Last updated: 25 May 2026
This Privacy Policy explains how Dotta & Cunha, Lda handles personal data collected through this website, dottacunha.pt. We are committed to protecting your privacy and processing your data lawfully, fairly and transparently, in accordance with the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.
Who we are
The controller responsible for your personal data is Dotta & Cunha, Lda:
- Registered office: Rua Francisco Sanches 4, R/C Esq. – 1170-143 Lisboa, Portugal
- Tax and company number (NIPC): 515795577
- Registered with the Commercial Registry of Lisbon under the same number
- Email: partners@dottacunha.pt
For any question relating to this policy or your personal data, contact us at partners@dottacunha.pt.
Scope
This policy applies to personal data collected through this website. It does not apply to third-party websites that we may link to, which are governed by their own privacy policies.
What data we collect
Information you provide to us. When you submit the contact form or an inquiry form on this website, we collect the information you enter — typically your first and last name, email address, telephone number (if you choose to provide it), the subject of your inquiry, and the content of your message.
Information collected automatically. We use Cloudflare Web Analytics to understand how visitors use the site. This is a privacy-first, cookieless analytics service: it does not use cookies, does not fingerprint visitors, and does not track you across other websites. It collects only aggregated, non-identifying information such as page views, referring sites, and general device and browser type.
We do not knowingly collect special categories of personal data, and this website is not directed at children.
Cookies and local storage
This website does not use tracking or advertising cookies. Cloudflare Web Analytics operates entirely without cookies.
The only information stored on your device is a small “language preference” value held in your browser’s local storage, which allows the site to remember whether you prefer Portuguese or English. It contains no personal information and is never shared. Because the site uses no non-essential cookies, no cookie consent banner is required.
Why we use your data and our legal basis
We process your personal data for the following purposes:
- To respond to your inquiry and provide the information or assistance you request — legal basis: steps taken at your request prior to entering into a contract, and/or your consent (Art. 6(1)(a) and (b) GDPR).
- To operate, maintain and improve this website and understand aggregate usage — legal basis: our legitimate interest in running and improving our website (Art. 6(1)(f) GDPR).
- To comply with legal obligations where applicable — legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR).
Who we share your data with
We do not sell your personal data. We share it only with the service providers who help us operate this website, who act as processors under our instructions:
- Netlify — website hosting and contact form processing. Form submissions are transmitted to and stored by Netlify on our behalf.
- Cloudflare — privacy-first, cookieless website analytics.
We may also disclose personal data where required to do so by law or by a competent authority.
International data transfers
Some of our service providers may process data on servers located outside the European Economic Area. Where this occurs, the transfer is protected by appropriate safeguards, such as the European Commission’s Standard Contractual Clauses or an adequacy decision.
How long we keep your data
We keep the personal data contained in your inquiry only for as long as necessary to handle your request and, where it leads to a business relationship, for the duration of that relationship plus any period required by law. Aggregated analytics data does not identify you and is retained in accordance with our analytics provider’s standard retention practice.
Your rights
Under the GDPR and Portuguese data protection law, you have the right to:
- access the personal data we hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to our processing of your data;
- receive your data in a portable format; and
- where processing is based on your consent, withdraw that consent at any time.
To exercise any of these rights, contact us at partners@dottacunha.pt. We will respond within the time limits set by law.
You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.
How we protect your data
We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration. However, no transmission of data over the internet can be guaranteed to be completely secure.
Changes to this policy
We may update this Privacy Policy from time to time. The “last updated” date shown at the top of this page indicates when it was last revised. We encourage you to review it periodically.
Contact
If you have any questions about this policy or how we handle your personal data, please contact:
Dotta & Cunha, Lda — partners@dottacunha.pt — Lisbon, Portugal