'/%3e%3c/svg%3e)
Privacy Policy
Last updated: 4 October 2026
1. Data Controller
Waldyn, Lda. ("Waldyn", "we", "us") is the controller of personal data collected through the website waldyn.eu. For any privacy-related questions, contact us at privacy@waldyn.eu.
2. Data We Collect
We collect only the data necessary to respond to your enquiries and deliver our services: • Contact information you give us: name, email and company in our scheduling form (Cal.com); and, in the diagnosis request form on our /diagnostico pages, name, WhatsApp number, email, company, sector, annual revenue band and, optionally, the process you would like to improve • Campaign information from the link you arrived through, such as utm_* parameters and the Meta click identifier (fbclid) • Technical data (IP address, browser type, device information) collected automatically when you visit our website, also used to protect our forms against automated abuse • Advertising measurement data, only with your consent: Meta Pixel and Conversions API events such as page views, form steps and meeting bookings • Usage data (pages visited, time on site) collected via analytics cookies, only with your consent
3. How We Use Your Data
We use your data for the following purposes: • To respond to meeting requests, diagnosis requests and enquiries, including contacting you by WhatsApp, email or phone • To manage your request in our internal sales pipeline • To provide and improve our services • With your consent, to measure and improve our advertising on Meta (Facebook and Instagram) • To protect our forms against spam and automated abuse • To comply with legal obligations We do not sell your personal data to third parties.
4. Legal Basis (GDPR)
We process your data under the following legal bases: • Steps taken at your request before entering into a contract (Art. 6(1)(b)), when you request a diagnosis or a meeting • Consent (Art. 6(1)(a)), for advertising measurement through the Meta Pixel and Conversions API and for optional cookies; you can withdraw it at any time • Legitimate interest (Art. 6(1)(f)), for the security of our website and forms and for website analytics • Contractual necessity, when processing is required to deliver our services • Legal obligation, when required by Portuguese or EU law
5. Third-Party Services
We use the following third-party services that may process your data: • Cal.com, meeting scheduling (processes name, email and meeting details) • Vercel, website hosting (processes technical data such as IP address) • Supabase, database where diagnosis requests are stored • n8n, workflow automation operated on our own infrastructure, which routes requests to the tools below • Atlassian (Jira), our internal sales pipeline • Google Workspace (Gmail), internal email notifications about new requests • Meta Platforms Ireland Ltd. (WhatsApp Business), to send you WhatsApp messages about your request, through Dualhook, a technical provider that connects us to the WhatsApp Business Platform and does not store message content • Resend, to send our newsletter to people who subscribe (processes email and, if given, first name) • Cloudflare (Turnstile), to check that form submissions come from a person and not an automated script (processes IP address and browser signals) • Meta Platforms Ireland Ltd. (Meta Pixel and Conversions API), only with your consent. Contact details are sent in hashed (SHA-256) form. For the collection and transmission of this data, Waldyn and Meta are joint controllers; Meta then processes it under its own privacy policy to deliver and measure ads Except where stated otherwise, each provider operates under its own privacy policy and processes data as a processor on our behalf under appropriate agreements.
6. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes described above, or as required by law. Contact data from meeting and diagnosis requests is retained for the duration of any business relationship and up to 12 months after our last contact, unless you request earlier deletion.
7. Your Rights
Under the GDPR, you have the right to: • Access your personal data • Rectify inaccurate data • Request erasure of your data • Restrict or object to processing • Data portability • Withdraw consent at any time To exercise any of these rights, contact us at privacy@waldyn.eu. We will respond within 30 days. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
8. Cookies and Similar Technologies
Our website uses essential cookies and browser storage required for the site to function, including remembering your cookie choice and, during your visit, the campaign information described in section 2. On our /diagnostico pages, the Meta Pixel and its cookies (such as _fbp and _fbc) are only loaded after you click "Aceitar" in the cookie banner. You can change your choice at any time through "Preferências de cookies" at the bottom of those pages, which also stops the Pixel. Cloudflare Turnstile runs a security check when the diagnosis form loads, which is necessary to protect the form. We may also use analytics cookies with your explicit consent. You can also manage cookies through your browser settings.
9. International Transfers
Your data is primarily processed within the European Economic Area (EEA). Where data is transferred outside the EEA (for example, to service providers in the United States such as Meta, Cloudflare, Atlassian, Google or Cal.com), we ensure appropriate safeguards are in place, such as the EU-U.S. Data Privacy Framework where the provider is certified, or Standard Contractual Clauses approved by the European Commission.
10. Changes to This Policy
We may update this policy from time to time. Material changes will be communicated through our website. The "last updated" date at the top of this page indicates the most recent revision.