Privacy & cookies
Last updated: 2 November 2026
Information we collect
If you request a product brochure, we collect your company name, contact name, email address and phone number. We record these details, the requested product and the request's progress status as a lead in our Rukovoditel business-management system to manage and follow up on your request. Requesting a brochure does not subscribe you to marketing. We check whether the email domain has mail or host DNS records, respond to your request and provide links to the available brochure languages. This DNS check does not verify that a particular mailbox exists or that a message can be delivered.
If you submit a partnership enquiry through a distributor card, we collect your company name, contact name, email address, phone number and message. We store the company, contact details and message as a lead in Rukovoditel, with the product field identifying a partnership request and a progress status, to manage and follow up on your enquiry. The message is also sent by email. Requesting a partnership does not subscribe you to marketing.
If you use the ordinary contact form, we collect your name, email address and message so we can respond; this form sends an email and does not create a lead in Rukovoditel. The forms also use a basic arithmetic CAPTCHA and a necessary session cookie to help protect submissions from automated abuse.
Providing the required fields is necessary for us to handle your request; without them we may be unable to respond or provide the requested brochure. We do not use these details for marketing, profiling or automated decisions.
Purpose, legal basis and sharing
We use the information you provide to respond to and follow up on your enquiry or brochure request and to take the steps you ask us to take. Depending on the request, the legal basis is taking steps at your request before a possible contract and/or our legitimate interest in responding to business enquiries and protecting the forms against abuse. Where we rely on consent for a specific purpose, you may withdraw it at any time; this does not affect processing already carried out.
Form submissions are emailed to P.HD Innovation at info@phdinnovation.pt. Brochure and partnership requests are also stored in our Rukovoditel system at si.phdinnovation.pt and are accessible to authorized staff for request management and follow-up. Contact details are not included in the public website's content cache or public pages. Acknowledging this privacy notice is not consent to marketing. Email, hosting and security providers may process information as needed to deliver and protect the website and correspondence. We do not sell personal data or use it for advertising or marketing newsletters.
How long we keep information
Brochure and partnership leads in Rukovoditel and correspondence in email systems are retained only for as long as necessary to manage and follow up on the request, maintain an ongoing business relationship where applicable and meet legal obligations. We delete or anonymize personal data when it is no longer needed for these purposes. Temporary form-security data, a reference used to avoid duplicate leads after an email-delivery failure and brochure download links are held in a server-side session; the duplicate-prevention reference and download links expire after one hour and the session cookie expires when you close your browser.
Your data-protection rights
Subject to the conditions in data-protection law, you may ask for access to or correction or erasure of your data, request restriction of processing, object to processing, request data portability where applicable, or withdraw consent where processing is based on consent. Contact info@phdinnovation.pt to exercise these rights. You may also lodge a complaint with the Portuguese data protection authority, the CNPD.
Cookies and local storage
This website uses only a strictly necessary PHP session cookie for form security, the CAPTCHA challenge and temporary brochure download links. It is not used to track visitors and expires when your browser session ends. The cookie notice dismissal is kept only in the current browser tab's session storage and is not sent to the server. When you select Auto, Light or Dark, your theme preference is saved in this browser's local storage until you change it or clear website data; it is not sent to the server or used for tracking. Auto follows your device's color scheme. We do not currently use analytics, advertising or other non-essential cookies, or load third-party analytics services. If that changes, non-essential cookies will not be used until any consent required by law has been obtained.
Security and contact
We use HTTPS to protect information in transit and apply measures intended to limit access to submitted information. No internet transmission or email system can be guaranteed completely secure. P.HD Innovation, at Rua de S. Gonçalo, 40 - Ramalha, 4730-475 Vila de Prado, Portugal, is responsible for the personal data described in this policy. For questions or to exercise your rights, contact info@phdinnovation.pt.
Public contact cards
We make selected professional contact details available as downloadable vCard files only when publication is explicitly enabled in our business-management system. Cards contain the contact's name, department, email address, telephone and mobile number where provided. Titles, dates of birth and internal observations are not published. Anyone with an active card's link or QR code can download and save these details. Disabling publication prevents further downloads from that link, but cannot remove or update copies already saved on other devices. To request a correction or removal, contact info@phdinnovation.pt.
Protected training agenda
The separate training agenda at si.phdinnovation.pt accepts your Rukovoditel login or mobile number and sends a one-time access code through ClickSend to the valid mobile registered in that active account. A login identifies the account when a mobile is shared; entering a mobile directly requires it to identify one active account. This SMS access is independent of native Rukovoditel two-factor authentication. Assigned users can consult their assigned calendar sources; administrators can consult all sources. This processing supports our legitimate interests in securely managing professional training schedules and preventing unauthorized access, not marketing.
The access code expires after 5 minutes and permits up to 5 verification attempts. A strictly necessary Secure, HttpOnly session cookie named PHDAGENDA permits access for up to 8 hours in that browser. Hashed authentication and abuse-prevention records are normally removed by hourly maintenance within 24 hours. ClickSend receives the destination number and SMS content; its processing and retention are governed by the applicable service arrangements. Contact us for information about provider locations and any international-transfer safeguards.
Authorized Intrafor sources provide course, module, location, room, status and session times. Portal passwords are encrypted at rest and restricted to administrators; they are used only for authorized synchronization. Calendar records are retained while needed to manage the training activity and related legal obligations. Changes and cancellations are highlighted for 7 days, but that highlighting period does not delete the underlying records. Personal calendar data and portal credentials are never included in the public website content cache.
Private calendar subscriptions
After SMS authentication, you may create a private calendar subscription link with optional session reminders. The link permits anyone holding it to fetch the calendar without a new SMS until it is revoked or the account loses access. Keep it secret. We store a hash of the token, its account and verified-mobile binding, reminder preference and creation time until replacement or revocation; the original token cannot be recovered from that storage. Source access is rechecked on every fetch. Calendar applications and their providers may receive and retain the link and calendar data, and hosting access logs may contain the link. Revoking stops future access but does not erase copies already downloaded to devices. Notification behavior and update frequency depend on your calendar application.