This Site collects certain Personal Data from Users.
Data Owner and Controller
Diogo Costa Gonçalves
Praça de Alvalade, 15, 2º
1700-038 Lisboa, Portugal
Owner’s e-mail: dcg@costagoncalves.com
Types of Data collected
Personal Data collected by this Site, by itself or through third parties, include: First Name; Surname; Telephone Number; Company Name; Email; Cookies.
Full details of Personal Data collected are provided in dedicated sections of this privacy policy or by specific explanatory texts displayed prior to collection.
Personal Data may be provided voluntarily by the User or, in case of Usage Data, collected automatically when using this Site.
Unless otherwise specified, all Data requested by this Site is mandatory and failure to provide this Data may make it impossible for this Site to provide its Services.
Where this Site specifically states that some Data is not mandatory, Users will not be required to complete such Data and there will be no consequences for Service availability or operation.
Users who have questions regarding which Personal Data is mandatory may contact the Owner.
Any uses of cookies – or other tracking tools – by this Website, or by owners of third-party services used by this Website, will be to provide Services requested by the User, in addition to other purposes described in this document and in Cookie Policy, if available.
Users are responsible for any third-party’s Personal Data that is obtained, published or shared through this Service (this Site) and confirm they have third party’s authorisation to provide their Data to the Owner.
Method and location of data processing
Method of data processing
The Owner will take appropriate security measures to prevent unauthorised access, disclosure, alteration or destruction of Users’ Data.
Data processing is carried out using computers and/or IT-enabled tools, following organisational procedures and means strictly related to purposes indicated above. In addition to the Owner, in some cases, other subjects involved in this Service (this Site) operation (administration, sales, marketing, legal system administration), or external subjects (such as third-party providers of technical services, couriers, etc.) may have access to Users’ Data, also appointed, if necessary, as Data Processors by the Owner. Updated list of Data Processors can always be requested from the Owner at any time.
Legal basis of data processing
The Owner may process Personal Data relating to the User if one of the following applies:
– Users have given their consent for one or more specific purposes; Note: Under some legislations the Owner may be allowed to process Personal Data UNTIL the User objects (“opt-out”), without having to rely on permission or any other legal bases to follow. This, however, does not apply where processing of Personal Data is subject to European data protection legislation;
– provision of Data is necessary for fulfilment of a contract with the User and/or any pre-contractual obligations of the User;
– processing is necessary for compliance with a legal obligation to which the Owner is subject;
– processing is related to a task carried out in public interest or in exercise of an official authorisation in which the Owner is vested;
– processing is necessary for purposes of legitimate interests pursued by the Owner or by third parties;
In any case, it is always possible to request the Owner to clarify the concrete legal basis of each processing and in particular to specify whether processing is based on law, required by a contract or necessary to conclude a contract.
Data Retention Period
Personal Data will be processed and stored for 365 days.
Purposes of Data Processing
User Data is collected to enable the Owner to provide its Services, as well as for the following purposes: Contacting the User; Anti-spam protection; Accessing third party service accounts; Statistics; Saving and managing backup; Commenting on content; Viewing content from external platforms; Payment processing; Interaction with social networks and external platforms; User database management; Interaction with data collection platforms and other third parties; Email address management and messaging; Registration and authentication; Tag management and Traffic optimisation and distribution.
Users may obtain additional detailed information about such purposes of processing and specific Personal Data used for each purpose in the respective sections of this document.
Facebook permissions requested by this Site
This Site may request certain Facebook permissions that allow it to perform actions with the User’s Facebook account and to retrieve information, including personal data. This service allows this Site to connect with the User’s account on Facebook, provided by Facebook Inc.
For more information about the following permissions, please refer to Facebook permissions documentation (https://developers.facebook.com/docs/facebook-login/permissions) and Facebook privacy policy (https://www.facebook.com/about/privacy/).
Permissions requested are as follows: Birthday, Email, and Basic Information.
Detailed information on Personal Data processing
Personal Data is collected for the following purposes and using the following services:
Access to third party service accounts
This type of service allows this service (this Site) to access your Account Data with a third-party service and perform actions with them.
These services are not activated automatically, they require explicit authorisation from the User.
Access to the Facebook account (this Site)
This service allows this Site to connect with the User’s account on Facebook, provided by Facebook, Inc.
Permission Request: Birthday; Email.
Place of Processing: USA – Privacy Policy (https://www.facebook.com/policy.php).
Privacy Shield Participant.
Content commenting
Content commenting service allows Users to create and publish comments on this Service’s content (this Site).
Depending on settings chosen by the Owner, Users can also leave anonymous comments. If there is an e-mail address included in the User’s Personal Data, it may be used to send notifications of comments on that content. Users are responsible for their comments’ content.
If a content commenting service provided by a third party is installed, it may still collect web traffic data for those pages where this commenting service is installed, even when Users do not use this content commenting service.
Directly managed commenting system (this Site)
This Site has its own internal content commenting system.
Personal Data collected: Cookies; Email; First Name; User Name; Surname; Website.
Contacting the User
Contact form (this Site)
By filling in a contact form with their Data, Users authorise this Site to use these details to respond to requests for information, quotations or any other type of request as indicated by that form’s title.
Personal Data collected: Name, E-mail; Company name; Telephone number.
Mailing list or newsletter (this Site)
By registering for this Site’s mailing list or newsletter, your e-mail address will be added to a list of contacts who may receive e-mail messages containing information of a commercial or promotional nature about this Site. Your e-mail address may also be added to this list as a result of your registration for this service (this Site) or after making a purchase.
Personal Data collected: E-mail; First name; Surname.
Telephone number (this Site)
Users who have provided a telephone number may be contacted for commercial or promotional purposes related to this Site, as well as for fulfilment of support requests.
Personal Data collected: Telephone number.
Statistics
Services present in this section enable the Owner to monitor and analyse web traffic and can be used to track User behaviour.
Google Analytics (Google Inc.)
Google Analytics is an internet analytics service provided by Google, depending on where this Site is accessed from. Google uses collected data to track and analyse use of this service (this Site) to prepare reports on activities and share them with other Google services.
Google may use collected data to contextualise and personalise ads on its own advertising network.
Personal Data collected: Cookies; Usage data.
Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt ).
Privacy Shield Participant.
WordPress Stat (Automattic Inc.)
WordPress is an analytics service provided by Automattic Inc.
Personal Data collected: Cookies; Usage data.
Place of processing: USA – Privacy Policy (https://automattic.com/privacy/ ).
User database management
These types of services allow the Owner to create User profiles from an email address, a personal name, or other information the User has provided to this Website, as well as to track User activities through analytics features. These Personal Data may also be combined with publicly available information about the User (such as social media profiles) and used to build private profiles the Owner may display and use to improve this service (this Site).
Some of these services may also be enabled to send the User scheduled messages such as emails based on actions taken on this service (this Site).
Email address management and messaging
These types of services allow management of contact database containing e-mail, telephone or other contact information for communication purposes with the User.
These services may also be used to collect data regarding date and time when the User viewed an email; and also, when the User interacted with email received, such as when the User clicked on links included in that email.
Mailchimp (The Rocket Science Group, LLC.)
Mailchimp is an email address management and messaging service provided by The Rocket Science Group LLC.
Personal Data collected: e-mail.
Place of Processing: USA – Privacy Policy (https://mailchimp.com/legal/privacy/).
Privacy Shield Participant.
Tag management
This type of service helps the Owner to manage tags or scripts required by this Website in a centralised manner. As a result, User Data flows through these services and retention of these Data is possible.
Google Tag Manager (Google)
Google Tag Manager is a management service provided by Google, depending on where this Site is accessed from.
Personal Data collected: Cookies; Usage data.
Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).
Privacy Shield Participant.
Interaction with data collection platforms and other third parties
These types of services allow Users to interact with data collection platforms or other services directly from pages of this service (this Site) for purposes of saving and reusing data.
If one of these services is installed, it may collect Usage and Browsing Data on pages where they have been installed, even if Users do not actively use that service.
Interaction with social networks and external platforms
These types of services allow interaction with social networks or other external platforms directly from pages of this service (this Website).
Interaction and information obtained by this Website is always subject to the User’s privacy settings on each social network.
This type of service may also collect traffic data for pages where that service is installed, even when Users do not use it.
It is recommended to log out of those services in order to ensure data processed in this service (this Website) is not being connected back to the User’s profile.
Facebook Like button and Social Widgets (Facebook, Inc.)
Facebook Like button and Social Widgets are services that allow interaction with Facebook, a social network provided by Facebook, Inc.
Personal Data collected: Cookies; Usage data.
Place of Processing: USA – Privacy Policy (https://www.facebook.com/privacy/explanation).
Privacy Shield Participant.
+1 button and Google+ Social Widgets (Google Inc.)
+1 button and Google+ Social Widgets are services that allow interaction with Google+, a social network provided by Google, depending on where this Site is accessed from.
Personal Data collected: Cookies; Usage data.
Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).
Privacy Shield Participant.
LinkedIn social button and widgets (LinkedIn Corporation)
LinkedIn social button and widgets are services that enable interaction with LinkedIn, a social network provided by LinkedIn Corporation.
Personal Data collected: Cookies; Usage data.
Place of Processing: USA – Privacy Policy (https://www.linkedin.com/legal/privacy-policy).
Privacy Shield Participant.
YouTube social button and widgets (Google Inc.)
YouTube social button and widgets are services that allow interaction with YouTube, a social network provided by Google, depending on where this Site is accessed from.
Personal Data collected: Usage data.
Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt).
Privacy Shield Participant.
Traffic optimisation and distribution
These types of services allow this Site to distribute their content using servers located in different countries in order to optimise their performance.
Some Personal Data is processed and depends on characteristics and manner in which these services are implemented. Its function is to filter communications between this Site and the User’s browser.
Considering this system’s widespread distribution, it is difficult to determine to which locations content, which may contain personal information of the User, has been transferred.
Google reCAPTCHA (Google Inc.)
Google reCAPTCHA is a SPAM protection service provided by Google, depending on where this Site is accessed from.
Use of reCAPTCHA is subject to Google’s privacy policy (https://policies.google.com/privacy?hl=pt-BR) and terms of use (https://policies.google.com/terms?hl=pt-BR).
Personal Data collected: Cookies; Usage data.
Place of Processing: USA – Privacy Policy (https://policies.google.com/privacy?hl=pt-PT).
Privacy Shield Participant.
Registration and authentication
By registering or authenticating, Users allow this service (this Site) to identify them and give them access to dedicated services. Depending on what is described below, registration and authentication services may be provided by third parties. In this case, this Site may access some Data stored by these third-party services for registration or identification purposes.
Facebook Authentication (Facebook, Inc.)
Facebook Authentication is a registration and authentication service provided by Facebook, Inc. and is connected to Facebook.
Personal Data collected: various types of Data as specified in Facebook’s privacy policy.
Place of Processing: USA – Privacy Policy (https://www.facebook.com/help/405977429438260).
Privacy Shield Participant.
Save and manage backup
These types of services allow the Owner to save and manage backups of this service (this Site) on external servers managed by the service provider itself. Backups may include source code and content as well as data the User provides to this Site.
Visualise content from external platforms
These types of services allow the User to visualise and interact with content on external platforms directly from pages of this service (this Website). If such a service is installed, it may collect web traffic data for pages where it is installed, even when Users are not using them.
The rights of Users
Users may exercise certain rights with respect to their Data processed by the Owner.
In particular, Users have the right to:
Withdraw their consent at any time. Users have the right to withdraw their approval where they have previously given consent for processing of their Personal Data.
Object to their Data processing. Users have the right to object to processing of their Data if processing is carried out on a legal basis other than consent.
Access their Data. Users have the right to know whether their Data is being processed by the Owner, to obtain information on certain aspects of Data processing and to obtain a copy of Data being processed.
Verify and request correction. Users have the right to verify their Data for accuracy and request any updates or corrections.
Restrict processing of their Data. Users have the right, under certain circumstances, to restrict processing of their Data for any purpose other than storing it.
Have their Personal Data deleted or erased. Users have the right, under certain circumstances, to obtain deletion of their Data from the Owner.
Receive their Data and have it transferred to another controller. Users have the right to receive their Data in a structured, commonly used and machine-readable format and, if technically feasible, to have it transmitted to another controller without hindrance of any kind. This provision applies provided that Data is processed by automated means and that processing is based on the User’s consent, on a contract to which the User is a party or on pre-contractual obligations.
File a complaint. Users have the right to lodge a complaint with their data protection authority.
Details on the right to object
When Personal Data is processed in public interest, in the exercise of an official authorisation vested in the Owner or for purposes of legitimate interests pursued by the Owner, Users may refuse processing by providing a reason relating to their particular situation that justifies such objection.
Users should be aware that if their Personal Data is processed for marketing purposes, they may object to such processing at any time without any justification. Users may refer to the respective sections of this document.
How to exercise these rights
Any requests to exercise Users’ rights may be addressed to the Owner using contact details provided in this document. These requests can be exercised free of charge and will be dealt with by the Owner as soon as possible and, in any case, within one month.
Additional information on Data collection and processing
Legal action
Users’ Personal Data may be used for legal purposes by the Owner, in court or in the steps leading to possible legal action arising from a misuse of this Service (this Website) or Related Services. The User declares to be aware that the Owner may be obliged to disclose Personal Data upon request of governmental authorities.
Additional information about the User’s Personal Data
In addition to information contained in this privacy policy, this Website may provide the User with additional and contextual information about specific services or collection and processing of Personal Data upon request.
System logs and maintenance
For system and maintenance purposes, this Site and any third-party services may collect files that store interaction with this Site (system logs) or use other Personal Data (such as IP address) for this purpose.
Changes to this privacy policy
The Owner reserves the right to make changes to this privacy policy at any time by informing Users on this page and, if possible, on this Site and/or – if technically and legally feasible – by sending a notice to Users via any contact information available to the Owner. It is strongly recommended to consult this page frequently, referring to the date of the last modification indicated below.
If the changes involve processing whose legal basis is consent, the Owner will collect the User’s consent again, if necessary.
Definitions and legal references
Personal Data (or Data)
Any information which directly, indirectly or in connection with other information – including a personal identification number – permits identification or identifiability of a natural person.
Usage Data
Information collected automatically through this Site (or third-party services contracted in this Service), which may include: IP addresses or domain names of computers used by Users using this Site, URI addresses (Uniform Resource Identifier), request’s date and time, method used to submit the request to the server, size of the file received in response, numerical code indicating status of the response server (positive result, error , etc.), country of origin, characteristics of browser and operating system used by the User, various time details per visit (e.g. time spent on each page) and details on the path followed within this website, with particular reference to sequence of pages visited and other parameters on operating system of the User’s device and/or IT environment.
User
Person using this Website who, unless otherwise specified, is the same as the Data Subject.
Data Subject
Natural person to whom Personal Data relates.
Data Processor (or Data Supervisor)
Natural or legal person, public administration, agency or other body that processes Personal Data on behalf of the Controller as described in this privacy policy.
Data Controller (or owner)
Natural or legal person, public administration, agency or other body which alone or jointly with others determines purposes and means of processing of Personal Data, including security measures relating to operation and use of this Service (this Website). The Data Controller, unless otherwise specified, is the Owner of this Service (this Website).
This Site (or this Application)
Means by which your Personal Data is collected and processed.
Service
Service provided by this Site as described in the relative terms (if available) and on this site.
European Union (or EU)
Unless otherwise specified, all references in this document to European Union include all current member states of European Union and European Economic Area.
Cookies
Small units of data stored on the User’s device.
Legal information
This privacy statement has been prepared on the basis of multiple legal provisions, including Articles 13/14 of Regulation (EU) 2016/679 (GDPR – General Data Protection Regulation).
Last updated: 26 May 2022
