COOKIE POLICY

1. Scope and contact

This Policy explains the use of cookies and similar technologies on the website www.quantumdatastrategy.com, on the domain quantumdatastrategy.pt and on the QDS Routes platform, at app.quantumdatastrategy.com, provided by QuantumData Strategy, Lda. ("QDS"), tax identification No. 517874571.

Contact: privacidade@quantumdatastrategy.com. For information on the processing of personal data, see our Privacy Policy.

2. Cookies and similar technologies

Cookies are small files stored by the browser to enable, for example, an authenticated session or to remember preferences. Other technologies, such as the browser's local storage (localStorage), may serve equivalent purposes and be subject to the same legal rules where they allow information to be stored on or accessed from the device.

3. Essential technologies

Technologies strictly necessary for the operation of the service or for the provision of expressly requested functionalities may be used without prior consent, within the applicable legal exceptions.

• "qds_session": cookie of the authenticated platform that maintains the session and contributes to security; a session cookie with no fixed expiry date, which the server stops accepting about 1 hour after the last renewal; it is removed when the user logs out or closes the browser; it is valid only for the application address, with the Secure, HttpOnly and SameSite=Lax attributes.
• "cookie_consent": localStorage record of the choice made by the user regarding cookies; it remains until changed or deleted in the browser. On the website it stores the choice (accept or refuse); in the application it records acceptance only.
• "theme": appearance preference (light or dark) stored in localStorage, in the application only; it remains until changed or deleted in the browser.
• Application sessionStorage keys: necessary for the operation of the session; they are deleted when the tab is closed.

4. Audience analysis and functionalities

QDS uses statistical tools hosted on its European infrastructure to understand the use of the website and the platform, without resorting to external analytics providers for that analysis.

Interaction analysis and other non-essential technologies that involve storing or accessing information on the user's device should be activated only after the consent required by law has been obtained.

Aggregate measurement of visits without cookies is not automatically exempt from consent: the need depends on the technical operation, including any reads from the browser's local storage.

5. How to manage your choices

On first visit, the user may accept or refuse non-essential technologies. Refusal does not prevent access to essential functionalities.

Consent may be changed or withdrawn at any time through the "Cookie settings" option available in the website footer. It is also possible to delete or restrict cookies in the browser settings; doing so may end authenticated sessions.

Failure to respond, silence or continued browsing do not, by themselves, constitute consent.

6. Third-party services

The platform may direct the user, at the user's own initiative, to external services, such as navigation applications or payment providers. Those services may use their own technologies, subject to their respective policies.

The loading of resources from content delivery networks (CDN) may transmit technical data, such as the IP address, to the provider. The Privacy Policy describes the categories of relevant recipients.

7. Data protection and updates

Where these technologies involve the processing of personal data, the GDPR applies, including the data subject rights set out in the Privacy Policy.

QDS may update this Policy, identifying the version and date of the last revision. For questions about cookies or privacy, contact privacidade@quantumdatastrategy.com. A complaint may be filed with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados, at www.cnpd.pt.

In the event of any discrepancy between language versions, the Portuguese version prevails, without prejudice to applicable mandatory rights.