Privacy Policy
1. Controller and contacts
Sorriso Verde – Empresa de Trabalho Temporário, Lda, trading as AllGreen For All Jobs (“AllGreen”), owns this website and is the controller of the personal data described here. Tax number (NIPC): 514 362 294. Registered office: Loteamento Municipal, n.º 51, 7630-561 Zambujeira do Mar. Office: Rua da Palmeira nº 51, 7630-794 Zambujeira do Mar. Share capital: €35,000. Temporary work agency holding licence (alvará) no. 842/17 of 30 June 2017, issued by IEFP.
All data collected through this website belongs to AllGreen (Sorriso Verde – Empresa de Trabalho Temporário, Lda), which controls it and decides what it is used for. TodsAI LLC only builds and maintains the website and the related automations on AllGreen’s behalf and on its instructions, as a processor; it does not use the data for its own purposes.
For any question about personal data, email allgreen@allgreen.com.pt or write to Sorriso Verde – Empresa de Trabalho Temporário, Lda, Rua da Palmeira nº 51, 7630-794 Zambujeira do Mar, marking your letter “Data protection”. You can also call the office on +351 918 180 123 (Monday to Friday, 10:00–17:00) or the commercial team on +351 929 256 456.
2. Scope and data we collect
This policy applies to browsing this website, to the contact forms and to the artificial intelligence (AI) assistant. It does not cover what happens after AllGreen contacts you — for example, a recruitment process or a contract — which has its own rules and information.
For company enquiries: company name, contact person’s name, email and/or phone, preferred contact channel and call time, location, business area, roles needed, number of people, start date, expected duration and message. For expressions of interest in work: name, email and/or phone, preferred contact channel, region, work area, experience, languages spoken, availability and message. In both cases we also record the language, the source of the enquiry (form or assistant), the page the enquiry was sent from, how the visitor arrived (the referring website or campaign), the device type and browser family, as reported by the browser itself, and the approximate country derived from the IP address at that moment, together with the date, the reference assigned and the confirmation that you have read this policy. The IP address itself is not stored with the enquiry.
In the AI assistant: the text of the messages you write and of the assistant’s replies, the date and time, the language and a random conversation code. Conversations are recorded even if you do not go on to confirm an enquiry (see section 4).
To run and protect the website, we process technical connection data, such as your IP address, and keep for a short time cryptographic hashes of the IP address and of the contact details given, which are used only to limit abuse. When you send an enquiry, your browser runs the website’s own automatic security check: a small calculation that helps stop automated mass submissions. This check uses no cookies, involves no third-party service and collects no information about you or your device. The assistant’s session cookie is created only when you use the assistant.
Do not send identity documents, residence permits, work permits, bank details, health data or unnecessary information about other people, through either the forms or the assistant. The website has no file upload and does not need such data to record your contact.
3. Purposes, legal bases and retention periods
We process data on the legal bases set out in the General Data Protection Regulation (GDPR): pre-contractual steps at your request (Article 6(1)(b)); AllGreen’s legitimate interests in managing professional contacts, measuring and improving the website through aggregated cookieless statistics, improving the assistant’s answers, following up requests and protecting the website against abuse (Article 6(1)(f)); compliance with legal obligations (Article 6(1)(c)); and consent, only for the optional statistics (Google Analytics) and marketing tools, which load only with your permission (Article 6(1)(a) and Article 5 of Portuguese Law no. 41/2004). Confirming that you have read this policy is not consent to marketing.
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Reply to your enquiry and prepare the contact | Enquiry details, language, source, enquiry page, referring website or campaign, device type, browser family, approximate country (without the IP address), date, reference and read confirmation | Art. 6(1)(b); Art. 6(1)(f) for business contacts | Website intake record: deleted automatically after 90 days. AllGreen’s enquiry register: see next row |
| Follow up enquiries in AllGreen’s enquiry register | The same enquiry details | Art. 6(1)(b) or (f), depending on the enquiry | For as long as needed to handle the enquiry and stay in contact; erased when no longer needed or when you ask, unless the law requires them to be kept |
| Generate the AI assistant’s answers | Your message, the recent part of the conversation and the language | Art. 6(1)(b) when you prepare an enquiry; Art. 6(1)(f) for general information | The time needed to generate the answer; the conversation record is in the next row |
| Record conversations with the assistant, to improve the answers and follow up requests made in the conversation | Text of your messages and of the replies, date and time, language and random conversation code | Art. 6(1)(f) — legitimate interests | Up to 6 months |
| Security and abuse prevention | IP address, hashes of the IP address and contact details, assistant session, request counters and security-check receipts | Art. 6(1)(f) | Counters and receipts: about 2 days; assistant session cookie: 24 hours |
| Remember your cookie choice and the form draft | Choice, version and date; draft fields | Strictly necessary storage; Art. 6(1)(f) | Choice: 6 months. Draft: until you send the enquiry, clear the form or close the tab |
| Cookieless statistics (website’s own) | Aggregated counts of page views, pages, sources, campaigns, approximate country, device type and language; daily pseudonymous code computed from the IP address and browser | Art. 6(1)(f) — legitimate interests in measuring and improving the website | Daily pseudonymous code: expires after 24 hours and is then deleted automatically, normally within the following day. Aggregated counts (no personal data): kept for internal analysis |
| Visit statistics — Google Analytics 4 (only with your permission) | IP address, browser and device data, pages visited and cookie identifiers | Art. 6(1)(a) — consent | Collected only while you keep your permission; statistics data is kept by Google for 14 months and then deleted; cookie durations in the Cookie Policy |
| Marketing: measuring and showing advertising, including remarketing — Google Ads and Meta Pixel (only with your permission) | IP address, browser and device data, pages visited, actions on the website and cookie identifiers | Art. 6(1)(a) — consent | Until you withdraw permission; cookie durations in the Cookie Policy |
| Comply with the law and defend rights | Only the data needed for the specific case | Art. 6(1)(c); Art. 6(1)(f) for the defence of rights | For the applicable statutory period or for as long as the case lasts |
4. AI assistant and conversation records
The assistant is an artificial intelligence program, not a person. It uses Google’s Gemini model to answer general questions based on information provided by AllGreen. Each message you send, together with the recent part of the conversation, is transmitted to the automation server and to Google to generate the answer.
Conversations are recorded. The text of your messages and of the assistant’s replies, the date and time, the language and a random conversation code are stored in AllGreen’s enquiry register, even if you do not go on to confirm an enquiry. The purpose is to improve the assistant’s answers and to follow up requests made during the conversation. The legal basis is AllGreen’s legitimate interests (GDPR Article 6(1)(f)). These records are kept for up to 6 months.
For that reason, do not write sensitive data, other people’s data or anything you do not want recorded in the conversation. You can object to this recording or ask for your conversation to be erased using the contacts in section 1, stating the approximate date and time of the conversation. If you prefer not to use the assistant, you can use the forms, the phone or email.
An enquiry is created only when you review the summary card and confirm sending. The website makes no automated decisions with legal or similarly significant effects (GDPR Article 22). The assistant’s answers are general information, may contain errors and are neither a job offer nor a commercial proposal; conditions are confirmed by AllGreen for each case.
5. Who processes the data
The data belongs to AllGreen and is processed by AllGreen and by the service providers listed below, which act on its behalf. It is used only for the purposes described in this policy.
Access to the internal panel (/admin) is restricted to authorised named Google accounts of AllGreen staff (owners and administrators they add) and of TodsAI LLC (as processor). For these staff accounts we keep the email, optional name, role, who added them and when, and last sign-in, for as long as access exists and for 12 months after removal (the audit trail). Actions taken in that panel are logged for 12 months for security and audit purposes.
Statistics and marketing tools: with your permission, the website uses Google Analytics 4 and Google Ads (Google Ireland Limited / Google LLC) and Meta Pixel (Meta Platforms Ireland Limited) to measure visits and to measure and show advertising, including remarketing. These tools load in your browser only if you permit them in the cookie notice; without that permission, no data is sent to Google or Meta for those purposes. When permitted, Google and Meta receive technical and browsing data and also process it under their own privacy policies. Details are in the Cookie Policy.
| Provider | What it does | Location |
|---|---|---|
| TodsAI LLC | Builds and maintains the website and the automations on AllGreen’s behalf; operates the automation server | Company in the United States; automation server in Germany |
| Elestio Limited | Manages the hosting and operation of the automation server on TodsAI’s behalf | Ireland (company); server in Germany |
| Hetzner | Data centre where the automation server runs | Germany |
| Google Cloud / Firebase | Website hosting and the Firestore database where submitted enquiries are stored | Firestore database in the Netherlands |
| Google Gemini API | Generates the AI assistant’s answers | Google service; see section 6 |
| Google Workspace (Google Sheets) | Spreadsheet holding AllGreen’s register of enquiries and conversations | Google service; see section 6 |
6. Data location and international transfers
Enquiries sent through the website are stored in the European Union (the Netherlands) and the automation server is in Germany. However, Google and TodsAI LLC are based in the United States, so providing their services — in particular generating answers with Gemini, Google Workspace and maintenance access — may involve data being processed outside the European Economic Area. The same applies to the statistics and marketing tools from Google and Meta, if you permit them: data may be transferred to the United States.
In those cases, transfers rely on the mechanisms provided for in the GDPR: the adequacy decision on the EU–US Data Privacy Framework, where the recipient is certified, or the standard contractual clauses approved by the European Commission. You can ask for more information about these safeguards using the contacts in section 1.
8. How long we keep the data
The website intake record (database) is deleted automatically 90 days after the enquiry is sent; technical deletion may happen shortly after that moment. That deletion does not by itself erase the enquiry held in AllGreen’s enquiry register.
Records of conversations with the assistant are kept for up to 6 months.
Enquiries held in AllGreen’s enquiry register are kept for as long as they are needed to handle the enquiry and stay in contact with you. They are erased when no longer needed or when you ask, unless the law requires them to be kept or they are needed for the defence of rights.
The form draft stays in your browser only (sessionStorage) and is not sent while you fill in the form. It is removed when you send the enquiry, when you choose “Clear form” and, as a rule, when you close the tab. Cookie periods are set out in the Cookie Policy.
9. Your rights and how to exercise them
Under the GDPR, you have the right to request access to your data, its rectification, its erasure, restriction of processing and portability. You may object, on grounds relating to your particular situation, to processing based on legitimate interests, including the recording of conversations with the assistant. Where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing already carried out.
To exercise these rights, write to the contacts in section 1, state the right you wish to exercise and, if you have it, your enquiry reference. You do not need to send identity documents; if there are reasonable doubts about your identity, you may be asked for additional information, only to the extent necessary.
Requests are answered within the time limits laid down in the GDPR (as a rule, one month from receipt of the request). You also have the right to lodge a complaint with the supervisory authority, the Portuguese data protection authority (Comissão Nacional de Proteção de Dados — CNPD), at www.cnpd.pt.
To withdraw permission given to the statistics or marketing tools, use “Cookie preferences” in the footer of any page; you can change your choice at any time. That choice never limits your use of the forms, the assistant, the phone or email.
10. Do you have to provide data?
You are not obliged to provide data. So that AllGreen can reply, the form asks for a name and at least one valid contact (email or phone); for company enquiries, also the company name. The remaining fields are optional. As an alternative to the forms and the assistant, you can contact AllGreen by phone or email.
11. Security
The website uses encrypted connections (HTTPS), server-side validation of data, limits against abusive submissions, an automatic security check and restricted-access databases. No internet service is completely secure. If you suspect unauthorised access to your data, contact us using the details in section 1 and give your enquiry reference, if you have it.
12. Children
The forms and the assistant are not intended for children. If you know that a child’s data has been sent through the website, contact us so that it can be erased.
13. Links to other websites
The website contains links to third-party sites — for example, the map of the address, the Electronic Complaints Book and Google pages. They open only if you click them, are not loaded inside this website and have their own privacy policies.
14. Changes to this policy
This policy may be updated when the website or the law changes. The date of the last update appears at the top of the page. If purposes that depend on your consent are introduced, you will be asked to choose first. The Portuguese version is the authoritative version; this English text is a translation.