🎯 Free diagnostic for businesses · Book a no-obligation meeting today
Privacy Policy
Last updated: October 2026
This policy explains how Stratechna handles the personal data of those who visit stratechna.com, purchase services or contact us, in accordance with the General Data Protection Regulation (GDPR) and Law no. 58/2019.
1. Data controller
STRATECHNA – Tecnologia e Serviços Empresariais, Lda, Estrada do Zambujal, 74, 2610-193 Alfragide (Amadora), Portugal, NIPC 519 106 385. For data protection matters, including contacting the data protection officer: suporte@stratechna.pt.
| Subject | Phone | |
|---|---|---|
| Sales and orders | info@stratechna.pt | +351 967 107 673 |
| Technical support | suporte@stratechna.pt | +351 967 107 673 |
| Invoicing | contabilidade@stratechna.pt | — |
2. What data we process and why
| Situation | Data | Purpose and legal basis |
|---|---|---|
| Purchase of services | Name, company, tax number, address, email, phone | Performance of the contract, invoicing and tax obligations (Art. 6(1)(b) and (c) GDPR) |
| Payment | Transaction data (the card is processed by Reduniq and never passes through our servers) | Performance of the contract |
| Domain registration | Domain holder’s data | Obligation towards the managing entities (DNS.pt and international registries) |
| Hosting, email and Orbit | Content, emails and data entered by the Client | Processed on behalf of the Client, as a processor (Art. 28 GDPR) |
| Contact and proposals | Name, email, phone, message | Pre-contractual steps and legitimate interest in responding |
| Website browsing | Necessary technical data (session, cart, server logs) | Website functioning and security (legitimate interest) |
3. Who we share data with
We use service providers that process data on our behalf, under contracts that ensure the protection required by the GDPR:
- Hetzner — hosting, email and Orbit servers (Germany and Finland);
- Reduniq — payment processing;
- Moloni — issuing invoices and receipts;
- Zoho (data centre in the EU) — customer and order management;
- PTisp / domain managing entities — domain registration and renewal.
Data may also be disclosed to the authorities where required by law. We do not sell personal data.
4. Transfers outside the EU
Data is processed on servers within the European Union. If, exceptionally, a provider processes data outside the European Economic Area, we ensure the safeguards provided for under the GDPR (for example, standard contractual clauses).
5. Retention period
- Client data: for the duration of the contract and, afterwards, for up to 10 years to comply with tax and accounting obligations;
- Contact requests and proposals not accepted: for up to 3 years after the last contact;
- Data entered into the services (hosting, email, Orbit): for up to 30 days after the end of the contract, to allow for export.
6. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), accounts isolated per client, restricted access and infrastructure backups. No transmission over the Internet is completely secure; the Client must protect their credentials.
7. Your rights
You may request access, rectification, erasure, restriction of processing, portability, or object to the processing of your data (Articles 15 to 21 of the GDPR), and withdraw consent where processing is based on it. Write to suporte@stratechna.pt; we will respond within a maximum of 30 days.
8. Complaints
You may lodge a complaint with the supervisory authority:
Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º — 1200-651 Lisboa · +351 213 928 400 · geral@cnpd.pt · www.cnpd.pt
9. Client Portal and linked platforms
Clients who use the Client Portal may authorise us to access their accounts on external platforms — Google Analytics, Google Search Console, Google Ads, Google Business Profile, Facebook, Instagram, LinkedIn and YouTube — so that we can provide the digital marketing and online presence management services contracted.
The connection is always initiated by the client and may be withdrawn at any time, either in the portal or in the platform’s own settings. We only request the permissions necessary for the service contracted, use the data solely to provide it, and nothing is published on the client’s behalf without their prior approval. We do not sell this data, do not disclose it to third parties for their own purposes, and do not use it to train artificial intelligence models.
The details for each platform — which permissions are requested, what they are for, how long credentials are kept and how access can be withdrawn — are set out in the Portal Privacy Notice, which complements this policy.
Stratechna Account. The stratechna.pt and stratechna.com stores and the client portal (portal.stratechna.com) use a single account, managed by Stratechna — Tecnologia e Serviços Empresariais, Lda. (NIPC 519 106 385). When you create an account in one of the stores, we store your name, email and password (encrypted) in that single account, so that you can log in with the same details across all of them. Until you make your first purchase of services on stratechna.com, the account only serves the stores: we do not open a client record or portal access, and we do not send you communications on that basis. Purchases made on stratechna.pt will appear in the portal once the account is activated. You may request deletion of the account at any time via info@stratechna.pt.
10. Limited use of Google data
Stratechna’s use and transfer of any information received from Google APIs comply with the Google API Services User Data Policy, including the Limited Use requirements.
Specifically: data obtained from Google Analytics, Google Search Console and Google Ads of our clients’ accounts, with their express authorisation, is used exclusively to produce the analyses and reports contracted. It is not sold, not shared with third parties, not used for advertising and not used to train artificial intelligence models. Access can be withdrawn at any time, via the portal or in Google’s security settings.
Stratechna’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
11. Changes
We may update this policy; the date of the version in force is indicated at the top of this page.