Privacy Policy & Data Dignity Framework

1. Data Controller Identification

This Privacy Policy governs the processing of personal data collected through the website reelradarpurepixls.sbs. The data controller responsible for your personal information is:

Reelradarpurepixls Unipessoal Lda.
Company Registration No.: PT 518 942 301
Registered Office: Rua do Infante D. Henrique 74, 4050-297 Porto, Portugal
Supervisory Authority: Comissão Nacional de Protecção de Dados (CNPD), Lisbon, Portugal
Contact Email: [email protected]

2. Categories of Personal Data Collected

We believe in strict data minimization. The personal information we collect and process is limited to the following categories:

• Correspondence Data: When you complete our contact desk inquiry form, we collect your name, email address, selected subject, message body, and explicit consent timestamp.
• Technical Metadata: When you load pages from our server, standard access logs record your IP address (anonymized after delivery), browser user agent, requested URI, referrer header, and HTTP status codes.
• Preferences State: Your local choice regarding cookie usage is stored in your client browser storage (localStorage) to suppress redundant notification banners.

3. Lawful Basis and Purposes for Processing

In accordance with Article 6 of the General Data Protection Regulation (Regulation (EU) 2016/679 - GDPR) and the Portuguese Data Protection Act (Lei n.º 58/2019), our processing activities rely upon:

• Consent (Art. 6(1)(a) GDPR): For processing inquiries submitted voluntarily through the contact form, including communication follow-ups.
• Legitimate Interests (Art. 6(1)(f) GDPR): For maintaining website integrity, mitigating denial-of-service attacks, debugging server errors, and securing electronic systems.
• Legal Obligations (Art. 6(1)(c) GDPR): Where retention of communications is necessary to fulfill statutory tax, commercial, or judicial record-keeping duties under Portuguese corporate laws.

4. Third-Party Processors and Hosting Infrastructure

We do not sell, rent, monetize, or broker personal information to advertisers or marketing networks. Infrastructure services are procured from reputable cloud and hosting providers operating data centers physically located within the European Economic Area (EEA). All vendors are bound by written Data Processing Agreements (DPAs) requiring adherence to EU data protection principles.

5. International Data Transfers

All primary databases and static delivery points reside within the European Union. In the event that maintenance routing necessitates cross-border transit beyond the EEA, transfers occur solely pursuant to European Commission Standard Contractual Clauses (SCCs) or with jurisdictions recognized as providing an adequate level of data protection.

6. Retention Schedules

We retain personal information only for the minimum period required to fulfill the original purpose of collection:

• Inquiry Records: General research inquiries are purged twenty-four (24) months following resolution of the correspondence thread.
• Server Access Logs: Ephemeral server traffic logs are maintained for thirty (30) days for security audits, after which they are irreversibly overwritten.
• Consent State Records: Local cookie selection tokens persist for twelve (12) months unless manually purged by the user through browser cache settings.

7. Data Subject Rights Under GDPR & CCPA

Subject to statutory conditions, you possess comprehensive rights regarding your personal records:

• Right of Access (Art. 15 GDPR): You may request confirmation and a structured copy of personal data processed concerning you.
• Right to Rectification (Art. 16 GDPR): You may demand immediate correction of inaccurate or incomplete contact records.
• Right to Erasure / Right to be Forgotten (Art. 17 GDPR): You may request deletion of records where retention lacks statutory necessity.
• Right to Restriction of Processing (Art. 18 GDPR): You may restrict processing while data accuracy or lawful basis is contested.
• Right to Data Portability (Art. 20 GDPR): You may request transfer of your direct submissions in a machine-readable format.
• Right to Object (Art. 21 GDPR): You may object at any time to processing predicated on our legitimate interest assertions.

To exercise any of these protections, submit your formal request to our Data Protection Coordinator at [email protected]. You additionally hold the statutory right to lodge an administrative complaint with the Portuguese National Data Protection Commission (CNPD) at www.cnpd.pt.

8. Data Protection Officer (DPO) Contact

For questions regarding our privacy architecture, algorithmic minimization practices, or regulatory filings, please address correspondence to:

Office of the Data Protection Coordinator
Reelradarpurepixls Unipessoal Lda.
Rua do Infante D. Henrique 74, 4050-297 Porto, Portugal
Email: [email protected]