Privacy Policy

Learn how nelsonlopes.net collects, uses, and protects your personal data, in compliance with the General Data Protection Regulation (GDPR/RGPD).

1. Data Controller

The data controller responsible for the processing of personal data collected through the website nelsonlopes.net is:

For any questions related to the protection of your personal data, you may contact us at the email address indicated above.

2. Personal Data Collected

In the context of your use of our website, we may collect the following personal data:

2.1 Data collected automatically (with your consent)

With your prior consent, navigation data may be collected through cookies and similar technologies, namely:

  • IP address (anonymised)
  • Browser type and operating system
  • Pages visited and visit duration
  • Traffic source (referrer)
  • Interaction data with the website

This data is collected exclusively through Google Analytics and only after you have given your explicit consent via the cookie consent banner.

2.2 Data provided directly by the user

When you use the contact form available on the website, we collect your name, email address, and message content. This data is processed solely to respond to your enquiry and is submitted through the Formspree service.

For more information about data collected through cookies, please see our Cookie Policy.

3. Purpose of Data Processing

The personal data collected is processed for the following purposes:

  • Website improvement: to analyse the use of the website in order to improve the user experience, the content presented, and technical performance (through Google Analytics, only with your consent).
  • Audience understanding: to understand how visitors find and interact with the website, which content is most relevant, and how the site can be improved.
  • Responding to contacts: to process and respond to messages sent via email or social media.
  • Legal compliance: to comply with applicable legal obligations, namely in matters of data protection.

4. Legal Basis for Processing

The processing of your personal data is based on the following legal grounds, pursuant to Article 6 of the GDPR:

  • Consent (Article 6(1)(a)): for the use of analytical cookies (Google Analytics). Consent is collected through the cookie banner displayed on your first visit to the website and may be withdrawn at any time.
  • Legitimate interest (Article 6(1)(f)): for processing data strictly necessary for the operation of the website and for responding to contacts initiated by the user. Our legitimate interest consists of ensuring the proper operation of the website and providing a quality information service.

5. Sharing Data with Third Parties

Your personal data may be shared with the following third parties, exclusively under the conditions indicated:

5.1 Google Analytics

We use Google Analytics 4 (Google Ireland Limited, property ID: G-8KRL5NF3J2) for statistical analysis of website traffic. This service collects anonymised navigation data only with your prior consent. Google may transfer data to servers in the United States, under standard contractual clauses approved by the European Commission. For more information, see the Google Privacy Policy.

5.2 Web hosting

The website is hosted on secure servers. The hosting provider may have access to technical server data (logs) necessary for the operation of the service.

We do not sell, rent, or share your personal data with third parties for direct marketing purposes.

6. Cookies

The website nelsonlopes.net uses cookies and similar technologies. For detailed information about the cookies used, their purposes, duration, and how to manage them, please see our Cookie Policy.

7. Data Subject Rights

Under the GDPR (Regulation (EU) 2016/679), you have the following rights regarding your personal data:

  • Right of access (Article 15): obtain confirmation that your data is being processed and access a copy thereof.
  • Right to rectification (Article 16): request the correction of inaccurate or incomplete data.
  • Right to erasure (Article 17): request the deletion of your personal data, where applicable ("right to be forgotten").
  • Right to restriction of processing (Article 18): request the restriction of the processing of your data in certain circumstances.
  • Right to data portability (Article 20): receive your data in a structured, commonly used, and machine-readable format, and transmit it to another controller.
  • Right to object (Article 21): object to the processing of your data when it is based on legitimate interest.
  • Right to withdraw consent: where processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of processing carried out prior to the withdrawal.

To exercise any of these rights, send an email to hello@nelsonlopes.net, identifying yourself and specifying the right you wish to exercise. We will respond within a maximum of 30 days.

7.1 Right to lodge a complaint with a supervisory authority

If you consider that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent supervisory authority in Portugal:

  • Comissão Nacional de Proteção de Dados (CNPD)
  • Av. D. Carlos I, 134 -- 1.o, 1200-651 Lisboa
  • Phone: (+351) 213 928 400
  • Website: www.cnpd.pt

8. Data Retention Periods

Personal data is retained only for the period necessary for the purposes for which it was collected:

  • Navigation data (analytical cookies): as defined in the Cookie Policy, with a maximum period of 26 months for Google Analytics data.
  • Email correspondence: retained for a maximum period of 12 months after the response to the enquiry, unless there is an ongoing relationship that justifies a longer period.
  • Consent records: retained for 3 years for the purpose of proving compliance with legal obligations.

At the end of the retention period, data is deleted or irreversibly anonymised.

9. Data Security

nelsonlopes.net adopts appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or accidental alteration, namely:

  • Use of HTTPS protocol (SSL/TLS encryption) throughout the website.
  • Restricted access to personal data, limited to authorised personnel.
  • Hosting on servers with adequate physical and logical security measures.
  • Periodic review of the security measures in place.

Despite our efforts to protect your data, no data transmission over the internet can be guaranteed as absolutely secure. We encourage users to adopt appropriate security measures on their devices.

10. International Data Transfers

Some of our service providers (namely Google) may transfer data outside the European Economic Area (EEA). In such cases, we ensure that transfers are made under adequate protection mechanisms, such as:

  • Standard contractual clauses approved by the European Commission.
  • Adequacy decisions of the European Commission (where applicable).

11. Changes to This Privacy Policy

nelsonlopes.net reserves the right to update this Privacy Policy at any time, to reflect changes in our data processing practices or applicable legislation. Any changes will be published on this page, with an indication of the date of the last update.

We recommend that you consult this page periodically to stay informed about how we protect your data.

12. Contact

For any questions, information requests, or to exercise your rights regarding the processing of your personal data, contact us at:

Last updated: February 2026