Legal
Privacy notice
This notice explains how personal data is handled on cehodata.com, in line with the EU General Data Protection Regulation (GDPR) and Portuguese law.
Who is responsible
The data controller is Carlos Eduardo Hernández Ortiz, trading as CEHO, based in Portugal. You can contact me about privacy through the contact form, writing "Privacy" in the message.
What I collect, and why
- Contact form: your name, email address, organisation (optional) and message. I use them only to reply to your enquiry and, if we work together, to prepare a proposal. Legal basis: steps taken at your request before a possible contract (Art. 6(1)(b) GDPR) and my legitimate interest in answering messages (Art. 6(1)(f)).
- Technical data: when you visit the site, the hosting provider processes your IP address and basic request data (browser, time, page) to deliver the site and protect it from abuse. Legal basis: legitimate interest in running a secure website (Art. 6(1)(f)).
I do not sell your data, use it for advertising, or add you to a mailing list.
Cookies and tracking
This site does not use cookies, analytics or advertising trackers. Fonts and images are served from this domain, not from third parties. The anti-spam check on the contact form (Cloudflare Turnstile) loads only when you scroll to the contact form and checks browser signals to tell people from bots; Cloudflare states it does not use this data for advertising or to track you across sites.
Who processes the data for me
- Cloudflare, Inc.: hosting, anti-spam check (Turnstile) and forwarding of contact form messages (Email Routing).
- Google LLC: the email inbox where messages are received.
Both may process data outside the European Economic Area. Those transfers are covered by the EU–US Data Privacy Framework and/or the European Commission's Standard Contractual Clauses.
How long I keep it
Messages are kept for up to 2 years after our last contact, unless we start working together, in which case project correspondence is kept for as long as the law requires (for example, for tax purposes). Technical logs are kept by Cloudflare for a short period under its own policies.
Your rights
You can ask to access, correct or delete your data, to restrict or object to its use, or to receive it in a portable format. Send your request through the contact form and I will reply within one month. You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).