Privacy Policy

1. Data Controller

VirtuLuso
Tax number (NIF): 259078824
Registered office: Ponta Delgada, Azores, Portugal
Email: geral@virtuluso.pt
Phone: +351 927 784 556
Website: virtuluso.pt

VirtuLuso is the controller of the personal data collected through this website, in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and applicable Portuguese law.

2. Personal Data Collected

We only collect the data strictly necessary to respond to your contact requests:

• Name — to personalise our reply
• Email address — to reply to you
• Subject and message — to understand your request

We do not collect sensitive data, we do not create user profiles, and we do not use your data for marketing purposes without your explicit consent.

3. Purposes and Legal Basis for Processing

Your data is processed in order to:

• Respond to your contact request — legal basis: taking steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR)
• Subsequent commercial communication — only with your explicit consent (Article 6(1)(a) GDPR)

4. Data Retention

Data submitted through the contact form is kept for as long as necessary to respond to your request and, at most, for 12 months after the last contact, unless there is a legal obligation to keep it for longer or you have consented to a longer retention period.

5. Sharing with Third Parties

Your data is handled with the utmost confidentiality. We use the following processors to process contact messages:

• Resend, Inc. — transactional email delivery service (resend.com). Data is transmitted securely and solely to deliver the contact message.
• Vercel, Inc. — hosting of the website and its serverless functions.

We do not sell, transfer or share your data with third parties for commercial or marketing purposes.

6. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• Access — to know which of your data we process
• Rectification — to correct inaccurate or incomplete data
• Erasure — to request the deletion of your data ("right to be forgotten")
• Restriction — to request that processing be restricted
• Portability — to receive your data in a structured, readable format
• Objection — to object to processing, in particular for direct marketing purposes
• Withdrawal of consent — at any time, without affecting the lawfulness of prior processing

To exercise any of these rights, contact us by email: geral@virtuluso.pt. We will reply within a maximum of 30 days.

7. Complaints to the Supervisory Authority

You have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the Portuguese supervisory authority:

CNPD — Comissão Nacional de Proteção de Dados
Website: www.cnpd.pt
Email: geral@cnpd.pt
Phone: +351 213 928 400

8. Security

We implement appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction, including:

• Encrypted communications via HTTPS/TLS
• Access to data restricted to authorised personnel
• Use of processors that provide guarantees of GDPR compliance

9. Cookies

This website does not use tracking cookies, marketing cookies or third-party analytics tools (such as Google Analytics). We do not collect browsing data or create visitor profiles.

The website may use strictly necessary session cookies for the pages to work properly from a technical point of view; these do not require consent under the GDPR.

10. Changes to This Policy

We may update this policy from time to time to reflect changes in the law or in our practices. The "last updated" date at the top of this page shows when it was last revised. We recommend that you check it regularly.

11. Contact

For any question about this policy or about the processing of your personal data, please contact us:

VirtuLuso
geral@virtuluso.pt
+351 927 784 556