Personal data reaches Digital Vault only when someone writes to it.

The controller is Digital Vault, Lda, whose registered details are at the foot of every page. Questions about this notice, or about any data Digital Vault holds, go to:

[email protected]

The site is hosted on Cloudflare Pages. To serve each page and protect the site from abuse, Cloudflare, Inc. processes the technical data every request carries: IP address, browser and device details, the page requested and the time. Digital Vault adds no analytics, tracking or advertising to this, and sets no cookies.

The legal basis is legitimate interest (GDPR Art. 6(1)(f)): a website cannot be delivered without this data. Cloudflare may process it outside the European Union, under the safeguards in its data processing agreement.

An email to Digital Vault is used to answer it and, if work follows, to prepare and carry out that work. The legal basis is steps taken at the sender's request before a contract (GDPR Art. 6(1)(b)) or, where no work follows, legitimate interest (Art. 6(1)(f)). Email is hosted on Google Workspace; like Cloudflare, Google may process data outside the European Union, under the safeguards in its data processing terms.

Correspondence that leads to no work is deleted within twelve months. Correspondence tied to an engagement is kept while the engagement lasts, and afterwards for as long as the law requires.

Nothing is sold, shared for marketing, or used for automated decisions.

Anyone whose data Digital Vault holds can ask to see it, correct it, delete it, restrict or object to its use, or receive it in a portable form, by writing to the address above. A complaint can also be made to the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority, at cnpd.pt.