Privacy & Cookie Policy
Last updated:
This site is a personal portfolio. I take the data of anyone who contacts me seriously and collect as little as possible. This page explains, in plain language, what is collected, why, for how long, and what you can require from me.
1. Who is responsible for your data
The data controller is Renato Ferreira, a private individual working as a self-employed designer. For any matter concerning personal data or privacy, the contact is design@renatoferreira.org.
2. What data I collect and why
Contact form
If you send me a message through the form, I collect your name, email and/or phone number (depending on the contact method you choose), the subject, the service you are interested in and the message you write.
- Purpose: to reply to you and carry on direct contact with you. Nothing else.
- Legal basis: your consent, given when you submit the form (Art. 6(1)(a) GDPR), and pre-contractual steps you request (Art. 6(1)(b)) when the enquiry concerns a project.
- Retention: I keep the message for up to 24 months after our last contact. After that it is deleted.
I do not use this data for newsletters, advertising or profiling. I do not sell it or share it with anyone for commercial purposes.
Visit statistics
If — and only if — you give permission in the cookie banner, I use Google Analytics to see which pages are viewed and where visits come from. The IP address is anonymised. I do not know who you are, nor can I link those statistics to you personally.
- Purpose: to understand which work is of interest and to improve the site.
- Legal basis: your consent, which you may withdraw at any time.
Technical logs and security
To prevent abuse of the form, your IP address is used temporarily in memory to limit how many messages can be sent in a row. It is not written to the database nor linked to your message. The server hosting the site may keep its own access logs, as is normal for any web hosting.
3. Cookies
A cookie is a small file that a website stores in your browser. There are two cases on this site, and only one of them depends on you:
| Name | What it does | Duration | Consent needed? |
|---|---|---|---|
token |
Keeps me logged in to the site's admin area. | 8 hours | No — it is strictly necessary and only exists if I log in. |
_ga, _ga_* |
Google Analytics: distinguishes visits and counts page views. | Up to 2 years | Yes — only created after you accept. |
Your cookie choice is stored in your own browser (local storage), not in a cookie, and is not sent to me. I ask again after 6 months.
4. Who else has access
I do not sell or hand over data to third parties. There are, however, two providers needed for the site to work:
- Web hosting: the provider where the site and the database are installed, on servers within the European Union.
- Google Ireland Ltd. (Google Analytics), only if you allow analytics cookies. Google may transfer data outside the European Union under the European Commission's Standard Contractual Clauses and the EU-US Data Privacy Framework.
5. Your rights
Regarding the data I hold about you, you may at any time require me to provide:
- Access — to know what data of yours I hold.
- Rectification — to correct anything that is wrong.
- Erasure — to delete everything concerning you.
- Restriction and objection — to restrict or object to the processing.
- Portability — to receive your data in a readable format.
- Withdrawal of consent — at any time, without affecting what was done before.
Just write to design@renatoferreira.org. I reply within one month at most. There is no charge for this.
If you believe I have not handled the matter properly, you may lodge a complaint with the Portuguese supervisory authority, CNPD — Comissão Nacional de Protecção de Dados (www.cnpd.pt).
6. Security
The site is served over an encrypted connection (HTTPS). Access to the admin area is password-protected, with the password stored encrypted, and the session uses a cookie that scripts cannot read. Contact messages are held in a database only I can access.
7. Minors
This site is not aimed at children under 16 and I do not knowingly collect data from minors. If you become aware that a minor has sent me data, write to me and I will delete it.
8. Changes to this policy
If anything relevant changes, I update this page and the date at the top. If the change involves new cookies or new purposes, I will ask for your permission again.