1. Identification of the Data Controller
Agency Theory [legal form] Tax ID: [Tax ID] Address: 17 Eusébio da Silva Ferreira Street, 4630-463, Marco de Canaveses Email: [email protected] Phone: +351 918 170 260
No Data Protection Officer has been appointed, as the entity does not fall under the circumstances requiring mandatory appointment as set forth in Article 37 of the GDPR.
2. Personal Data Collected and Purposes
2.1 Contact Form
When you fill out the contact form available on the website, we collect the following information: name, email address, subject, and message.
Purpose: to respond to the contact request and manage the resulting communication. Legal basis: Teoria Agency’s legitimate interest in responding to communications addressed to the company (Article 6(1)(f) of the GDPR). Mandatory: Providing this information is voluntary. However, failure to provide the data will prevent us from responding to the request.
2.2 Browsing data (Google Analytics 4)
When you visit the website, browsing data is automatically collected via Google Analytics 4, including: IP address (anonymized), pages visited, duration of visit, device and browser used, and traffic source.
Purpose: statistical analysis of user behavior, with a view to improving the website and the services provided. Legal basis: user consent (Article 6(1)(a) of the GDPR), obtained via the cookie banner upon the first visit. Mandatory: optional. You may opt out of this data collection via the cookie preferences.
3. Recipients of the Data
Your personal data is not sold or shared with third parties for commercial purposes.
To fulfill the purposes described above, we use subcontractors who act exclusively on our instructions:
- Google LLC — provision of the Google Analytics 4 service and web hosting infrastructure
[Confirm whether the hosting is Google Cloud or another provider] - Web hosting provider —
[Supplier Name], responsible for hosting the website and the data submitted to it
All subcontractors provide sufficient guarantees of compliance with the GDPR and are bound by data processing agreements.
4. International Data Transfers
Google Analytics 4 involves the transfer of data to the United States, where Google LLC is headquartered. This transfer is carried out under Standard Contractual Clauses approved by the European Commission, in accordance with Article 46 of the GDPR.
5. Retention Periods
Data submitted via the contact form is retained for 90 days after the communication is concluded, after which it is deleted.
Browsing data collected by Google Analytics 4 is retained in accordance with the settings configured in the Google Analytics account, for a maximum of 14 months.
6. Data Subjects’ Rights
Under the GDPR, you have the following rights regarding your personal data:
- Access — to know what data we process about you
- Correction — correct inaccurate or incomplete data
- Deletion — request the deletion of your data
- Limitation — restrict treatment in certain circumstances
- Opposition — object to processing based on legitimate interests
- Portability — receive your data in a structured format
- Withdrawal of consent — without prejudice to the lawfulness of the processing carried out previously
To exercise any of these rights, you can contact us by email [email protected]. We will respond within 30 days.
You also have the right to file a complaint with the national supervisory authority, the National Data Protection Commission (CNPD), at www.cnpd.pt.
