Privacy Policy

This privacy policy explains how openvision S.A. ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website or use our services.

Last updated: 15th January 2026

Data Controller Information

openvision S.A. is the data controller responsible for your personal data. We are registered in Portugal with registration number 253697148 and VAT number PT258741369. Our registered office is located at Rua do Comércio 21, 1041-632 Lisbon, Portugal.

Data Collection

We collect personal data that you provide directly to us and information that is automatically collected when you visit our website. The data we collect includes:

• Contact Information: Name, email address, phone number, and business details when you contact us or request our services
• Communication Data: Messages, enquiries, and correspondence you send to us
• Website Usage Data: IP address, browser type, device information, pages visited, and time spent on our website
• Business Information: Restaurant details, payment system requirements, and operational information relevant to our analysis services

How We Use Your Information

We use the personal data we collect for the following purposes and under the following legal bases:

• Service Provision: To provide payment system analysis services and respond to your enquiries (legal basis: contract performance and legitimate interests)
• Communication: To communicate with you about our services, respond to your requests, and provide customer support (legal basis: contract performance and legitimate interests)
• Website Improvement: To analyse website usage, improve our services, and enhance user experience (legal basis: legitimate interests)
• Legal Compliance: To comply with legal obligations and protect our rights (legal basis: legal obligation and legitimate interests)
• Marketing: To send you information about our services with your consent (legal basis: consent)

Cookies and Tracking Technologies

We may use cookies and tracking technologies for analytics, advertising, and remarketing purposes, including Google Ads. These technologies help us measure campaign effectiveness, deliver relevant advertisements, and improve our services. You can manage your cookie preferences at any time through our cookie consent banner. For detailed information about our use of cookies, please see our Cookie Policy.

Data Sharing

We do not sell or rent your personal data to third parties. We may share your information in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website and providing our services
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, comply with legal obligations, and resolve disputes. Specifically:

• Contact enquiries and communications: 3 years from last contact
• Client project data: 7 years after project completion for business records
• Website analytics data: 26 months as per Google Analytics retention settings
• Marketing consent data: Until consent is withdrawn

Your Rights

Under GDPR and applicable data protection laws, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data in certain circumstances
• Restriction: Request restriction of processing in certain circumstances
• Portability: Request transfer of your data to another controller
• Objection: Object to processing based on legitimate interests or for marketing purposes
• Withdraw Consent: Withdraw consent for processing where consent is the legal basis

International Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as adequacy decisions or standard contractual clauses approved by the European Commission.

Children's Privacy

Our services are not directed to children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Information

If you have questions about this privacy policy, wish to exercise your rights, or need to contact us regarding data protection matters, please contact us at:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados) if you believe we have not handled your personal data appropriately.