Privacy Policy

1. Who We Are (Data Controller)

This website, rodrigoskycam.pt, is operated by:

We are responsible for how your personal data is collected and used (“data controller” in GDPR terms).

2. What Data We Collect and Why

We only collect the data we need to fulfil your order and run this website. We do not sell your data to third parties.

3. How Long We Keep Your Data (Retention)

• Order & billing records — kept for 10 years to comply with Portuguese tax law (Código do IVA / Código Comercial).
• Account / contact data— kept while you have an active relationship with us, and for up to 1 year after your last purchase, then deleted or anonymised.
• Analytics data— kept in aggregated/anonymised form; raw event data deleted after 12 months.

4. Who We Share Data With

We share data only where necessary and with appropriate safeguards:

• Payment providers (MB Way / SiMB, Revolut, PayPal, card processor) — only the data each provider requires to process your payment.
• Email / transactional email provider — to deliver order confirmations and download links to you.
• Hosting & infrastructure providers — to serve this website and store files securely.
• Tax / accounting advisors — under confidentiality obligations, as required by law.

We do not sell, rent, or trade your data. Any third parties acting on our behalf are bound by data-processing agreements.

5. Cookies and Tracking

We use essential cookies to operate the site (e.g. session management) and, with your consent, analytics cookies to understand usage. You can manage your preferences at any time via our Cookie Policy.

6. International Transfers

Where any service provider is located outside the European Economic Area (EEA), we ensure appropriate safeguards are in place — such as EU Standard Contractual Clauses (SCCs) — before any data is transferred.

7. Your Rights

Under the GDPR you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Ask us to correct inaccurate or incomplete data.
• Right to Erasure: Ask us to delete your data ("right to be forgotten"), subject to legal retention obligations.
• Right to Restriction: Ask us to limit how we process your data in certain circumstances.
• Right to Data Portability: Receive your data in a structured, machine-readable format, or ask us to transfer it directly to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any right, contact us at contacto@rodrigoskycam.pt. We will respond within 30 days. We may need to verify your identity before acting on your request.

8. Right to Lodge a Complaint — CNPD

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Portuguese data protection authority:

We do encourage you to contact us first so we can try to resolve any concern directly.

9. Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All connections to this site use HTTPS encryption.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The current version will always be available at rodrigoskycam.pt/privacy. We will notify you of material changes by email if you have an active account or recent order.

11. Contact Us

For any questions about this Privacy Policy or how we handle your data, please contact us at: contacto@rodrigoskycam.pt