Skip to content

Privacy

Privacy Policy

In force since

Who we are

TAC SYSTEMS AFRICA ("TAC", "we") provides IT services — managed services, cybersecurity, and cloud — from Angola and Portugal. We are the data controller for the personal data we collect through this website.

What data we collect

We collect the data you provide directly, namely through the contact form: name, email, company and phone (when provided), and the content of the message you send us. We do not collect data through analytics or advertising cookies — see our Cookie Policy for what this site actually stores on your device.

What we use your data for

We use the data you provide to respond to your enquiry, prepare a proposal or assessment (audit, legal compliance in Angola and, where applicable, GDPR/NIS2, or another requested service), and keep a record of that communication. The legal basis is your explicit consent, given when you submit the form, and taking pre-contractual steps at your request.

Who we share your data with

We do not sell or share your data with third parties for marketing purposes. We use technical service providers who process data on our behalf, under our instructions — [the complete list of these processors, including our email provider and website hosting, is being confirmed and will be published here once finalized].

International transfers

TAC operates in Angola and Portugal (European Union). In some cases, personal data collected through this website may be processed from Angola, a country outside the European Economic Area without an adequacy decision from the European Commission. [This section will be updated once appropriate safeguards for this transfer — namely standard contractual clauses — are formalized].

Data Protection Officer

[We have not yet formally designated a Data Protection Officer (DPO); this section will be updated once that designation is complete]. In the meantime, any data protection question can be directed to our general contact channel, below.

Your rights

TAC is subject to two data protection regimes, both applicable as a matter of fact, not by choice: Law No. 22/11, of June 17 (Personal Data Protection Law, Angola), supervised by the Data Protection Agency (APD); and the General Data Protection Regulation — GDPR, Regulation (EU) 2016/679 —, through our operation in Portugal. Under both regimes, you have essentially the same rights: to access your personal data, request its rectification if incorrect, request its erasure, and receive a copy of the data you provided us in a structured, commonly used format (portability). You also have the right to withdraw consent at any time, without affecting the lawfulness of processing already carried out. You may lodge a complaint with the APD, at apd.ao, or with the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt, depending on which regime applies to your case. See below how to exercise these rights directly with us.

Changes to this policy

We may update this policy to reflect changes to our services or applicable law. The date at the top of this page shows the version in force.

How to exercise your rights

You have the right to access your data, to request its rectification or erasure, and to receive a portable copy of it. To exercise any of these rights, contact us through one of the channels below — we typically reply within one month.

Data retention

We keep messages sent through the contact form for 365 days from the date we receive them; after that period, they are automatically deleted.