Privacy Policy

Data controller

The controller responsible for processing personal data is:

Inês Rodrigo Pinto
Website: www.inesrodrigopinto.com
Email: info@inesrodrigopinto.com

Collection of personal data

Personal data is collected knowingly and voluntarily through the website of Inês Rodrigo Pinto, namely through forms, newsletter subscriptions, contact requests or sending emails. The data collected may include, among others, name, email address and other information provided by the user.

Purpose of data collection

Personal data is collected for the following purposes:

• • Communication with users
• • Sending newsletters and marketing content, always with explicit consent
• • Promotion of services, programmes, projects and relevant information
• • Compliance with legal obligations

The data will never be used for purposes incompatible with those for which it was collected.

Legal basis for processing

The processing of personal data is carried out on the basis of:

• • Consent of the data subject
• • Performance of contracts or pre-contractual steps
• • Compliance with legal obligations

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out up to that date.

Use and sharing of personal data

Personal data is used exclusively by Inês Rodrigo Pinto. Data is only shared with third parties when necessary for the provision of the contracted services, namely with technical service providers or digital platforms, or when required by law. Under no circumstances will data be sold or transferred for unrelated commercial purposes. Specifically, the following processors are used, each only for the stated purpose: Supabase (database and login accounts), Resend (email delivery) and Vercel (website hosting). None of them uses this data for their own purposes.

Data processing and security

Personal data is processed confidentially and stored in protected systems, with access restricted to authorised persons only. Appropriate technical, administrative and organisational measures are adopted to protect data against loss, misuse, unauthorised access, disclosure or alteration. On retention: contact details are kept for as long as the relationship lasts or until deletion is requested, whichever comes first; email delivery and open records are kept for 24 months; the technical records used to throttle form abuse are deleted after one hour. Deletion of all data can be requested at any time through the contact given at the end.

Personal data breaches

In the event of a security breach that demonstrably results in a risk to the rights and freedoms of data subjects, they will be informed by email within the legally prescribed period. Where applicable, the situation will also be reported to the competent supervisory authority.

Data subject rights

Under the GDPR, data subjects have the right to:

• • Access their personal data
• • Request the rectification of incorrect or incomplete data
• • Request the erasure of data
• • Request the restriction of processing
• • Object to the processing of data
• • Request data portability
• • Withdraw consent at any time

To exercise any of these rights, the data subject should send a request to the email info@inesrodrigopinto.com.

Cookie policy

The website uses essential, analytics and functional cookies in order to improve the browsing experience and understand how the website is used. The user can manage or refuse cookies through browser settings or through the consent system presented on first access to the site. Server logs may collect technical and statistical information in an anonymised form, solely for the purpose of continuously improving the user experience.

Data transfers outside the European Union

Some data may be processed by third-party tools or platforms operating outside the European Union. In such cases, Inês Rodrigo Pinto ensures that appropriate measures are adopted to guarantee data protection, in accordance with the GDPR. The database holding personal data is hosted in the European Union. Website hosting and email delivery are provided by companies based in the United States, which may process data outside the European Union under the standard contractual clauses approved by the European Commission.

Sensitive data

Inês Rodrigo Pinto does not encourage the collection of sensitive data. Should such data be sent voluntarily by the user, it will be treated confidentially, only for the strictly necessary period and exclusively for the purpose for which it is intended.

Data of minors

The website is not intended for minors, its content being directed mainly at professionals. Should there be knowledge of the inadvertent collection of data from minors, contact should be made through the email info@inesrodrigopinto.com so that the data may be deleted.

Data retention period

Personal data is retained only for the period necessary to fulfil the purposes for which it was collected.

• • Statistical data is kept in anonymised form after the second year
• • Newsletter subscriber data is kept until the data subject requests its removal

Changes to the privacy policy

This Privacy Policy may be updated whenever necessary, namely in the event of legal, technical or operational changes. Any changes will be published on this website.

Contact

For any question relating to this Privacy Policy or to the processing of personal data, please use the following contact: info@inesrodrigopinto.com.