1. Scope of this Policy
This Policy explains how personal data are processed in connection with the use of the https://www.dataprivacy.pt/ website and provides information about the use of cookies.
This Policy applies exclusively to the operation of this website. It does not cover processing carried out in connection with consultancy services, DPO-as-a-Service functions, training activities or other contractual relationships. In those contexts, data subjects will be provided with specific information when their data are collected, pursuant to Article 13 of the General Data Protection Regulation (GDPR).
This website does not provide forms, restricted areas, account creation or newsletter subscriptions. It also does not integrate analytics tools.
2. Who is the controller?
dataprivacy.pt is the trading name used to present the services described on this website. In the context of this website, the controller of the personal data is Maria Mateus, a legal professional and consultant specialising in Data Protection Law.
For questions concerning the processing of personal data or the exercise of your rights, you may use the address dpo@dataprivacy.pt.
3. What personal data are processed and which cookies are used?
When this website is accessed, only the technical data strictly necessary for its operation and security are processed. During normal use of the website, no cookies are installed. Strictly necessary cookies may, however, be installed when mechanisms are activated to verify the legitimacy of access and protect the website. The data are not used for analytics, monitoring visitor behaviour or profiling.
The processing is based on the controller's legitimate interest in providing a functional and secure website, pursuant to Article 6(1)(f) GDPR.
Technical data and, where used, data associated with strictly necessary cookies may be processed by hosting and security service providers. If, due to the infrastructure used, they are processed outside the European Economic Area, the transfer is carried out on the basis of an adequacy decision of the European Commission, including the EU-US Data Privacy Framework, where applicable, or standard contractual clauses accompanied by the necessary supplementary measures. Further information about these safeguards may be obtained through the contact indicated in section 2.
Technical data are retained only for the period necessary to provide, operate and secure the website. That period is determined according to the nature of the technical logs and the purpose for which they are required.
The controller does not create its own visitor database or use technical data for analytics. As the website does not use non-essential cookies or technologies that depend on consent, no consent banner is displayed.
4. Identification of visitors and exercise of rights
The controller does not seek to identify website visitors and is not required to obtain or retain additional information solely in order to identify them.
Where the controller is not in a position to identify the data subject, the rights provided for in Articles 15 to 20 GDPR do not apply unless the data subject provides additional information enabling their identification, pursuant to Article 11 GDPR.
The data subject may exercise the right to object provided for in Article 21 GDPR, but may not require the website to be made available without the processing of technical data and, where applicable, the use of strictly necessary cookies for its operation and security.
5. Complaint to the supervisory authority
The data subject has the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD), using the means available at https://www.cnpd.pt/cidadaos/participacoes/.
6. Links to external websites
This website contains links to social media and may contain links to other websites. Those links do not embed content from external platforms or allow them to install cookies through this website before they are selected.
When you select one of those links, you leave this website. Any subsequent processing of data is governed by the terms and policies of the entity responsible for the destination website.
7. Changes to this Policy
This Policy will be updated whenever relevant changes are made to the operation of the website or to the processing of personal data carried out through it. The date of the current version will be indicated at the beginning of the page.