Privacy Policy

1. Data Controller

The data controller for your personal data is Costa Campos, represented by Rui Eduardo Leão Costa Campos, contactable at geral@costacamposlegacy.pt.

2. Personal Data Collected

We collect and process the following personal data:

• Email address - when you subscribe to our newsletter through the form available on the website.
• Navigation data - technical information such as IP address, browser type, pages visited, and date/time of access, automatically collected by the web hosting server.

We do not collect sensitive data, data from minors under 18 years of age, or payment data.

3. Purpose and Legal Basis

Your data is processed for the following purposes:

• Newsletter - sending news, launches and exclusive invitations related to Costa Campos. Legal basis: consent of the data subject (Art. 6(1)(a) GDPR).
• Website management and security - traffic analysis and detection of unauthorized access. Legal basis: legitimate interests of the controller (Art. 6(1)(f) GDPR).

4. Retention Period

Data collected for the newsletter is retained for as long as you maintain an active subscription. Upon cancellation, data is deleted within 30 days.

Navigation data is retained for the periods defined by the web hosting provider, not exceeding 12 months.

5. Data Sharing

We do not sell, assign, or share your personal data with third parties for commercial purposes. Your data may be shared with:

• Technical service providers (web hosting, email platforms) exclusively for the provision of contracted services, under confidentiality agreements and GDPR compliance.
• Competent authorities, when required by law or court order.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access - request a copy of the data we hold about you.
• Rectification - correct inaccurate or incomplete data.
• Erasure - request deletion of your data ("right to be forgotten").
• Portability - receive your data in a structured, machine-readable format.
• Objection - object to the processing of your data for certain purposes.
• Restriction - request restriction of processing in certain circumstances.
• Withdrawal of consent - you may withdraw consent at any time, without affecting the lawfulness of processing based on consent previously given.

To exercise any of these rights, contact us at geral@costacamposlegacy.pt. We will respond within a maximum of 30 days.

7. Complaints

If you believe that the processing of your data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority in Portugal: the Comissão Nacional de Proteção de Dados (CNPD), available at www.cnpd.pt.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorized access, loss, destruction, or unlawful disclosure.

9. Changes to This Policy

This policy may be updated periodically. In case of significant changes, we will publish the new version on this page with the update date indicated. We recommend consulting this page regularly.

10. Contact

For any questions related to the processing of your personal data, contact us:

• Email: geral@costacamposlegacy.pt
• Instagram: @costa_campos_legacy