Who is responsible for your data
The controller of the personal data collected on this website is Luís Correia, sole trader (empresário em nome individual), tax number (NIF) 236404474, with business address at Rua da Criatividade, Parque Tecnológico de Óbidos, S1.53, 2510-230 Óbidos, Portugal, trading as Devenz Studio (“Devenz Studio”, “we”).
For any privacy question or to exercise your rights, contact us at hello@devenzstudio.com.
Devenz Studio is not required to appoint a data protection officer. If that changes, their contact details will be published on this page.
What data we collect
- Contact requests: name, email, company and, if you provide them, phone number, the topics you selected and your message.
- Booking a call: if you pick a time on our booking page, your name, email and the date and time you chose.
- Usage statistics (only with your consent): pages and sections viewed, interactions with the site (such as button clicks or form submissions), device and browser type, language, traffic source and approximate location at country or city level. Google Analytics 4 does not log or store IP addresses.
- Technical logs: for security, our hosting provider logs data such as the IP address and the date and time of requests to the site.
We do not collect special categories of data or make automated decisions based on your data.
Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Replying to your request (including the automatic email confirming we received it), arranging the conversation and, if relevant, preparing a proposal | Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR) |
| Producing usage statistics to improve the site and its content | Consent (Art. 6(1)(a) GDPR and Art. 5 of Portuguese Law 41/2004) |
| Keeping the site secure and preventing abuse, such as automated form submissions | Legitimate interest (Art. 6(1)(f) GDPR) |
How long we keep it
- Contact requests: up to 24 months after the last contact. If you become a client, your data is then governed by the contract and the applicable legal periods.
- Usage statistics: 14 months, after which Google Analytics deletes them automatically.
- Technical logs: for a short period, no longer than 30 days.
Who we share it with
We never sell or hand over your data. We only use service providers that process it on our behalf and under our instructions:
- Vercel Inc. — website hosting.
- Google Ireland Limited — email and calendar (Google Workspace), where we receive and answer contact requests and schedule calls.
- Google Ireland Limited — Google Analytics 4, only if you accept analytics cookies. Advertising data sharing and Google Signals are switched off.
Transfers outside the European Union
Some of these providers may process data in the United States. Those transfers are covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.
Your rights
You may at any time request access to, rectification or erasure of your data, restriction of or objection to its processing, and data portability. You may also withdraw any consent you have given, without affecting prior processing — for cookies, simply use “Cookie settings” at the bottom of any page.
To exercise these rights, write to hello@devenzstudio.com. We reply within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, CNPD (www.cnpd.pt).
Security
The site is served over HTTPS only and access to data is limited to the people who need it to reply to your request. The form includes protection against automated and abusive submissions.
Changes to this policy
We may update this policy to reflect changes to the site or the law. The date of the last update is shown at the top of the page.