Privacy Policy (GDPR)
Policy version: 2026-03-16
Data controller
Controller: Paulo Jorge Pereira Martins
Contact: paulo.jorge.pm@gmail.com
Personal data processed
- Contact details submitted in forms (e-mail and message text).
- Technical metadata needed for security and audit (IP, user-agent, timestamp, consent version).
- Session/cookie preferences used to remember privacy choices.
Purposes and legal bases
- Answer contact and budget requests: consent (Art. 6(1)(a) GDPR).
- Newsletter/contact operations requested by user: consent (Art. 6(1)(a) GDPR).
- Service security and abuse prevention (for example anti-spam checks): legitimate interest (Art. 6(1)(f) GDPR).
Retention
Form and consent logs are kept for up to 365 days, unless a longer period is required by law or an ongoing dispute.
Recipients and processors
- Hosting and infrastructure providers used to run this website.
- SMTP provider used for e-mail delivery.
- Google reCAPTCHA for spam protection on forms.
International transfers
Some providers may process data outside the EEA. Where this happens, appropriate safeguards are applied (for example adequacy decisions and/or standard contractual clauses, as applicable).
Your rights
- Access, rectification, erasure, restriction, portability, and objection.
- Withdraw consent at any time for future processing.
- Lodge a complaint with your supervisory authority (in Portugal: CNPD).
Exercise rights
Send requests to paulo.jorge.pm@gmail.com with subject: Data Protection Request.
Related policy
See also: Cookie Policy.
Most recent photo:
