Privacy policy.

The controller is Página Comum, established in Portugal, European Union.

Being established in the Union, there is no representative to appoint under Article 27 GDPR. Nor do we have a data protection officer, none being required of our size and activity.

The address for data protection matters is at the foot of this page.

This site has no forms and no accounts: visiting it leaves nothing with us. The data we hold is what you write to us, when you write to us:

Apart from that, the server hosting the site logs the requests it receives — IP address, date and page — as any web server does, for security and diagnosis. Those logs are short-lived and are not used to identify visitors.

To answer you and, should work come of it, to prepare a proposal. Nothing else.

We do not use your data for marketing, we do not cross it with other sources and we do not build profiles.

Writing to us to ask for a proposal sets pre-contractual steps in motion — Article 6(1)(b) GDPR. That is the basis for as long as the conversation lasts and, if work follows, the contract becomes it.

The rest of the correspondence rests on the legitimate interest in answering those who approach us, just as the server's technical logs rest on the legitimate interest in keeping the site standing — point (f) of the same article.

Messages that lead to no work: deleted after 12 months.

Messages that lead to a commercial relationship: kept for as long as that relationship lasts and then for the legal document-retention periods (up to 10 years in tax matters).

We neither sell nor pass data to third parties. The messages sit with our email provider and the site on its server, both with infrastructure in the European Union and bound by a processing agreement under Article 28 GDPR.

We transfer no data outside the European Economic Area. The one exception is technical and is described in the next point: the request your browser makes to load the typefaces.

The public pages of this site use no cookies — not for advertising, not for tracking, not even for sessions. There is no banner to accept because there is nothing to consent to.

We measure visits with no analytics service. If one day we do, it will be by aggregate count and without cookies, and this page will say so before we start.

The typefaces are served by Google Fonts, which means your browser makes a request to that service; that request carries your IP address, processed by Google under the adequacy decision between the European Union and the United States.

As the data subject, you may at any time exercise the rights set out in Articles 15 to 22 GDPR:

If you think your data is not being handled well, tell us first — it usually gets sorted quickly.

You also have the right to complain to a supervisory authority. Ours is the Comissão Nacional de Proteção de Dados (CNPD), Av. D. Carlos I, 134, 1.º, 1200-651 Lisbon, www.cnpd.pt; but Article 77 GDPR lets you complain to the authority of the member state where you live or work, in your own language.

If this policy changes, the update date at the top of the page changes with it. Material changes are communicated to anyone in active contact with us.