1. Controller
Paulo Barros Ferreira Unipessoal Lda
Alameda dos Descobrimentos n.º 35 - 3rd Floor, Office 32
4480-872 Vila do Conde
Portugal
Email: support@assistflow.eu
Where it determines purposes and means, Paulo Barros Ferreira Unipessoal Lda acts as Controller. Where it processes data entered into the platform on behalf of a business customer, it may act as Processor and that customer acts as Controller.
2. Legal framework
Personal data is processed under Regulation (EU) 2016/679 (GDPR) and applicable law, following lawfulness, fairness, transparency, purpose limitation, minimisation, accuracy, storage limitation, integrity and confidentiality principles.
3. Data we may process
- Identification and contact data supplied for demos, support or commercial relationships.
- Platform account and authentication data.
- Technical and navigation data required for security and operation.
- Operational data entered by customers, including information linked to service tickets, customers, technicians, equipment, interventions and documents.
- Support communications and service usage data.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Responding to contacts and demo requests | Pre-contractual steps and/or consent, as applicable |
| Providing and administering AssistFlow | Performance of a contract |
| Security, abuse prevention, logs and service improvement | Legitimate interests and legal obligations |
| Billing, accounting and tax obligations | Contract and legal obligation |
| Marketing where no other lawful basis applies | Consent |
| Optional analytics and advertising cookies | Consent |
5. Customer-controlled data
Business customers determine the data entered into AssistFlow and its purposes. Customers must provide required notices and ensure a lawful basis. AssistFlow processes such data according to documented instructions and applicable contractual terms.
6. Artificial intelligence
AssistFlow AI may process technical content submitted by a user to generate suggestions related to a service ticket. Unnecessary personal or confidential data should not be included. Where technology providers are used, appropriate contractual and technical safeguards will be applied.
7. Recipients and processors
Data may be processed by hosting, infrastructure, email, security, support, analytics, advertising or technology providers only as necessary and subject to legally required safeguards.
8. International transfers
Where a provider involves processing outside the EEA, legally appropriate transfer mechanisms will be used where required, such as adequacy decisions or Standard Contractual Clauses.
9. Retention
Data is retained only as long as necessary for the relevant purpose, contractual requirements and legal obligations. Customer-controlled data also follows applicable customer instructions and contractual terms.
10. Data subject rights
Where applicable, individuals may exercise rights of access, rectification, erasure, restriction, objection, portability and withdrawal of consent. Complaints may be submitted to the competent supervisory authority; in Portugal, the CNPD.
11. Security
Appropriate technical and organisational measures are used to protect data against destruction, loss, alteration, disclosure or unauthorised access. No system can guarantee absolute security.
12. Cookies
See the Cookie Policy. Non-essential cookies require consent where legally required.
13. Changes and contact
This policy may be updated for legal, technical or service changes. Contact: Paulo Barros Ferreira Unipessoal Lda
Alameda dos Descobrimentos n.º 35 - 3rd Floor, Office 32
4480-872 Vila do Conde
Portugal
Email: support@assistflow.eu