Privacy policy

The controller of your personal data is Digital Skware, Lda, tax ID 513766022, with registered office at R. Espido 164C, Sl 101, 4470‑177 Maia, Portugal, trading as Skrey ("Skrey", "we", "us").

For any question about privacy or this policy, you can contact us at hello@skrey.com.

We only collect the data we need for the purposes described in this policy:

• Contact data you send us by email: name, email address, company, job title, phone number and the content of your message.
• Application data: name, contact details, CV, portfolio and any other information you choose to share when you apply for a role or send an open application.
• Browsing data: IP address, browser and device type, pages visited, date and time of access and referral source, collected by our servers and, if you allow it, by analytics and marketing cookies.
• Cookie preferences: the choice you make in the cookie notice and when you made it.

We do not ask for special categories of data (for example, health data or political opinions). Please do not include them in the messages or applications you send us.

Replying to enquiries and proposal requests

We use the data you send us to reply to your messages and prepare proposals. The legal basis is taking steps at your request before entering into a contract and our legitimate interest in replying to people who contact us.

Managing applications

We use application data to assess your profile and run the recruitment process. The legal basis is taking steps at your request before entering into a contract. If you would like us to keep your application for future opportunities, we do so on the basis of your consent.

Running and securing the website

We process technical browsing data to deliver the website, prevent abuse and keep it secure. The legal basis is our legitimate interest in keeping the website secure and working.

Analytics and marketing

We only use analytics cookies, to understand how the website is used, and marketing cookies, to show relevant campaigns, if you give your consent in the cookie notice.

Legal obligations

We may process data to comply with legal and tax obligations or orders from competent authorities.

Cookies and similar technologies are small files stored on your device. We use three categories, which you can choose in the cookie notice shown on your first visit:

• Essential: always on, needed for the website to work and to remember your cookie choice.
• Analytics: help us understand, in aggregate, how the website is used. Only enabled with your consent.
• Marketing: used to measure and show relevant campaigns. Only enabled with your consent.

Your choice is stored in your browser's local storage. You can change it or withdraw your consent at any time: clear this website's data in your browser and the cookie notice will show again. Withdrawing consent does not affect the lawfulness of processing carried out before it.

We do not sell your data. We only share it with service providers that process data on our behalf, under contracts that require them to protect it and use it only on our instructions:

• Hosting and content delivery (CDN): the website is hosted on Cloudflare, which processes technical browsing data to serve the pages and protect the website.
• Email and communication: our email service provider, which stores the messages you send us.
• Analytics and marketing: providers of analytics and advertising tools, only if you consent to those cookie categories.

We may also disclose data to public authorities where the law requires it.

Some of our service providers, such as Cloudflare, may process data outside the European Economic Area. In those cases, the transfer is made with appropriate safeguards, such as adequacy decisions of the European Commission (including the EU‑US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

We keep data only for as long as each purpose requires:

• Messages and proposal requests: up to 24 months after the last contact, or for the duration of any resulting contract and the legal periods that follow it.
• Applications: until the end of the recruitment process. With your consent, up to 12 months for future opportunities.
• Analytics and marketing cookies: for the lifetime of each cookie, up to a maximum of 13 months.
• Cookie preferences: until you change them or clear the website's data in your browser.
• Technical server logs: for the short period set by our hosting provider for security purposes.

When the period ends, data is deleted or anonymised, unless the law requires us to keep it longer.

Under the GDPR, you have the right to:

• Access: know whether we process your data and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Erasure: ask us to delete your data when there is no reason to keep it.
• Restriction: ask us to restrict processing in certain situations.
• Portability: receive the data you gave us in a structured, commonly used format, or ask us to transmit it to another organisation.
• Objection: object to processing based on our legitimate interest, including for marketing purposes.
• Withdrawal of consent: withdraw any consent you gave us at any time, without affecting earlier processing.

To exercise any of these rights, email hello@skrey.com stating which right you wish to exercise. We may ask for additional information to confirm your identity.

We reply within one month of receiving your request. That period may be extended by two further months if the request is complex or we receive many requests, in which case we will let you know. Exercising your rights is free of charge, except for manifestly unfounded or excessive requests.

If you believe the processing of your data breaches the GDPR, you have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, or with the supervisory authority of the country where you live or work. We would appreciate the chance to address your concern first, so please contact us beforehand.

We apply appropriate technical and organisational measures to protect your data against loss, misuse, unauthorised access, disclosure or alteration, including encrypted connections (HTTPS), access control and choosing service providers with security guarantees. No system is completely secure, but we review these measures regularly.

The website is not intended for children under 16 and we do not knowingly collect data from children. If you know that a child has sent us personal data, please contact us so we can delete it.

We may update this policy to reflect changes to the website, our services or the law. The date of the last update appears at the top of this page. If the changes are significant, we will highlight them on the website.

Digital Skware, Lda

R. Espido 164C, Sl 101, 4470‑177 Maia, Portugal

hello@skrey.com