Privacy Policy
Last updated: February 2026
ANDGINJA DIGITAL SERVICES, LDA is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you visit andginja.com or engage our services. We comply with the General Data Protection Regulation (GDPR) and applicable Portuguese data protection laws.
1. Data Controller
The data controller responsible for your personal data is:
2. Data We Collect
We collect a limited amount of personal data necessary to provide our services and respond to your inquiries:
- ▸Name — provided when you submit a contact or lead form
- ▸Email address — provided when you submit a contact or lead form
- ▸Company name — optionally provided in our forms
- ▸Project details — information you share about your project needs
- ▸IP addresses — automatically collected for rate limiting and security purposes
3. Purpose of Processing
We process your personal data for the following purposes:
- â–¸To respond to your inquiries and contact requests
- â–¸To prepare proposals and provide our services
- â–¸To communicate with you about active or potential projects
- â–¸To protect our website from abuse through rate limiting
4. Legal Basis for Processing
We process your personal data based on the following legal grounds under the GDPR:
- ▸Consent — when you voluntarily submit your information through our contact or lead forms (Article 6(1)(a) GDPR)
- ▸Contractual necessity — when processing is required to fulfil a service agreement or to take pre-contractual steps at your request (Article 6(1)(b) GDPR)
- ▸Legitimate interest — for website security and rate limiting to protect against abuse (Article 6(1)(f) GDPR)
5. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Contact form submissions and project inquiries are retained for up to 24 months after the last communication. Data related to active projects is retained for the duration of the project and for 5 years thereafter for legal and accounting purposes.
IP addresses collected for rate limiting are retained for no longer than 30 days.
6. Data Sharing
We do not sell, rent, or trade your personal data to third parties. We do not share your data with third-party advertisers or marketing platforms.
We may disclose your personal data only when required by law, in response to a valid legal process, or to protect our rights and safety.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
- ▸Right of access — obtain a copy of the personal data we hold about you
- ▸Right to rectification — request correction of inaccurate or incomplete data
- ▸Right to erasure — request deletion of your personal data when it is no longer necessary
- ▸Right to restriction — request limitation of how we process your data
- ▸Right to data portability — receive your data in a structured, commonly used, machine-readable format
- ▸Right to object — object to our processing of your data based on legitimate interest
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within 30 days.
You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
8. International Data Transfers
Your personal data is processed and stored within the European Economic Area (EEA). In the event that data needs to be transferred outside the EEA, we will ensure appropriate safeguards are in place in accordance with the GDPR.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted communications (HTTPS), secure server infrastructure, and access controls. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.
10. Children's Privacy
Our website and services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us so we can take appropriate action.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The updated version will be posted on this page with a new revision date. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:
ANDGINJA DIGITAL SERVICES, LDA
Lisbon, Portugal
[email protected]Portuguese Data Protection Authority (CNPD): www.cnpd.pt