Privacy Policy

Last updated: 28 September 2026.

 

1. Data controller

Joana Filipa Marques da Costa, self-employed professional, Portuguese tax number (NIF) 256 665 435, with a professional location in Póvoa de Varzim, Portugal, is the controller of the personal data processed through this website.

Contact: ola@ajoana.pt. There is no establishment open to the public and no in-person service at this location.

 

2. Personal data processed

When you send a contact or project request, we may process the data you choose to provide, including your name, email address, company, services required, budget, deadline, project description, how you found the website and your message. Technical logs strictly necessary for the operation, security and abuse prevention of the website may also be processed.

If you accept statistics cookies, browsing data is also collected through Google Analytics, such as the pages visited, the source of the visit, the type of device and browser, your approximate location and a random identifier assigned to your browser. This data is analysed in aggregate and is not used to identify individual visitors.

 

3. Purposes and legal bases
  • Replying to requests, preparing proposals and taking pre-contractual steps or performing a contract — Article 6(1)(b) GDPR.
  • Complying with legal, tax and accounting obligations — Article 6(1)(c) GDPR.
  • Ensuring the operation and security of the website and preventing fraud or abuse — legitimate interest, Article 6(1)(f) GDPR.
  • Producing website usage statistics with Google Analytics, to improve content and navigation — consent, Article 6(1)(a) GDPR and Article 5 of Portuguese Law No. 41/2004 of 18 August. You can withdraw your consent at any time under “Cookie preferences” in the footer.

The data collected through this website is currently not used for newsletters or direct marketing.

 

4. Recipients and service providers

Data may be processed by strictly necessary service providers, namely website hosting, email, technical support and, where applicable, accounting or legal advice. These providers only receive the data needed for their role and are bound by the applicable legal obligations.

If you accept statistics cookies, browsing data is processed by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), as the provider of the Google Analytics service, under Google’s data processing terms.

 

5. International transfers

If a service provider processes data outside the European Economic Area, the transfer will only take place on an appropriate legal basis and with the safeguards required by the GDPR, namely an adequacy decision or standard contractual clauses, where applicable.

In the case of Google Analytics, data may be transferred to Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework, which is covered by the European Commission’s adequacy decision of 10 July 2023, and also applies standard contractual clauses.

 

6. Retention periods
  • Requests that do not lead to a contractual relationship: up to 12 months after the last contact, unless a longer period is needed to establish, exercise or defend legal claims.
  • Contractual, accounting and tax data: for the periods required by law.
  • Technical and security logs: only for as long as necessary for security, diagnostics and abuse prevention.
  • Google Analytics statistics data: up to 14 months, after which it is deleted automatically. The duration of each cookie is listed in the Cookie Policy.

 

7. Your rights

Under the law, you may request access, rectification, erasure, restriction of processing, portability and object to processing, as well as withdraw your consent where consent is the legal basis. To exercise your rights, please write to ola@ajoana.pt.

You may also lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

 

8. Automated decisions

No decisions based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect users are made.

 

9. Security

Technical and organisational measures appropriate to the risk are applied to protect data against loss, misuse, unauthorised access, alteration or disclosure.

 

10. Cookies

This website uses cookies that are necessary for it to work and, only with your consent, Google Analytics statistics cookies. To find out which cookies are used and how long they last, or to manage your choices, please see the Cookie Policy.

 

11. Changes and contact

This policy may be updated to reflect legal, technical or service changes. The date of the last update is shown at the top of the page. Questions about privacy can be sent to ola@ajoana.pt.

This is a translation of the Portuguese version. In case of any discrepancy, the Portuguese version prevails.