the measurement request is discarded at our edge before it ever reaches Matomo — nothing is recorded, and there is nothing for you to switch on. We deliberately do not offer an opt-out cookie: that would mean storing something on your device in order to remember that you wanted nothing stored.

If you would rather object to this measurement for any other reason, you have that right under Art. 21 GDPR — email us at the address published on this site and we will exclude you.

10. Security

All data is transmitted over HTTPS/TLS and the site is served from Cloudflare's infrastructure with DDoS protection and encrypted transit. We apply a strict Content-Security-Policy and modern security headers.