Privacy and Cookies Policy
This Privacy and Cookies Policy explains how Atelier Geometria - Projectos de Arquitectura e Urbanismo, Lda. processes personal data through the website ateliergeometria.com, including the data submitted via the contact form and the data collected through cookies and similar technologies.
This policy applies to visitors to the website and to anyone who contacts Atelier Geometria through the means made available on the website. It does not cover third-party websites that may be linked from here, which have their own policies.
01. Data controller
Entity: Atelier Geometria - Projectos de Arquitectura e Urbanismo, Lda.
Tax number (NIPC): 507 337 522
Address: Avenida das Descobertas, n.º 15, 3.º A, 2670-383 Loures, Portugal
Email: geral@ateliergeometria.com
Telephone: +351 21 983 8072
02. Personal data processed
02.1. Data provided by the user
When the user completes the contact form, Atelier Geometria may process the following data:
- name;
- email address;
- telephone number;
- the company or organisation the user is associated with.
The fields marked as mandatory are necessary in order to review and respond to the enquiry. Without that data, the message may not be submitted or the enquiry may not be handled properly.
02.2. Technical and usage data
While the website is being used, technical data may also be processed, namely IP address, device type, operating system, browser, pages visited, date and time of access, referral source, interactions with the website, cookie identifiers and consent preferences.
Some of this data is only collected after the user has authorised the measurement or advertising cookie categories. Records that are strictly necessary for the operation and security of the website may be processed without consent, to the extent that they are indispensable for those purposes.
03. Purposes, legal bases and retention
Atelier Geometria limits processing to the necessary purposes and relies on the appropriate legal basis for each operation.
| Data / context | Purpose | Legal basis | Proposed retention |
|---|---|---|---|
| Contact form | Respond to information requests, professional enquiries and proposals. | Pre-contractual steps requested by the data subject (Article 6(1)(b) GDPR) or legitimate interest in responding to the enquiry (Article 6(1)(f)). | 24 months after the last interaction, unless a contractual relationship or a legal obligation applies. [VALIDAR] |
| Contacts and archive | Manage the history of the relationship and defend legal claims. | Legitimate interest in managing the relationship and defending legal claims (Article 6(1)(f)); legal obligation, where applicable (Article 6(1)(c)). | For the duration of the relationship and for the applicable statutory limitation or archiving periods. [VALIDAR] |
| Technical and security logs | Ensure operation, prevent abuse and investigate incidents. | Legitimate interest in the security and integrity of the systems (Article 6(1)(f)). | 90 days, unless an incident or a legal obligation applies. [VALIDAR] |
| Google Analytics | Measure usage, produce statistics and improve the website. | Consent (Article 6(1)(a) GDPR and the legislation applicable to cookies). | Cookies: up to 2 years. User/event data: 2 or 14 months. [VALIDAR] |
The periods above may be extended where retention is necessary to comply with a legal obligation, respond to an authority, exercise or defend legal claims, or investigate an incident. At the end of the applicable period, the data is securely erased or anonymised.
04. Contact form
The data submitted through the form is used solely to manage and respond to the enquiry, prepare the information or proposals requested and follow up on the resulting relationship. Submitting the form does not constitute a subscription to marketing communications.
Atelier Geometria will not use the form data for newsletters or other promotional communications without a separate legal basis and, where required, specific, freely given and separate consent.
05. Recipients and service providers
The data may be processed by authorised employees and collaborators of Atelier Geometria and by service providers acting on its instructions or under their applicable terms, only to the extent necessary to provide the services.
- website hosting, infrastructure and security provider;
- maintenance and technical support provider;
- email and business communications provider;
- Google Ireland Limited and Google group entities, in the context of Google Tag Manager, Google Analytics and Google Ads, in accordance with the configuration and with the user's consent;
- professional advisers, auditors, insurers or legal counsel, where necessary;
- public authorities, courts or other legally competent bodies, where a legal obligation or a legitimate request exists.
Google Tag Manager is a tag management tool. It is the tags configured in the container, and not Tag Manager on its own, that determine which data is collected and to which services it is sent.
06. International data transfers
Some providers, including Google group entities, may process data outside the European Economic Area. Where that happens, Atelier Geometria will seek to ensure that the transfer relies on a legally recognised mechanism, such as an adequacy decision, standard contractual clauses approved by the European Commission or another appropriate safeguard provided for in Chapter V of the GDPR.
Users may request further information about the applicable safeguards through the contact details set out in this policy. Information on how Google processes data from sites that use its services is available at policies.google.com/technologies/partner-sites.
07. Cookies and similar technologies
07.1. What cookies are
Cookies are small text files stored on the user's device. They may enable the website to function, remember preferences, measure usage, evaluate campaigns or support the display of advertising. Similar technologies, such as local storage, pixels and identifiers, may perform equivalent functions.
07.2. Categories used
- Necessary cookies: indispensable to the operation and security of the website and to the management of consent preferences. They cannot be disabled through the consent manager where they are strictly necessary.
- Analytics cookies: allow visits to be measured and website usage to be understood through Google Analytics. They are only activated with consent.
- Advertising cookies: allow campaigns and conversions to be measured through Google Ads and, if configured, support audiences or personalised advertising. They are only activated with consent.
07.3. Consent management
On the first visit, the user may accept all cookies, reject non-necessary cookies or manage the categories individually. The option to reject must be presented as accessibly as the option to accept.
This version assumes an opt-in implementation with basic Google Consent Mode: Google Analytics and Google Ads tags remain blocked until the user authorises the respective category. Should advanced Consent Mode be adopted, this section must be reviewed, because cookieless signals may be sent before consent.
The user may change or withdraw consent at any time through the “Manage cookies” link permanently available on the website. Withdrawal does not affect the lawfulness of processing carried out beforehand.
07.4. Cookies envisaged
The table below reflects the configuration currently envisaged. The final list must be confirmed through testing and an analysis of the published website, since the cookies actually created depend on the tags, features and choices of the user.
| Category | Cookie / technology | Provider | Purpose | Indicative duration |
|---|---|---|---|---|
| Necessary | cc_cookie | Atelier Geometria / CookieConsent | Store the user's preferences and consent state. | 182 days by default. [VALIDAR] |
| Analytics | _ga | Google Analytics | Distinguish visitors and produce usage statistics. | 2 years |
| Analytics | _ga_<ID> | Google Analytics | Maintain session state and data associated with the Analytics property. | Up to 2 years [CONFIRMAR no scan] |
| Advertising | _gcl_* | Google Ads / Google Analytics | Measure conversions and link website actions to ad clicks. | 90 days |
| Advertising | _gac_* | Google Analytics / Google Ads | Measure campaign activity and performance, where applicable. | 90 days |
| Advertising | IDE / id | Google / DoubleClick | Display, cap and measure ads on third-party sites; may support personalisation depending on consent and configuration. | 13 months in the EEA, where applicable |
| Advertising | Other Google identifiers | May be used depending on the Ads features, the region, the device and the account configuration. | [CONFIRMAR após scan e testes] |
07.5. Browser-level management
Users may also delete or block cookies through their browser settings. Disabling necessary cookies may affect how the website works. Blocking at browser level does not necessarily replace consent management on the website and may not cover every similar technology.
08. Google Analytics, Google Ads and Google Tag Manager
The website envisages the use of Google Tag Manager to manage tags, Google Analytics for measurement and statistics, and Google Ads to evaluate campaigns and conversions. Depending on the configuration, these services may process IP address, device and browser data, pages visited, events, referral source, cookie identifiers and information related to ads or conversions.
Analytics and advertising tags must respect the preferences transmitted by the consent manager. Atelier Geometria must not send Google Analytics or Google Ads any data that directly identifies a person, such as name, email or telephone number, through URLs, events or Tag Manager variables.
Further information about Google is available in Google's Privacy Policy, on the “How Google uses cookies” page and on the “How Google uses information from sites or apps that use our services” page.
09. Data security
Atelier Geometria adopts technical and organisational measures appropriate to the risk in order to protect data against loss, destruction, alteration, unauthorised access or disclosure. These measures may include access control, permission management, security updates, backups, protection of communications and incident monitoring.
Despite the measures adopted, no system is entirely free from risk. If a personal data breach occurs that is likely to result in a risk to data subjects, Atelier Geometria will act in accordance with the applicable legal obligations, including notification to the supervisory authority and, where required, communication to the data subjects affected.
10. Rights of data subjects
Under the applicable legislation, data subjects may, depending on the circumstances, exercise the following rights:
- access to their personal data and information about the processing;
- rectification of inaccurate or incomplete data;
- erasure of the data, where the legal requirements are met;
- restriction of processing;
- data portability, where the processing is based on consent or on a contract and is carried out by automated means;
- objection to processing based on legitimate interest, on grounds relating to their particular situation;
- withdrawal of consent at any time, without affecting the lawfulness of prior processing;
- not to be subject to a decision based solely on automated processing which produces legal effects or similarly significant effects, under the applicable legal terms.
Requests should be sent to the privacy contact set out in this policy and may be accompanied by the information needed to confirm the requester's identity. Atelier Geometria will normally respond within one month. In complex cases, or where several requests are received, that period may be extended by a further two months, with the data subject being informed within the first month.
11. Complaint to the supervisory authority
Without prejudice to any other administrative or judicial remedy, data subjects may lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados, CNPD):
Website: https://www.cnpd.pt
Address: Avenida D. Carlos I, n.º 134,
1.º, 1200-651 Lisboa
Telephone: +351 213 928 400
General email: geral@cnpd.pt
12. Automated decision-making and profiling
Atelier Geometria does not take decisions producing legal effects or similarly significant effects on users based solely on automated processing. Advertising tools may carry out segmentation, measurement or audience building depending on the configuration and on consent, under the terms defined by the respective providers.
13. Children's data
The website is not specifically directed at minors and Atelier Geometria does not knowingly seek to collect children's personal data through the form. Should it become aware that it has received a minor's data without an appropriate basis, it will take reasonable steps to delete it.
14. Third-party links and services
The website may contain links to third-party websites. Atelier Geometria does not control the privacy practices of those third parties and therefore recommends consulting their policies before transmitting any data.
15. Changes to this policy
Atelier Geometria may update this policy to reflect legal, technical or organisational changes. The version in force will be published on the website together with the date of the last update. Where a change affects processing based on consent, new consent may be requested.
Last updated [INSERIR DATA DA PUBLICAÇÃO]