Privacy Policy

This website (pedroportugal.com) is a personal portfolio operated by Pedro Portugal, an independent Product Designer based in Portugal. This policy explains what information is collected when you visit, why, and what your rights are under the EU General Data Protection Regulation (GDPR).

Pedro Portugal — independent Product Designer, Portugal. Contact: hi@pedroportugal.com

When you browse the site. Nothing is collected by this site. It uses no analytics and no advertising, and loads nothing from other companies. Like any web host, the hosting provider’s servers keep standard technical logs of requests in order to run and protect the service; they are not used to follow or profile visitors.

When you use an access key. Some case studies are shared by an access key, given to a specific company or person — usually with a job application. When a key is entered, and each time a protected case study is opened with it, the site records:

• which key was used, and which case study was opened
• the date and time
• the kind of device and browser — for example “desktop, Chrome, macOS”
• the country the connection comes from
• a random name for the browser, so that use of one key on several devices can be told apart

The country is looked up from the IP address at that moment; the IP address itself is not stored. Because each key is given to one recipient, this shows whether and when the work shared with them was viewed — which is all it is used for, and only I see it. A key typed incorrectly is never recorded; only a count of wrong attempts per connection is kept, in scrambled form and for at most a day, to slow down guessing.

This is done on the basis of legitimate interest: knowing whether work shared in confidence was viewed, and keeping it protected. The records are deleted after 12 months.

When you contact me. If you email hi@pedroportugal.com, I’ll receive your email address and anything you choose to share. I use that information only to reply and to discuss possible work. It isn’t added to any mailing list or shared with third parties.

This site sets one cookie, and only if you enter an access key. It remembers that this browser has entered a valid key, so the protected case studies open for the next 30 days without asking again. It holds the key’s number, the browser’s random name and the date it runs out, signed so that it cannot be altered, and cannot be read by the page. It is strictly necessary for the protected pages to work and is used for nothing else.

There are no analytics or advertising cookies, so there is nothing to consent to. You can delete the cookie at any time through your browser settings; the protected pages will then ask for the key again.

• Namecheap provides the hosting for this website. See Namecheap’s privacy policy at namecheap.com/legal/general/privacy-policy.
• DB-IP provides the table of countries used for the record above — “IP to Country Lite”, licensed under CC BY 4.0. The lookup happens on this site’s own server; nothing is sent to DB-IP. IP Geolocation by DB-IP.

Under GDPR, you have the right to:

• Access the personal data held about you
• Request correction or deletion
• Object to processing
• Lodge a complaint with the Portuguese data protection authority (CNPD — cnpd.pt)

To exercise any of these rights — including having the record of an access key’s use deleted — email hi@pedroportugal.com.

If this policy is updated, the “Last updated” date at the top will change.