Privacy Policy

The data controller responsible for your personal data is:

We collect a limited amount of personal data necessary to provide our services and respond to your inquiries:

• ▸Name — provided when you submit a contact or lead form
• ▸Email address — provided when you submit a contact or lead form
• ▸Company name — optionally provided in our forms
• ▸Project details — information you share about your project needs
• ▸IP addresses — automatically collected for rate limiting and security purposes

We process your personal data for the following purposes:

• ▸To respond to your inquiries and contact requests
• ▸To prepare proposals and provide our services
• ▸To communicate with you about active or potential projects
• ▸To protect our website from abuse through rate limiting

We process your personal data based on the following legal grounds under the GDPR:

• ▸Consent — when you voluntarily submit your information through our contact or lead forms (Article 6(1)(a) GDPR)
• ▸Contractual necessity — when processing is required to fulfil a service agreement or to take pre-contractual steps at your request (Article 6(1)(b) GDPR)
• ▸Legitimate interest — for website security and rate limiting to protect against abuse (Article 6(1)(f) GDPR)

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions and project inquiries are retained for up to 24 months after the last communication. Data related to active projects is retained for the duration of the project and for 5 years thereafter for legal and accounting purposes.

IP addresses collected for rate limiting are retained for no longer than 30 days.

We do not sell, rent, or trade your personal data to third parties. We do not share your data with third-party advertisers or marketing platforms.

We may disclose your personal data only when required by law, in response to a valid legal process, or to protect our rights and safety.

Under the GDPR, you have the following rights regarding your personal data:

• ▸Right of access — obtain a copy of the personal data we hold about you
• ▸Right to rectification — request correction of inaccurate or incomplete data
• ▸Right to erasure — request deletion of your personal data when it is no longer necessary
• ▸Right to restriction — request limitation of how we process your data
• ▸Right to data portability — receive your data in a structured, commonly used, machine-readable format
• ▸Right to object — object to our processing of your data based on legitimate interest

To exercise any of these rights, please contact us at andre@andginja.com. We will respond to your request within 30 days.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

Your personal data is processed and stored within the European Economic Area (EEA). In the event that data needs to be transferred outside the EEA, we will ensure appropriate safeguards are in place in accordance with the GDPR.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications (HTTPS), secure server infrastructure, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a new revision date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us: