Privacy Policy

This Privacy Policy governs the processing of personal data collected through the Sophistik Future website (hereinafter "Website").

The Data Controller is Sophistik Future - Engenharia e Domótica, Lda., headquartered in Lisbon, Portugal, Tax/VAT ID PT 516 000 000, hereinafter referred to as "Sophistik Future".

For any queries concerning the protection of your personal data or to exercise your statutory rights, please contact us at: geral@sophistikfuture.pt.

Sophistik Future collects and processes only the data strictly necessary to deliver bespoke engineering services of the highest caliber:

• Contact & Consultation Form: We collect your name, email address, telephone number (if provided), and the description of your project or inquiry solely to answer your questions, arrange technical consultations, and prepare tailored proposals.

• Telemetry and Browsing Metrics: With your prior consent, we gather aggregated and non-identifiable technical metrics (such as device category, viewed pages, and session duration) exclusively for site optimization and technical auditing.

The processing of your data is based on the following grounds under Article 6 of the GDPR:

a) Pre-contractual steps and performance of a contract (Art. 6(1)(b)): To assess technical architectural blueprints, formulate quotes, and deliver contracted smart home systems;

b) Data subject consent (Art. 6(1)(a)): For activating analytical telemetry and requested informational communications;

c) Legal obligations (Art. 6(1)(c)): To comply with statutory tax, accounting, and technical regulations applicable in Portugal;

d) Legitimate interests (Art. 6(1)(f)): To ensure network and server infrastructure integrity, prevent abuse, and mitigate cyber threats.

Personal data is stored only for the duration strictly necessary to fulfill the purposes for which it was gathered:

• Contact requests and commercial inquiries: Kept for a maximum period of 24 months from the last interaction, unless a contract or ongoing project ensues;

• Client records and project execution: Stored throughout the contractual relationship and thereafter for the period legally required for fiscal audit (typically 10 years for transaction ledgers) and equipment warranties (3 to 5 years).

Sophistik Future does not sell or lease personal data to third parties under any circumstances.

Data may be handled by vetted sub-processors that supply essential technical hosting and operational infrastructure located within the European Union. All sub-processors are contractually bound by rigorous GDPR confidentiality and security covenants.

In keeping with our luxury confidentiality standards, residential customer identities and precise property locations are never publicized or associated with portfolio showcases.

Pursuant to Articles 15 to 22 of the GDPR, you have the right to request from Sophistik Future, at any time and free of charge:

• Right of Access: Confirmation of whether your data is processed and a copy thereof;

• Right to Rectification: Correction of inaccurate or incomplete personal records;

• Right to Erasure ("Right to be Forgotten"): Deletion of your data when no longer needed for original purposes;

• Right to Restriction of Processing: Temporary limitation of processing under specific circumstances;

• Right to Object: Opposition to processing grounded on legitimate interests;

• Right to Data Portability: Receipt of your personal data in a structured, machine-readable format.

To exercise any of these rights, email us at: geral@sophistikfuture.pt. We will respond within 30 days.

Without prejudice to any other administrative or judicial remedy, if you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a formal complaint with the competent supervisory authority:

CNPD – National Data Protection Commission (Comissão Nacional de Proteção de Dados)

Av. D. Carlos I, 134 - 1.º, 1200-651 Lisbon, Portugal | Website: https://www.cnpd.pt | Phone: +351 213 928 400

We implement state-of-the-art technical security controls, including end-to-end TLS encryption, strict HTTP headers, rate limiting against automated attacks, and restricted server access credentials.