Privacy Policy

The entity responsible for the processing of personal data is Geração Imaginar Lda, based in Portugal.

Personal data is processed based on the data subject's consent, the execution of a service contract, and the legitimate interest of the data controller, in accordance with Regulation (EU) 2016/679 (GDPR).

We process the following categories of personal data: identification data (name, email), professional data (role, company), HACCP operational data (temperature records, hygiene, audits and other food safety records).

Data is processed for: provision of digital HACCP management services, compliance with food safety legal obligations (ASAE), service communications (alerts, notifications), continuous platform improvement.

HACCP records are retained for a minimum period of 2 years, as required by ASAE legislation. Account data is retained for the duration of the contract and for 6 months after its termination.

Under the GDPR, data subjects have the right to access, rectification, erasure, portability, restriction of processing, and objection. HACCP records with mandatory legal retention periods cannot be deleted before that period expires.

To exercise your rights, please contact us at:

[email protected]

Data subjects have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) — www.cnpd.pt.