Privacy Policy
How your personal data is handled on this website, under the EU General Data Protection Regulation (GDPR).
Last updated: July 2026
1. Data controller
This website (joaoaso.com) is operated by João Oliveira ("we"). For any question about your personal data or this policy, contact us at privacy@joaoaso.com.
2. What data we collect and why
We only collect the personal data you choose to send us through the confidential contact form: your name, email, phone (optional), your role, the topic and urgency of your enquiry, and the context you provide. We use this data for a single purpose — to receive, understand and respond to your enquiry, and to prepare a possible engagement.
3. Legal basis
We process this data on the basis of your consent (which you give when you submit the form) and of the steps taken at your request prior to entering into a possible engagement (Article 6(1)(a) and (b) GDPR). We do not use your data for marketing, profiling or automated decision-making, and we do not sell or share it with third parties for their own purposes.
4. Retention
Contact messages are kept only as long as necessary to handle your enquiry and any resulting relationship, and are deleted when no longer needed. You may ask us to delete them sooner at any time.
5. Cookies
This website uses a single strictly necessary session cookie to keep the site secure (CSRF protection) and to run the private admin area. It carries no advertising or tracking purpose and does not require consent. We do not use analytics, advertising or social-media tracking cookies.
6. Fonts and third parties
Fonts are served locally from our own server — no request is made to Google Fonts or other external font CDNs, so your IP address is not shared with them. The website is hosted on servers within the EU/EEA (or under equivalent safeguards).
7. Your rights
Under the GDPR you have the right to access, rectify, erase, restrict or object to the processing of your data, and the right to data portability. You may withdraw consent at any time. To exercise any of these rights, email privacy@joaoaso.com. You also have the right to lodge a complaint with your supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD).
8. Security
Data is transmitted over HTTPS and stored with appropriate technical and organisational measures. Form submissions are protected against cross-site request forgery and automated spam.