Legal & data protection
Privacy Policy
This notice explains what personal data the VERAEN website collects, why, and what your rights are.
Last updated: 14 October 2026
Who is responsible
VERAEN is in pre-launch and the company is being set up in Portugal. Until then, the person responsible for your data (the controller) is:
- Name
- Bruno Miguel de Oliveira Duarte
- contact@veraen.com
What data we collect
- Booking a call: your name, email, company and any notes you add when you book through Calendly.
- Emails you send us: your name, email address and message.
- Technical data: IP address, browser type and time of visit, logged by our hosting provider to keep the site secure.
We do not use advertising or analytics cookies, do not create profiles and never sell your data.
Why we use it
- Answering your request and preparing a call
- Art. 6(1)(b) GDPR: steps before a contract
- Following up on business conversations
- Art. 6(1)(f) GDPR: legitimate interest
- Keeping the website secure
- Art. 6(1)(f) GDPR: legitimate interest
Who processes data for us
- Calendly LLC (USA): booking calendar. Transfers to the USA are based on the EU–US Data Privacy Framework and Standard Contractual Clauses.
- Lovable (Lovable Labs, Sweden): website hosting. Pages are delivered through a global network, which may involve servers outside the EU; Lovable uses the safeguards required by the GDPR for such transfers.
- Google Ireland Limited (Google Workspace): email. Google may process data outside the EU under the EU Standard Contractual Clauses.
We do not share your data with anyone else, unless the law requires it.
How long we keep it
- Booking and email data: up to 24 months after our last contact.
- Server logs: kept only for a short period, as set by our hosting provider, and then deleted automatically.
How we protect it
Data is sent over encrypted connections (HTTPS), and access is limited to the people who need it.
Your rights
To use any of these rights, email contact@veraen.com. It's free, and we reply within one month.
Access
Get a copy of the personal data we hold about you.
Rectification
Correct inaccurate or incomplete personal data.
Erasure
Ask us to delete your data when no legal reason requires us to keep it.
Restriction
Ask us to pause how we use your data.
Portability
Receive your data in a format you can reuse or transfer.
Objection
Object to how we use your data based on legitimate interest.
Withdraw consent
Withdraw any consent you have given at any time.
Complain
You can lodge a complaint with the Portuguese data protection authority, CNPD – Comissão Nacional de Proteção de Dados (www.cnpd.pt), or with the authority in your own EU country.
Changes
We will update this notice when the company is registered or our services change.