Privacy Policy

Access to and use of the websites www.brunocalado.pt and www.brunocalado.com (hereinafter referred to as the "Website") requires the prior reading and acceptance by the User of this Privacy Policy, prepared in accordance with the General Data Protection Regulation (GDPR - EU Regulation 2016/679) and other applicable legislation.

This Privacy Policy complements the Terms and Conditions of Use and describes how users' personal data is collected, processed and protected.

By accessing the Website, the user confirms that they have read, understood and accepted the provisions of this Privacy Policy. If they do not agree, they should immediately stop using the Website.

1. Data Controller

The controller responsible for the processing of personal data collected through this Website is Bruno Calado, a professional photographer based in Lisbon, Portugal.

For questions related to the protection of personal data, the user may contact via email at privacidade@brunocalado.com.

2. Personal Data Collected

2.1 Data voluntarily provided by the user: When submitting the contact form, the name, email address and message content are collected. This data is provided voluntarily and consciously by the user.

2.2 Data collected automatically: During navigation on the Website, technical data may be collected automatically, including: IP address, approximate geographical location, browser type and version, operating system, device type, pages visited, visit duration and referral source.

3. Purposes and Legal Basis for Processing

3.1 Responding to contact requests: Data provided through the contact form is processed based on the user's consent (Article 6(1)(a) of the GDPR) and is used exclusively to respond to requests and establish commercial communication.

3.2 Statistical analysis and Website improvement: Navigation data is processed based on the legitimate interest (Article 6(1)(f) of the GDPR) of Bruno Calado in analysing Website performance and improving user experience.

3.3 Compliance with legal obligations: Data may be processed when necessary to comply with applicable legal obligations (Article 6(1)(c) of the GDPR).

4. How Data Is Collected

4.1 Personal data is collected directly through the contact form available on the Website, upon voluntary submission by the user.

4.2 Navigation data is collected automatically through the Google Analytics platform, a web analytics service provided by Google LLC.

5. Cookies and Similar Technologies

5.1 The Website uses cookies and similar technologies to improve the browsing experience and collect statistical data.

5.2 Essential cookies: Necessary for the basic functioning of the Website, they do not require consent.

5.3 Analytical cookies: Used through Google Analytics to understand how visitors interact with the Website. These cookies collect information in an aggregated and anonymous manner.

5.4 The user can manage their cookie preferences through their browser settings. Disabling certain cookies may affect the functionality of the Website.

6. Data Sharing and Transfer

6.1 Personal data collected is not sold, transferred or shared with third parties for commercial or marketing purposes.

6.2 Data may be shared with service providers acting on behalf of Bruno Calado (processors), namely web hosting and email services, who are required to ensure the confidentiality and security of the data.

6.3 International transfers: The use of Google Analytics may involve the transfer of data to servers located outside the European Economic Area (EEA). Google LLC adheres to the EU-US Data Privacy Framework, ensuring an adequate level of data protection.

6.4 Data may also be disclosed when required by law or by order of a competent judicial authority.

7. Data Retention Period

7.1 Personal data provided through the contact form is retained for the period necessary for the purpose for which it was collected, and will be deleted within a maximum period of 2 (two) years after the last contact, unless there is a legal obligation to retain it for a longer period.

7.2 Navigation data collected by Google Analytics is retained for a period of 14 months, according to the defined settings.

8. Data Subject Rights

Under the GDPR, the user has the following rights regarding their personal data:

8.1 Right of access: Obtain confirmation as to whether their data is being processed and, if so, access to it.

8.2 Right to rectification: Request the correction of inaccurate data or the completion of incomplete data.

8.3 Right to erasure: Request the deletion of their personal data, where applicable.

8.4 Right to restriction of processing: Request the restriction of processing of their data in certain circumstances.

8.5 Right to data portability: Receive their data in a structured, commonly used and machine-readable format.

8.6 Right to object: Object to the processing of their data, including for direct marketing purposes.

8.7 Right to withdraw consent: Withdraw consent at any time, without affecting the lawfulness of processing carried out previously.

To exercise any of these rights, the user should contact via email at privacidade@brunocalado.com, clearly indicating which right they wish to exercise.

9. Security Measures

9.1 Bruno Calado implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction or alteration.

9.2 The measures adopted include: use of secure connections with SSL/TLS certificate, systems with firewall, anti-phishing and anti-ransomware mechanisms, and regular system monitoring.

9.3 As it is not possible to guarantee the absolute security of any system, Bruno Calado undertakes to make all reasonable efforts to protect the data collected and to notify users and competent authorities in the event of a data breach, as legally required.

10. Supervisory Authority

Without prejudice to any other remedy, the user has the right to lodge a complaint with the competent supervisory authority if they consider that the processing of their personal data violates the GDPR.

In Portugal, the supervisory authority is the Comissão Nacional de Proteção de Dados (CNPD):

Comissão Nacional de Proteção de Dados – CNPD
Av. D. Carlos I, 134, 1.º
1200-651 Lisbon
Phone: (+351) 213 928 400
Email: geral@cnpd.pt
Website: www.cnpd.pt

11. Links to Third-Party Websites

11.1 The Website may contain links to third-party websites. Bruno Calado is not responsible for the privacy practices or content of those websites.

11.2 Users are advised to review the privacy policies of third-party websites before providing any personal data.

12. Changes to the Privacy Policy

12.1 Bruno Calado reserves the right to change this Privacy Policy at any time, with changes being published on the Website.

12.2 Regular consultation of this document is recommended. Continued use of the Website after the publication of changes constitutes acceptance of them.

12.3 In the event of substantial changes affecting the processing of personal data, users will be informed through the available contact means.

Last updated: January 19, 2026