Privacy Policy

Introduction

The protection of your personal data is a priority for SparkleIT Information Technologies, Lda. This Privacy Policy transparently describes how we collect, use, store and protect your personal data when you use the FleetMax website, in compliance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679).

Scope of application

This policy applies exclusively to the use of the fleetmax.pt website, covering visitors, leads and potential customers. The processing of personal data carried out within the FleetMax platform (namely data of employees, drivers and vehicles of customers) is regulated by the Data Processing Agreement (DPA) entered into individually with each customer, in which SparkleIT acts as a processor under Article 28 of the GDPR.

Data controller

Entity: SparkleIT Information Technologies, Lda
Tax ID: 513192670
Registered office: Praça da Liberdade, Piso 1, Fração 2, 4900-040 Viana do Castelo
Email for exercising rights: info@sparkleit.pt
Website: www.sparkleit.pt

Personal data we collect

We collect personal data only when necessary to provide our services. Data may be collected in the following ways:

Data provided directly by the user

• Contact forms and demo requests: name, email, phone, company name and message.
• Newsletter subscription: email address.

Data collected automatically

• Browsing data: IP address, browser type, operating system, pages visited, visit duration and referral URL.
• Cookies and similar technologies: as described in our Cookie Policy.

Legal bases and purposes of processing

Your personal data is processed based on the following legal grounds:

• Consent (Art. 6(1)(a) GDPR): sending marketing communications, newsletters and use of non-essential cookies.
• Performance of a contract or pre-contractual measures (Art. 6(1)(b)): provision of FleetMax services, responding to demo requests and managing the contractual relationship.
• Legitimate interest (Art. 6(1)(f)): improving the website and services, statistical usage analysis and fraud prevention.
• Compliance with a legal obligation (Art. 6(1)(c)): applicable tax, accounting and legal obligations.

Sharing data with third parties

We do not sell, rent or share your personal data with third parties for their own purposes. Your data may only be communicated in the following situations:

• Service providers: entities acting on behalf of SparkleIT (hosting, email marketing, analytics), contractually bound to process data in accordance with this policy.
• Legal obligation: when legally required by competent authorities.

International transfers

If your data is processed outside the European Economic Area, SparkleIT ensures that appropriate safeguards will be applied, such as standard contractual clauses approved by the European Commission or adequacy decisions.

Data retention

Personal data is retained only for the period necessary for the purposes for which it was collected, or as required by applicable legislation. As a rule:

• Customer data: during the term of the contract and for the legally mandatory period after its termination.
• Lead and contact data: up to 24 months after the last interaction, unless consent is given for a longer period.
• Browsing data: according to the periods defined in the Cookie Policy.

Once the deadlines have elapsed, data is deleted or anonymised for statistical purposes.

Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access: obtain confirmation that your data is being processed and access a copy of it.
• Right of rectification: request the correction of inaccurate or incomplete data.
• Right of erasure: request the deletion of your data, in accordance with the law.
• Right to restriction of processing: request the restriction of processing in certain circumstances.
• Right to data portability: receive your data in a structured and commonly used format, or request its transfer to another entity.
• Right to object: object to the processing of your data, including for direct marketing purposes.
• Right to withdraw consent: withdraw consent at any time, without affecting the lawfulness of processing carried out previously.

Security

SparkleIT implements appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration. All employees with access to personal data are subject to confidentiality obligations.

Despite our efforts, no data transmission or storage system is entirely infallible. In the event of a data breach that may affect your rights, you will be notified without undue delay.

Minors

The FleetMax website and services are intended exclusively for persons aged 18 or over. We do not intentionally collect data from minors. Should we become aware that data has been collected from a minor, we will proceed with its immediate deletion.

Changes to this policy

This Privacy Policy may be updated periodically. Any significant changes will be communicated on this page with an indication of the date of the last update.