e2morrowESG Report · CSRDDescribes what personal data this site collects, for what purpose, and how you can exercise your rights as a data subject.
This text describes how the site currently operates, but it has not yet been reviewed by a lawyer. It should not be treated as a final privacy policy before that review.
The controller responsible for the personal data collected through this site is EterGrowth, Portuguese tax number (NIPC) 519099761, the entity that develops and operates the e2morrow platform.
Registered office address: [to be completed].
Contact for privacy matters: geral@etergrowth.com.
Processing of the contact form data is based on the data subject's consent, given by submitting the form, and on EterGrowth's legitimate interest in responding to contact requests received through the site.
Processing of the CSRD eligibility simulator data is based exclusively on the data subject's consent, given by ticking that form's own consent checkbox — it is never presumed nor enabled by default. The data subject may withdraw this consent at any time, with effect for the future, by contacting geral@etergrowth.com; withdrawing consent does not affect the lawfulness of processing already carried out up to that point.
Processing of browsing and analytics data is based exclusively on consent, given via the cookie banner — it is never activated before that explicit choice (see the cookie policy).
Resend — the service used to send the email generated by the contact form and the CSRD eligibility simulator to the EterGrowth team, and to send the simulator's result to the data subject. It receives the data submitted at the moment of sending.
Google (via Google Tag Manager) — only when the data subject gives explicit consent for analytics or marketing cookies. Without that consent, no browsing data is shared with Google. The CSRD eligibility simulator logs usage events (start and type of result obtained) without any personal data — never the email, name or company.
We do not sell or share personal data with third parties for their own marketing purposes.
Resend and Google may process data on servers outside the European Economic Area. When that happens, processing relies on transfer mechanisms recognised under the GDPR, such as the European Commission's Standard Contractual Clauses.
Retention period for contact form data: [to be completed].
Retention period for CSRD eligibility simulator data: [to be completed]. Until that is defined, the data is kept only for as long as necessary for the purpose of responding and commercial contact, or until the data subject withdraws consent.
As data subjects, you have the right of access, rectification, erasure, objection, restriction of processing and data portability regarding the data we process about you, under the terms of the GDPR.
To exercise any of these rights, contact geral@etergrowth.com.
You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese data protection authority, if you consider that the processing of your data does not comply with the GDPR.