Privacy Policy

The controller for the personal data collected through this site is Daniel Rendeiro, who can be reached at work@danielrendeiro.pt.

There are no accounts and no contact forms on this site. The only personal data processed is:

• Technical access data — such as your IP address and browser information, logged automatically by the hosting server for security and to keep the site running.
• Aggregated visit statistics — collected anonymously and without cookies (see the Cookies section), which cannot identify visitors.
• Your email, if you contact me — if you send a message to the address above, I receive your email and whatever you write, so I can reply.

The technical data and anonymous statistics are processed on the basis of legitimate interest (Article 6(1)(f) GDPR) in keeping the site secure and functional and understanding, in aggregate, how it is used. Any email you send is processed to respond to your enquiry.

This site uses no tracking, advertising or marketing cookies, and shares no data with ad networks. That is why there is no cookie consent banner.

• Cookieless statistics — visit measurement is handled by Vercel Web Analytics, anonymously, without storing cookies or identifying users.
• Admin session cookie — only when the site administrator signs in to the private area (/admin) is a strictly necessary cookie used to keep that session. It is not set during a normal visit to the site.

To operate, the site relies on providers that may process data on my behalf, under data-processing agreements:

• Vercel Inc. — site hosting and visit statistics.
• MongoDB Atlas — the database that stores the portfolio content.

Some of these providers are based outside the European Economic Area, namely in the United States. Those transfers are safeguarded by mechanisms recognised by the European Union, such as the EU-U.S. Data Privacy Frameworkand the European Commission's Standard Contractual Clauses.

Technical logs are kept only for as long as needed for security and operation. Email messages are kept while they remain relevant to the contact and any resulting professional relationship. Statistics are aggregated and anonymous.

Under the GDPR, you have the right to access your data, request its rectification or erasure, object to processing, and request portability where applicable. To exercise any of these rights, contact work@danielrendeiro.pt.

You also have the right to lodge a complaint with the competent supervisory authority — in Portugal, the National Data Protection Commission (CNPD).

This policy may be updated to reflect changes to the site or to applicable law. The date of the last update is shown at the top of the page.