Create, Lda. (“Create”) respects the privacy of everyone who visits this website and processes personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law. This policy explains what data we collect, what it is used for and what rights you have over it.

Who is the data controller

Create, Lda., with its registered office in Lisbon, Portugal. For any question about personal data, please write to info@create-lda.pt.

What data we collect

This website has no forms. Contact is made by email or telephone, through the links available on the pages. When you write to us, we receive the data you choose to share (name, email, telephone, company and the content of your message), which we use only to reply and follow up on your request.

With your consent, we also collect statistical browsing data through Google Analytics 4 (pages visited, length of visit, device type and approximate location). This data is pseudonymised and does not identify you directly.

Purposes and legal basis

  • Replying to contact requests: steps taken at your request prior to entering into a contract.
  • Measuring how the website is used: consent, given through the cookie banner and revocable at any time.
  • Complying with legal obligations, where applicable.

Retention period

Contact messages are kept for as long as needed to reply and, where a commercial relationship exists, for the applicable legal period. Google Analytics statistical data is kept for 14 months.

Who we share it with

We do not sell or transfer personal data. Statistical data is processed by Google Ireland Limited, as a processor, under the relevant contractual clauses and international transfer safeguards.

Your rights

At any time you may request access to, rectification, erasure or restriction of the processing of your data, object to the processing and request portability, by writing to info@create-lda.pt. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).

Security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or alteration.

Changes

This policy may be updated. The version in force is always the one published on this page, with the date of the last update shown at the top.