Cookie Policy

DataRoad — IT Services and Consulting Last updated: May 2026

1. Introduction

This Cookie Policy (hereinafter “Policy”) explains how DataRoad uses cookies and similar technologies on its website. www.dataroad.pt and respective subdomains (hereinafter the “Website”), describing the types of cookies used, their purposes and how the user can manage their preferences.

This Policy should be read in conjunction with our Privacy Policy and ours Terms and Conditions of Use, of which it forms an integral part.

The use of cookies on the Website is governed by Law No. 41/2004 of 18 August (concerning the processing of personal data and the protection of privacy in the electronic communications sector), by Regulation (EU) 2016/679 (GDPR) and by the guidelines of the National Data Protection Commission.

2. Identification of the Person Responsible

Company name: DATAROAD IT SERVICES AND CONSULTING LDA,  Trading name: DataRoad Head office Avenida dos Moinhos n.º 12 B, 2610-119 Alfragide (Quinta Grande), Portugal NIPC 513368078

Email sales@dataroad.pt

Data Protection Officer (DPO): [DPO@DATAROAD.PT]

3. What are cookies?

3.1. The biscuits they are small text files that a website, when visited, places on the user's device (computer, tablet, mobile phone) through the browser. They allow the site to recognise the device on subsequent visits, store preferences and improve the browsing experience.

3.2. Cookies do not cause harm nor do they contain viruses. They do not, by themselves, collect information that allows personal identification of the user, except when the user voluntarily provides such information (for example, by filling out a form).

3.3. In addition to cookies, similar technologies may be used for equivalent purposes, namely web beacons, pixels, local storage e session storage. For the purposes of this Policy, all these technologies are generically referred to as “cookies”.

4. Types of Cookies

4.1. Regarding the entity that manages them

• First-party cookiesfirst-party): managed directly by DataRoad from the website's domain.
• Third-party cookies (third-party): managed by entities other than DataRoad, such as Google, Meta or other technology service providers integrated into the Website.

4.2. Regarding duration

• Session cookies: temporary, automatically deleted after closing the browser.
• Persistent cookies: they remain on the user's equipment for a pre-defined period (ranging from minutes to years), until they are deleted manually or expire.

4.3. Regarding purpose

5. Cookies Used on This Site

5.1. Strictly necessary cookies

These cookies are indispensable for the operation of the Website and cannot be disabled in the systems. They are generally only set in response to actions taken by the user (filling in forms, authentication on the Customer Portal, setting cookie preferences).

5.2. Functional cookies / preferences

They allow the provision of enhanced features and personalisation of the experience. If they are not accepted, some elements of the Site may not function correctly.

5.3. Statistical / analytical cookies

They allow us to understand how visitors interact with the Site by collecting anonymous and aggregated information. This information helps us to continually improve the Site.

5.4. Social media cookies and embedded content

If the Site incorporates social media content (Facebook, Instagram, LinkedIn) or videos (YouTube, Vimeo), these services may set their own cookies, which are subject to their respective policies.

5.5. Spam protection cookies

To protect contact forms against automated submissions (bots), the Site uses verification services that may install their own cookies.

ℹ️ Important note: The list above reflects the cookies usually installed on the Site. This list is updated periodically. For real-time information regarding the active cookies in your browser, please refer to its inspection tools (see section 8).

6. Third-Party Cookies

6.1. Some cookies used on the Website are managed by third-party entities, namely:

6.2. International data transfers: some of these suppliers are based in third countries (specifically the United States of America). Where applicable, data transfers are carried out on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission or under the framework of EU-US Data Privacy Framework.

6.3. DataRoad does not control the collection or use of information by these third-party entities. We recommend consulting their respective policies for detailed information.

7. Legal Basis and Consent

7.1. Strictly necessary cookies: its storage and use are based on legitimate interest by DataRoad in ensuring the technical operation of the Website, as provided for in Article 5(3), second part, of Directive 2002/58/EC (transposed by Law No. 41/2004). They do not require prior consent.

7.2. Remaining cookies (functional, analytical, marketing): your storage and use depend on prior, free, specific, informed and unambiguous consent of the user, manifested through the consent banner displayed upon first accessing the Website.

7.3. In accordance with the guidelines of CNPD, the site's consent banner:

• Allow accept or reject non-essential cookies with equal visual prominence;
• Allows a granular management of the cookie categories;
• Do not pre-select non-essential cookies by default;
• It doesn't make it conditional access to the content of the Site is subject to the acceptance of non-essential cookies.

7.4. The consent given is valid for 6 months, after which they will be requested again from the user.

8. How to Manage Your Preferences

8.1. Through the consent banner

At any time, you can review or change your cookie preferences by clicking the button “Manage Cookies” available in the footer of the website, or by replacing the banner via the link “Cookie Policy”.

8.2. Via the browser

You can also configure your browser to block, delete or notify you of the installation of cookies. Instructions vary depending on the browser used:

• Google Chrome Settings → Privacy and security → Cookies and other site data
• Mozilla Firefox Settings → Privacy and Security → Cookies and Site Data
• Safari (macOS): Settings → Privacy → Cookies and website data
• Safari (iOS): Settings → Safari → Privacy & Security
• Microsoft Edge: Settings → Cookies and site permissions
• Opera Settings → Advanced → Privacy and Security

8.3. Additional tools

Stop opt-out specific to analytics and advertising cookies:

• Google Analytics: installing Google Analytics opt-out extension
• Google Ads: Ad settings
• Your Online Choices platform (EU): https://www.youronlinechoices.com/pt/

⚠️ Please note: Blocking cookies completely can affect the functionality of the Website, specifically by preventing access to the Customer Portal or compromising the operation of forms and interactive elements.

9. Data Subject Rights

As a data subject whose personal data is processed via cookies, you have the following rights, as provided for in the GDPR:

• Right of access to data relating to them;
• Right to rectification of inaccurate data;
• Right to erasure (right to be forgotten);
• Right to restriction of processing;
• Right to object to the treatment;
• Right to portability of your data;
• Right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal;
• Right to lodge a complaint alongside the competent supervisory authority — the National Data Protection Commission — through https://www.cnpd.pt.

To exercise these rights, you can contact DataRoad by email at [DPO@DATAROAD.PT].

For detailed information about the processing of your personal data, please consult our Privacy Policy in [LINK TO PRIVACY POLICY].

10. Changes to the Cookie Policy

10.1. DataRoad reserves the right to amend this Policy whenever necessary, namely as a result of legislative or technical changes, or the introduction of new services on the Website.

10.2. We recommend that you check this page from time to time. The date of the last update is shown at the top of the document.

10.3. In the event of material changes, DataRoad will request the user's consent again via the cookie banner.

11. Contacts

For any queries relating to this Cookies Policy, you can contact us via:

DataRoad — IT Services and Consulting Avenida dos Moinhos n.º 12 B 2610-119 Alfragide (Quinta Grande), Portugal Telephone: +351 211 459 950 General email: sales@dataroad.pt Email DPO: [DPO@DATAROAD.PT]

12. Governing Law

This Policy is governed, in particular, by the following legislation:

• Regulation (EU) 2016/679, of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation — GDPR);
• Law No. 58/2019, of 8 August, which ensures the enforcement of the GDPR in the Portuguese legal order;
• Law No. 41/2004, of 18 August, concerning the processing of personal data and the protection of privacy in the electronic communications sector, as currently amended;
• Directive 2002/58/EC, of the European Parliament and of the Council, of 12 July 2002 (Directive ePrivacy);
• CNPD guidelines regarding cookies, in particular Deliberation 2024/XXXX (cookie consent).

© 2026 DataRoad IT Services and Consulting. All rights reserved.