Privacy Policy

1. Data controller

The controller of personal data is Lumisland, Portugal. For privacy-related requests: contacto@lumisland.pt.

2. Data we may collect

• Name, company, email, telephone, area of ​​interest and message sent in the form.
• Technical data necessary for the operation and security of the website, such as IP address, date/time, browser and security logs maintained by technical providers.
• Communications exchanged after the first contact.

3. Purposes

• Respond to contact requests and prepare proposals.
• Manage visitor-initiated commercial communications.
• Keep the website functional, secure and protected from abuse.
• Comply with applicable legal obligations.

4. Legal basis

Data may be processed based on pre-contractual due diligence, legitimate interest, consent and compliance with legal obligations, depending on the applicable purpose.

5. Suppliers used

The site may use GitHub Pages, Cloudflare, FormSubmit and Google Ads/Google Tag. Google measurement is only loaded after acceptance in the cookie banner. Suppliers may process technical data in accordance with their contracts and policies.

6. Conservation

Contact requests can be saved for up to 24 months, except for a commercial relationship, legal obligation or need to defend rights. Technical records follow the deadlines of the suppliers used.

7. Data subject rights

You can request access, rectification, erasure, limitation, opposition and portability, when applicable, through contacto@lumisland.pt. You can also complain to the CNPD.

8. International transfers

Some providers may process data outside the European Economic Area. When applicable, there must be adequate guarantees provided for by law.

9. Security

The site uses HTTPS, permissions restrictions, content security policy, consent for measurement, and static architecture to reduce the attack surface.