Privacy policy

This policy explains how the personal data of visitors to jvdesign.pt, and of anyone who uses its contact form, is processed, in accordance with the General Data Protection Regulation (GDPR) and the applicable Portuguese law.

1. Data controller

Jean Valencia, graphic designer, based in Gião, Vila do Conde, Portugal. For any question about personal data: geral@jvdesign.pt.

2. What data is processed and why

Contact form. When you send a message, your name, email address, chosen subject and message are processed in order to reply to your request and, where appropriate, prepare a proposal. The legal basis is taking steps at your request prior to entering into a contract and the legitimate interest in replying to those who get in touch (Article 6(1)(b) and (f) GDPR). The message is only delivered by email: it is not stored in a database on the website.

Confirmation email. An automatic email is sent to the address you provide, confirming that the message was received. It does not repeat the text you wrote.

Abuse prevention. To prevent automated and repeated submissions, the server keeps, for 24 hours, an encrypted, irreversible summary of the IP address of whoever uses the form and the times of the requests, and uses a security session cookie (see the Cookie policy). The legal basis is the legitimate interest in keeping the website secure (Article 6(1)(f) GDPR).

Visit analytics, only with your consent. If you choose “Accept” in the analytics notice, the ACCGES Advanced Analytics & Heatmap tool, by ACCGES (accges.pt), records the pages visited, clicks, scrolling, mouse movement, screen dimensions, browser type and visit duration, linked to a visit identifier stored in your browser until you close the tab. It is used to measure visits and improve the website. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time under “Cookie preferences”, in the footer of every page. Without your consent, this tool is not loaded.

Hosting logs. As on any website, the server records technical data about requests (IP address, date and time, requested page and browser) for security and operational reasons, for the period set by the hosting provider.

3. How long data is kept

• Messages received: for as long as needed to reply to and follow up on the request, up to two years after the last contact, unless they lead to a contractual relationship; in that case, for the applicable legal periods.
• Abuse-prevention records: 24 hours (the files are deleted automatically within two days).
• Security session cookie: until you close the browser.
• Visit analytics data: for the period set in the ACCGES service.

4. Who receives the data

• The hosting and email provider of the jvdesign.pt domain, which stores the website and delivers the messages, as a processor.
• ACCGES (accges.pt), only if you accept visit analytics, as a processor.
• The content delivery networks cdnjs (Cloudflare, Inc.) and jsDelivr, which deliver the website’s animation libraries and therefore receive the IP address and technical browser data.

Data is not sold or used for advertising, and there is no automated decision-making or profiling.

5. Transfers outside the European Economic Area

The content delivery networks may process technical data, such as the IP address, outside the European Economic Area, with the safeguards provided for in the GDPR, such as adequacy decisions (for example, the EU-US Data Privacy Framework) or standard contractual clauses.

6. Your rights

You can request access to your data, rectification, erasure, restriction of or objection to processing and data portability, and withdraw your consent at any time, without affecting processing already carried out. Simply write to geral@jvdesign.pt. You also have the right to lodge a complaint with the Portuguese data protection authority (CNPD) at www.cnpd.pt.

7. Security

The website uses an encrypted connection (HTTPS) and a content security policy, and the form has several safeguards: a security token, request limits, a trap for automated submissions and server-side validation of all data. Access to the mailbox is restricted.

8. Children

The website is not intended for children under 16 and does not knowingly collect their data.

9. Changes

This policy may be updated. The date of the last update is shown at the top of the page.