PRIVACY POLICY
The protection and security of your personal data are important to us. Personal data means any information relating to an identified or identifiable natural person (data subject) (“Personal Data”). This privacy policy (“Privacy Policy”) tells you how we collect, use, share and protect your Personal Data which is collected through our website https://www.aisquare.ai/ (the “Site”) and any platforms and services provided by us (collectively, the “Platforms”)
AISQUARE, LIMITADA, with registered office at Rua Engenheiro Ferreira Dias, n.º 978, Centro Via Rápida, Escritório A, 4149-008 Porto (Portugal) and with the identification and taxpayer number 517852810 (“Company”), is the controller of your Personal Data collected pursuant to the General Data Protection Regulation (“GDPR”) and any other applicable data protection legislation.
Please read this Privacy Policy to understand how the Company may process your Personal Data via your use of our Platforms.
1. Information we collect
When you interact with us through the Platforms, we may collect Personal Data and other information from you, as further described below:
•Personal Data that you provide: We collect Personal Data from you when you voluntarily provide such information, such as when you send us a request for additional information.
•Personal Data provided to us: The company you work for, or which you represent, may provide us with your identification and/or contact data within the context of the execution of a services agreement between us and the company you represent/work for.
•Usage of the Platforms: We may also process information about your usage of our Platforms, such as the make and model of your device, operating system, operating system version, the Platforms you engage with and your actions in relation to them.
2. Our use of your personal data and other information
We process your Personal Data to enable us via the Platforms to perform the contract we are about to enter into or have entered into with you, to ensure compliance with local legal and regulatory requirements and for the purposes of our legitimate business interests, as detailed below. If you use the Platforms as representative of a corporate entity, we will process your data for the purposes of our legitimate business interest in providing the services covered by the contract we are about to enter into or have entered into with the company you represent.
If you do not provide us with the data marked as mandatory in our forms or required for the purposes of performing the contract we have entered into with you (as detailed below), we will not be able to provide you with the Platforms (or part of them) or the information requested by you.
We will only retain your Personal Data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements. You can also find the retention periods we apply to your Personal Data below.
a) Management of requests
We will process your personal data when you send us a request relating to our Platforms.
The purpose of processing is the management of any communication or request you may send to us relating to the Platforms (for example a request for information or assistance).
The legal basis of the processing is our legitimate interest in providing you the information or assistance requested relating to the Platforms (Art 6.1.f GDPR), unless you are exercising one of your rights under the applicable law (for example, your rights as a data subject under the GDPR), in which case the processing of your personal data is necessary for our fulfilment of our legal obligations (Art 6.1.c GDPR).
We will process your personal data for a maximum period of 6 (six) months from the proper and comprehensive management of your request or until the expiration of the relevant statute of limitation, whichever occurs later.
b) Negotiation and execution of contracts
We will process your personal data in order to negotiate and perform any contracts entered into by and between AI Square and you or the company you represent or to which you work for.
The processing of your personal data for this purpose is necessary for the performance of our contract with you about the use of the Platforms (under article 6.1.b of the GDPR), unless you act as a representative of an entity, in which case the legal basis of the processing is our legitimate interest in providing the services covered by the contract we are about to enter into or have entered into with the entity you represent (Art 6.1.f GDPR).
We will process your personal data until the end of the relevant contract and, after that, until the expiration of the statute of limitation of our obligations under that contract.
c) Compliance with legal obligations
In certain circumstances, applicable laws require us to use your personal data (for example to inform you of a data breach involving your data and the measures we have taken to address the situation).
In these cases, the processing of your personal data is necessary for our fulfilment of our legal obligations (Art 6.1.c GDPR).
We will process your personal data until the expiration of the relevant statute of limitation, as applicable.
d) Platforms improvement
We may process your personal data for analytics purposes, to improve our Platforms, the content and the functionality of the Platforms.
The processing of your personal data for this purpose is based on our legitimate interest in improving our Platforms (Art 6.1.f of the GDPR).
We will process your personal data in accordance with the retention periods applicable to the cookies we use (please see our Cookie Policy)
e) Detection of security incidents and problems
We may process your personal data to detect security incidents and problems in the Platforms, and protect you and the Platforms against malicious, deceptive, fraudulent, or illegal activity.
The processing of your personal data for this purpose is based on our legitimate interest in guaranteeing the correct functioning of the Platforms (Art 6.1.f of the GDPR).
We will process your personal data for a maximum period of 6 (six) months from the proper and comprehensive management of the issue identified.
f) Defense of our rights on any judicial or extra-judicial proceedings
We may process your data if it is required for the assessment and prosecution of crimes, prevention and protection from threats to public security or to allow us to ascertain, exercise or defend a right in court, as well as for other reasons related to the protection of the rights and freedoms of others.
The processing of your personal data for this purpose is based on our legitimate interest in ensuring the defense of the rights of the Company and others (Art 6.1.f GDPR).
We will process your personal data until the expiration of the relevant statute of limitation or until the final decision of the relevant judicial or extra-judicial proceeding, whichever occurs later.
For technical reasons, the termination of the processing and the consequent erasure of your personal data, or its anonymization, will take place within 30 (thirty) days from the terms indicated above.
If we intend on using any Personal Data in any manner that is not consistent with this Privacy Policy, you will be informed of such anticipated use prior to or at the time at which the Personal Data is collected.
3. Recipients of your personal data and other information
There are certain circumstances in which we may share your Personal Data with certain third parties for the purposes described above or in which certain entities may process personal data on our behalf, as set forth below:
•Business Transfers: As we develop our business, we might sell or buy businesses or assets. In the event of a corporate sale, merger, reorganization, dissolution or similar event, Personal Data may be part of the transferred assets, based on ours and the buyer’s legitimate interest in carrying out the relevant business transfer and carrying out appropriate due diligence.
•Data processors appointed by us: For the provision of our Platforms, we may use the Platforms of third parties, which will process your data on our behalf and according to our instructions.
•Legal Requirements: We may disclose your Personal Data if required to do so by court or administrative order; where we are legally required to assist public authorities within their legal competences or in order to protect and defend our rights or to protect the personal safety of users of the Platforms or the public.
In the various contexts described in this section, we may contract the provision of Platforms to an entity and such provision may require the transfer of personal data to countries outside the European Economic Area.
Your personal data may be transferred to countries outside the European Union (EU) or the European Economic Area (EEA), which, however, offer an adequate level of data protection, as established by specific resolutions issued by the European Commission (https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en).
The transfer of your personal data to countries that do not belong to the EU/EEA and that do not ensure adequate levels of protection, in particular, the USA (except when the relevant adequacy decision applies), will be carried out only after the Company and the recipients of the data have concluded specific agreements, containing safeguard clauses and appropriate guarantees for the protection of your personal data, so-called "standard contractual clauses", also approved by the European Commission (https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en).
You may ask us for more information on the content of the safeguards adopted at any time through the contact details provided in section 10 below.
4. Exclusions
This Privacy Policy does not apply to any Personal Data collected by us other than Personal Data collected through the Platforms. This Privacy Policy will not apply to any unsolicited information you provide to us through the Platforms.
5. Children
We do not knowingly collect Personal Data from children under the age of 18. If you are under the age of 18, please do not submit any Personal Data through the Platforms. We encourage parents and legal guardians to monitor their children’s Internet usage and to help enforce our Privacy Policy by instructing their children never to provide Personal Data on the Platforms without their permission. If you have reason to believe that a child under the age of 18 has provided Personal Data to us through the Platforms, please contact us, and we will endeavor to delete that information from our databases.
6. Links to other websites
This Privacy Policy applies only to the Platforms. The Platforms may contain links to other websites not operated or controlled by us (the “Third Party Sites”). The policies and procedures we described here do not apply to the Third Party Sites. The links from the Platforms do not imply that we endorse or have reviewed the Third Party Sites. We suggest contacting those sites directly for information on their privacy policies.
7. Security
We take reasonable steps to protect the Personal Data provided via the Platforms from loss, misuse, and unauthorized access, disclosure, alteration, or destruction. However, the Internet is not fully secure or error free. Therefore, you should take special care in deciding what information you send via the Platforms. Please keep this in mind when disclosing any Personal Data to us.
8. Changes to company’s privacy policy
This Privacy Policy was last updated on the date indicated below. The Platforms and our business may change from time to time. As a result, at times it may be necessary for us to make changes to this Privacy Policy. We reserve the right to update or modify this Privacy Policy at any time and from time to time. Please review this policy periodically, and especially before you provide any Personal Data. If we update this policy, we will change the date of its last update below and inform you of the change made.
9. Your rights
As data subject, you have the right to:
• Have confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to the data and related information (in particular, the purposes of the processing; categories of personal data concerned; recipients or categories of recipients to whom the data have been or will be disclosed; the period of retention of the data or the criteria for determining it; the existence of the right to rectify or erase the data or to limit or oppose the processing; the right to lodge a complaint with a supervisory authority; the source of the data; the possible existence of an automated decision-making process, including profiling and, in such cases, significant information on the logic involved and the importance and envisaged consequences of such processing for the data subject; the appropriate safeguards in case of transfer of personal data outside the EU/EEA), as well as a copy of such personal data, provided that this does not adversely affect the rights and freedoms of others (right of access);
• Obtain the rectification of your personal data, i.e., to obtain the correction, modification or updating of any inaccurate or no longer correct data, as well as to obtain the integration of incomplete personal data, including by providing a supplementary statement (right of rectification);
• Request the erasure of your personal data when these, in particular, (i) are no longer necessary in relation to the purposes for which they were collected or processed, or (ii) they have been processed unlawfully, or (iii) they must be erased in order to comply with a legal obligation (right to erasure);
• Obtain a restriction on the processing of your personal data, i.e., that the Company retains such data without being able to use them. This right can be exercised only when, in particular, (i) the accuracy of the personal data is contested, for the period necessary for the Company to verify the accuracy of such data, or (ii) the processing of the data is unlawful and a restriction on the use of the data is requested, instead of their erasure, or (iii) although the Company no longer needs them for the purposes of processing, the personal data are necessary for you to establish, exercise or defend legal claims (right to restriction of processing);
• Receive from the Company your personal data, processed on the basis of a contract or your consent, in a structured, commonly used and machine-readable format, and that they are transferred, where technically possible, directly to a third party indicated by you (right to data portability);
• Object at any time, for reasons related to your particular situation, to the processing of your personal data, in particular, for marketing purposes, including profiling (right to object);
• Withdraw any consent given to us to process your personal data at any time, without that affecting the lawfulness of processing based on consent before its withdrawal (right to withdraw your consent).
We may ask you for additional information to confirm your identity and for security purposes, before disclosing information requested.
If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the data protection authority (in Portugal, the Comissão Nacional de Proteção de Dados, for more information www.cnpd.pt). The complaint can also be made to a data protection authority other than that of Portugal, if said data protection authority is that of the EU Member State in which you have your habitual place of residence or of the place where the alleged breach took place.
If you wish to exercise any of your rights, please contact us using the information provide in the “Contact Us” section below.
10. Contact us
If you have any questions about this Privacy Policy or our information practices, please send an email to geral@aisquare.ai.
When you contact us, we will do our best to address any concerns you may have about our processing of your Personal Data.
Last updated: 22.04.2025