Privacy Policy

1. Data Controller

Jóni Oliveira, resident in Leiria, Portugal, reachable at joni.oliveira89@gmail.com, is the controller of personal data collected through this site under Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019 of 8 August.

2. Data Collected & Purposes

• Contact form: name, email address and message voluntarily provided, used solely to respond to your enquiry. Because submission occurs through your local email client (mailto:), the content is delivered directly to the controller and is not stored on this site.
• Hosting technical data: Cloudflare, acting as processor, may log IP addresses, request headers and metadata for security, attack mitigation and operations.

This site does not use analytics or tracking tools (Vercel Analytics, Google Analytics or equivalents) and does not collect browsing data for marketing purposes.

3. Legal Basis (Art. 6 GDPR)

• Contact form: pre-contractual steps at your request (Art. 6(1)(b)) or consent (Art. 6(1)(a)).
• Technical and security logs: legitimate interest in service security and operation (Art. 6(1)(f)).

4. Retention

Contact messages are retained for as long as necessary to respond and may be archived for up to 1 year. Cloudflare technical logs are retained for the periods Cloudflare defines (typically up to 30 days for request logs).

5. Processors & International Transfers

The site is hosted on Cloudflare Pages, by Cloudflare, Inc. (USA), acting as processor and providing static hosting, global CDN, attack mitigation (WAF) and DNS. Transfers to the USA are covered by the European Commission Adequacy Decision of 10 July 2023 (EU-U.S. Data Privacy Framework), to which Cloudflare adheres. Standard Contractual Clauses (Decision (EU) 2021/914) apply in the alternative, per Cloudflare's Data Processing Addendum.

6. Cookies & Similar Technologies

This site sets no first-party cookies for authentication, analytics or marketing. Cloudflare may set __cf_bm (~30 minutes) and, occasionally, __cflb or cf_clearance, all strictly necessary for bot management and security, which do not require prior consent under Art. 5(3) of Portuguese Law No. 41/2004 and CNPD guidelines.

7. Your Rights

Under Articles 15-22 GDPR you have the right to:

• Access your personal data
• Request rectification or erasure
• Request restriction or object to processing
• Data portability
• Withdraw consent (where the contact form is the legal basis)

To exercise these rights, email joni.oliveira89@gmail.com.

8. Complaints

You have the right to lodge a complaint with the supervisory authority: Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisbon, Portugal — www.cnpd.pt.

9. Changes

This policy may be updated. The date of the most recent revision is shown at the top of this page.