Privacy Policy

Who we are — Data controller

Controller: Luiza Teixeira de Freitas

Website: www.luizateixeiradefreitas.pt

If a Data Protection Officer (DPO) has been appointed, their contact details will be published here. If no DPO is appointed, contact the controller at the email above.

Scope and purpose of this Policy

This Privacy Policy explains how we collect, use, store and protect personal data when you visit and interact with this website, including when you use the site contact form, view pages, or interact with cookies and third-party services. It applies to visitors and users located in the European Economic Area (EEA) and Switzerland and is intended to meet the requirements of the EU General Data Protection Regulation (GDPR) and other applicable privacy laws.

Personal data we collect

Data you provide directly: information submitted via the contact form (for example: name, email address, subject, message, and any attachments you choose to send).

Technical and usage data: information automatically generated when you visit the website, such as IP address, browser user agent, pages visited, timestamps, referring pages and similar analytics or server-log data.

Cookies and tracking technologies: the website uses a cookie consent tool and may set necessary, functional, analytics and other cookies depending on your choices. The precise cookies in use and their retention periods should be published in a cookie inventory linked from this policy.

Third-party data: personal data processed by third-party services used on the site (for example: hosting providers, analytics providers, email/contact form processors and cookie/consent managers).

Purposes and legal bases for processing

We process personal data for the following purposes and on the stated legal bases:

To respond to contact form enquiries: lawful basis — performance of a contract or legitimate interest (responding to your request).

To operate and secure the website: lawful basis — legitimate interests (ensuring site functionality and security, preventing abuse).

To provide personalized functionality and preferences: lawful basis — consent for non-strictly-necessary cookies and similar features.

To carry out analytics and improve the site: lawful basis — consent for analytics cookies, or legitimate interests where analytics are aggregated or anonymized.

To comply with legal obligations: lawful basis — legal obligation (for example, retention of records for legal claims or regulatory duties).

Cookies and consent

The website uses a cookie consent banner/service that allows visitors to accept or refuse categories of cookies. You can manage cookie preferences via that tool. If you decline analytics or advertising cookies, those processing activities will not be performed. The controller should publish a complete cookie list (cookie name, purpose, provider, retention period) and link it from this policy.

Recipients and processors (third parties)

We may share personal data with the following categories of recipients: service providers/processors who host the website, manage email/contact form delivery, provide analytics, operate the cookie/consent manager, and other technical or professional service providers; and legal or regulatory authorities where required by law.

International transfers

If personal data is transferred outside the EEA, we will ensure appropriate safeguards are in place, such as EU Commission standard contractual clauses, an adequacy decision, or other lawful transfer mechanisms. The policy should list any non-EEA processors and the safeguards used; ask your processors for details and insert them here.

Data retention

We retain personal data only for as long as necessary for the purposes stated above or to meet legal obligations.

Your rights (GDPR)

If you are in the EEA or UK you have the following rights in relation to your personal data: the right to access your personal data; the right to rectify inaccurate data; the right to erasure in certain circumstances; the right to restrict processing; the right to object to processing based on legitimate interests or direct marketing; the right to data portability where applicable; and the right to withdraw consent at any time for processing based on consent (withdrawal does not affect processing already carried out).

To exercise any of these rights, contact us. We will respond as soon as possible.

If you remain unsatisfied you may lodge a complaint with your supervisory authority (for Portugal: Comissão Nacional de Protecção de Dados — CNPD).

Security measures

We implement reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Examples include encrypted connections (HTTPS), access controls, and secure backups. For transparency, list specific measures used by your hosting and email providers here.

Children

This website is not intended for children under 16. We do not knowingly collect personal data from children. If you believe we have collected a child’s personal data, contact us and we will take steps to delete it.

Changes to this Policy

We may update this Privacy Policy from time to time. The “Effective date” at the bottom shows when this version took effect. Material changes will be communicated on the website.

Effective date

Effective date: September 8th, 2025.