Privacy Policy

Gescer - Contabilidade e Gestão, Lda., of Av. Primeiro de Outubro, 4920-248 Vila Nova de Cerveira, Portugal, is the controller responsible for the personal data collected through this website.

For any question about privacy or data protection, contact us at geral@gescer.pt or on +351 963 588 641.

We collect only the data you provide voluntarily through the contact form: your name, email address, subject and the content of your message.

This site uses no tracking cookies, includes no analytics tools and builds no visitor profiles. The Client Area uses only the storage strictly necessary to keep you signed in.

Data submitted through the contact form is used solely to respond to your enquiry or request for a service proposal.

The legal basis for this processing is our legitimate interest in responding to enquiries we receive and, where applicable, taking steps at your request prior to entering into a contract.

The Client Area is a service reserved for Gescer clients, for exchanging documents securely. Access is created by invitation from Gescer only; there is no public registration.

Within it we process authentication data (email address and hashed password), the client company's details, and the documents you send us or that we make available to you, together with their upload date and size.

The legal basis for this processing is performance of the accounting services contract and compliance with the legal obligations arising from it.

Your signed-in session is held in your browser's local storage. This is strictly necessary for the service to function and serves no tracking purpose.

Contact form submissions are processed by Web3Forms, which forwards the message to Gescer's email address.

Authentication and account details for the Client Area are processed by Supabase, on servers located in Frankfurt, Germany.

Documents exchanged through the Client Area are stored by Cloudflare (R2), with jurisdictional restriction to the European Union. Cloudflare also hosts this website.

Notifications of new uploads are sent via Resend. Those messages state only the file name and the sending company — documents never travel by email.

All of these act as processors under their respective data processing agreements. We do not sell, rent or otherwise disclose personal data to third parties for marketing purposes.

Messages received through the contact form are kept only for as long as needed to respond to the enquiry.

Documents placed in the Client Area are deleted automatically 90 days after upload. The area is for exchanging documents and is not an archive: please keep your own copy of anything you need to retain.

Deleting documents from the Client Area does not affect the statutory retention periods applicable to accounting activity, which Gescer meets in its own systems.

Account data is retained for the duration of the contractual relationship.

Under the General Data Protection Regulation (GDPR), you have the right to access your personal data, request its correction or erasure, restrict or object to its processing, and request data portability.

To exercise any of these rights, write to us at geral@gescer.pt. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

We may update this policy whenever the services offered through this site change or applicable legal obligations change. The date of the most recent update is shown at the top of this page.