Privacy
This text is a draft prepared for legal review and may be updated.
Who is responsible
This website is operated by Descobrilança Unipessoal LDA, NIPC 516940503, R. 2 da Matinha, 5D, 1950-073 Lisboa, Portugal. For any question about this notice or the data described here, write to info@allportugal.one.
What data is collected
Contact form. The contact form is the main personal-data flow on this site. When you send it, the name, e-mail address, optional subject and message you enter are sent to the site's server, stored in the database table contact_submissions, and e-mailed as a notification to the site owner at hello@annarheinasolen.pt. An automatic confirmation e-mail is sent to the address you entered. The form also uses two anti-spam checks — a hidden honeypot field and how long the form was open before submission — and a submission that fails either check is silently discarded.
E-mail records. The e-mail flow keeps records in the site's database: a send log (the recipient address, template name and delivery status) in email_send_log, unsubscribe tokens tied to an e-mail address in email_unsubscribe_tokens, and the suppression list of addresses that unsubscribed in suppressed_emails.
Analytics and advertising. Google Analytics and the Meta Pixel load on every visit. They receive your page views and navigation events, plus your IP address and device and browser data, through the cookies _ga, _ga_* and _fbp.
Fonts. Web fonts are loaded from Google Fonts on every page, which makes your IP address visible to Google.
There are no visitor accounts and no login on this site, and the site takes no payments and processes no payment data.
Who processes the data
Supabase provides the database that stores the contact submissions and the e-mail records.
Lovable hosts the site and dispatches the transactional e-mails, which are sent from the address noreply@notify.allportugalstudio.com.
Google Ireland Limited provides Google Analytics (cookies _ga, _ga_*) and Google Fonts.
Meta Platforms Ireland Limited provides the Meta Pixel (cookie _fbp).
Google Analytics and the Meta Pixel load on every visit, and these services may transfer data outside the EEA.
Why the data is used
The contact data is used to run the site and answer messages sent through the contact form. The e-mail records are used to send and manage those e-mails, including honouring unsubscribes. The analytics tools are used for audience measurement and advertising.
How long the data is kept
An unsubscribe record is kept for as long as needed to keep honouring it. For everything else — including the stored contact submissions, the e-mail log, and the analytics data held by Google and Meta — no retention period is yet defined.
Your rights
Under the GDPR you have the rights of access, rectification, erasure, restriction, objection, and portability. You also have the right to complain to the CNPD (Comissão Nacional de Proteção de Dados).
To exercise any of these rights, write to info@allportugal.one.