Legal information
Privacy policy
Last updated:
This policy explains what personal data this website collects, what it is used for, how long it is kept and how you can exercise your rights, under the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and applicable Portuguese law.
Data controller
The controller of the personal data collected on this website is Anaïs Brandão — Interior Design, whose contact details are set out below. Any question about personal data can be sent to the same email address.
- Responsible party
- Anaïs Brandão
- Address
- Rua António Graça, 88, 3080-628 Figueira da Foz, Portugal
- Phone
- +351 937 958 131
Data collected
Through the contact form: name, email and message (required) and, if you provide them, phone number, property location and the service you are interested in.
When you visit the website, the hosting provider logs technical data for each request, such as the IP address, date and time, the page requested and the browser type. This data keeps the website secure and working and is not used to identify visitors.
The website does not use advertising or analytics cookies (see the Cookie policy).
Purposes and legal basis
- Answering your contact request and, if you wish, preparing a proposal: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
- Keeping the website secure and preventing abuse and automated submissions (spam): legitimate interest (Article 6(1)(f) GDPR).
The data is not used for marketing, nor sold or passed on to third parties for that purpose.
Recipients
The data is only accessed by the person who answers the request. For the website to work, it is processed by the following service providers, on behalf of and according to the instructions of the controller:
- Vercel Inc.: website hosting;
- Resend: delivery of contact form messages by email (servers in Ireland);
- Google (Gmail): the inbox where messages are received.
It may also be disclosed to the authorities where required by law.
Transfers outside the European Union
Some of these providers are based in the United States. Any transfer of data outside the European Economic Area takes place with the safeguards provided for in the GDPR, such as the standard contractual clauses adopted by the European Commission or certification under the EU-US Data Privacy Framework.
Retention
- Contact form messages: up to 24 months after the last contact, if no contract follows. Where there is a contract, for the legal retention period of the related documents.
- Technical server logs: for the short period set by the hosting provider, for security reasons.
After these periods, the data is deleted or anonymised.
Your rights
You may at any time request access to your data, its rectification or erasure, restriction of processing or data portability, and object to processing based on legitimate interest. Simply write to the email address given in section 1. You will receive a reply within one month at the latest.
You also have the right to lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados, CNPD) at www.cnpd.pt.
Security
The website uses an encrypted connection (HTTPS). Access to messages is limited to the person who answers requests, and the form is protected against automated submissions.
Automated decision-making
No decisions are made solely by automated means and no profiling takes place.
Links to other websites
The website links to third-party services such as Instagram and the electronic Complaints Book. When you follow these links, those services’ privacy policies apply.
Changes to this policy
This policy may be updated. The date of the last update is shown at the top of the page.