Privacy Policy

Last updated: July 2026 · Controller: Júlio Papel · Contact: info@juliopapel.pt

This website processes personal data in accordance with the EU General Data Protection Regulation (GDPR / Regulation (EU) 2016/679) and applicable Portuguese law.

Data we collect

Contact and booking forms: name, email, phone (optional), message, service details. Fine Art inquiries: name, email, message, related artwork. Security logs: IP address, user agent, abuse events. First-party site metrics: page views, content type, country/region/city (via GeoIP), traffic source (referrer/UTM), and generic device — no analytics cookies and the IP is not stored.

Purposes & legal bases

Responding to booking/art requests — legitimate interest / steps prior to contract (Art. 6(1)(b)/(f)). Security and IP blocking of abuse — legitimate interest (Art. 6(1)(f)). Aggregated website statistics (service improvement and campaigns) — legitimate interest (Art. 6(1)(f)). Legal obligations where applicable (Art. 6(1)(c)).

Retention

Booking and inquiry records are kept as long as needed to handle the request and related accounting/legal needs. Security bans expire after 12 hours unless renewed by further abuse. First-party metrics are kept for at most 30 days in compressed daily files and then deleted automatically.

Your rights

You may request access, rectification, erasure, restriction, portability, and objection. You may lodge a complaint with the Portuguese CNPD (www.cnpd.pt). Email info@juliopapel.pt to exercise rights.

Transfers

Email may be sent via Gmail (Google). Where data leaves the EEA, appropriate safeguards (e.g. SCCs) apply under Google's terms.