Skip to content
infinita.digital
Menu

Your data, taken seriously

Privacy Policy

Last updated: 5 de setembro de 2026

This site collects very little data. On this page I explain exactly what, what it's used for, how long I keep it and how you can ask me to delete it. No detours, no fine print.

1. Data controller

The controller responsible for the data collected through this site is Carlos Reis, operating in the Lisbon area, Portugal.

Contact for data protection matters: contato@infinitadigital.com.

Given the size and nature of the activity, there is no obligation to appoint a data protection officer, under Article 37 of the General Data Protection Regulation.

2. What data is collected

The only personal data collected through this site is what a person voluntarily submits through the contact form:

  • Name
  • Email address
  • Phone number
  • Message written in the form

If you prefer to get in touch on WhatsApp, the data processed is only what results from that conversation, namely the phone number and the content of the messages you send. Note that WhatsApp is a third party service with its own privacy policy, which I do not control.

No data is collected automatically for profiling purposes, there is no third party analytics, and no special categories of personal data are used.

3. What the data is used for

The data collected is used exclusively to:

  • Respond to the contact request made
  • Prepare and deliver the contracted site, if the person decides to proceed with the service
  • Meet legal obligations, namely invoicing, if a contract exists

It is not used for unsolicited marketing, there are no newsletters, and there is no automated decision making with legal effects on individuals.

4. Legal basis for processing

Data processing relies on the following legal bases, under Article 6 of the General Data Protection Regulation:

  • Consent, point (a), when a person voluntarily submits the contact form or sends a message to ask for information.
  • Performance of a contract or pre-contractual steps, point (b), when a person proceeds with hiring the service and their data needs to be processed to prepare and deliver the site.
  • Compliance with a legal obligation, point (c), regarding invoicing records required by tax law.

5. Retention period

Data is kept only for as long as necessary for the purpose it was collected for:

  • Contacts that did not lead to a contract: data is deleted within one year of the last contact, or sooner if requested.
  • Clients: data is kept for as long as the business relationship lasts and, after that, for the legal period applicable to tax and accounting obligations in Portugal.

Once these periods end, the data is deleted.

6. Sharing data with third parties

Data submitted is never sold, rented or shared with third parties for commercial, advertising or any other purpose.

Data may be processed by technical service providers strictly necessary for running the business, namely the site's hosting company and email service, who act as processors and are bound by confidentiality obligations. It may also be disclosed to public authorities when required by law.

There is no transfer of personal data outside the European Economic Area under this site's contact form.

7. Data security

Data is protected by technical and organizational measures appropriate to the risk, namely an encrypted HTTPS connection to the site, restricted access limited to the person responsible for processing, and retention limited to what is necessary. No system is infallible, but the data collected by this site is limited and low risk.

8. Cookies

This site does not use third party cookies, analytics tools, social media pixels, or behavioral advertising. There is no Google Analytics, no Google AdSense, and no cross site tracking.

Since no cookie beyond what is strictly necessary is used, this site does not require a cookie consent banner, under the legislation applicable to electronic communications and the guidance of the Portuguese data protection authority.

9. Links to external sites

This site contains links to WhatsApp and Facebook. Those services are operated by third parties, have their own privacy policies, and may collect data when you use them. I have no control over that processing and recommend reading their respective policies.

10. Data subject rights

As a data subject, the law grants you the following rights:

  • Access: know what data of yours is stored and get a copy.
  • Rectification: correct inaccurate or outdated data.
  • Erasure: ask for your data to be deleted.
  • Restriction: ask for processing to be restricted in certain cases.
  • Portability: receive your data in a structured, commonly used format.
  • Objection: object to the processing of your data.
  • Withdrawal of consent: at any time, without affecting the lawfulness of processing carried out before that withdrawal.

11. How to exercise your rights or request deletion

You can exercise any of these rights, including requesting deletion of your data, without needing to give a reason, through:

Requests are answered within 30 days at most, unless a legal obligation requires keeping certain data for longer, in which case that reason will be explained to you.

12. Right to complain

If you believe your data has not been processed lawfully, you have the right to file a complaint with the supervisory authority in Portugal, the Comissão Nacional de Proteção de Dados, at www.cnpd.pt.

13. Changes to this policy

This policy may be updated whenever how data is processed changes. The last update date is shown at the top of this page. I recommend checking it from time to time.

See also the Terms and Conditions