Home / Privacy Policy

Legal

Privacy Policy

Last updated: October 6, 2026

1. Who We Are

This privacy policy applies to the website webarts.pt, operated by Alexander Fortes, a sole trader operating under the trading name "Web Arts", with registered address at Rua do Mar Vermelho, 2, 1990-083 Lisboa, Portugal ("Web Arts", "we"). We are the data controller for personal data collected through this site.

2. What Personal Data We Collect

We collect the following data, depending on how you interact with the site:

  • Contact form: name, email, phone (optional), service of interest and message, when you submit a quote request.
  • Technical security data: the IP address of whoever submits the form, kept for only 24 hours, to prevent automated and abusive form submissions (anti-spam).
  • Analytics data: if you accept analytics cookies in the consent banner, we collect usage data (pages visited, visit duration, device and browser type, approximate origin) through Google Analytics.

We do not collect special categories of data (health, racial or ethnic origin, religious beliefs, etc.) or knowingly collect data from minors.

3. Purposes and Legal Basis

  • Responding to quote and contact requests — legal basis: steps taken at your request prior to entering into a contract (GDPR Art. 6(1)(b)).
  • Preventing abuse and spam on the contact form — legal basis: legitimate interest in keeping the service secure and functional (Art. 6(1)(f)).
  • Analyzing site performance and usage — legal basis: your consent, given through the cookie banner, which you can withdraw at any time (Art. 6(1)(a)).

4. Who We Share Your Data With

We do not sell or rent your personal data. We share data only with service providers that help us run the site:

  • Hostinger — website and email hosting, through which we receive your contact messages.
  • Google Ireland Limited / Google LLC — provider of Google Analytics, only if you have accepted analytics cookies.

5. International Transfers

Google Analytics may involve transferring data to the United States. Google self-certifies compliance with the EU-US Data Privacy Framework, the transfer mechanism recognized by the European Commission for this purpose.

6. How Long We Keep Your Data

  • Contact messages: for as long as necessary to manage the business relationship or correspondence, then deleted or securely archived.
  • IP data for anti-spam purposes: 24 hours, after which it is automatically deleted.
  • Analytics data: per Google Analytics 4's default configuration, typically 14 months.

7. Your Rights

Under the GDPR, you have the right to:

  • Access the personal data we hold about you;
  • Request rectification if it is inaccurate or incomplete;
  • Request erasure of your data;
  • Request restriction of processing;
  • Object to processing based on legitimate interest;
  • Request data portability;
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
  • Lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

To exercise any of these rights, contact us at info@webarts.pt.

8. Cookies

This site uses cookies. To find out exactly which cookies we use, for what purpose, and how to manage them, see our Cookie Policy.

9. Security

We adopt reasonable technical and organizational measures to protect your personal data against unauthorized access, loss or improper disclosure, including secure (HTTPS) connections across the entire site.

10. Changes to This Policy

We may update this policy periodically. The date of the last update is shown at the top of this page.

11. Contact

For questions about this policy or your personal data, contact us: