Who Is Responsible

Data controller details

The data controller responsible for your personal data is:

• Company — DETALHE BRUTAL, UNIPESSOAL LDA
• Registered address — Campina dos Galegos, Apart. 11 SBA, 8150-058 São Brás de Alportel, Portugal
• Email — info@detalhebrutal.com
• Website — detalhebrutal.com

For the purposes of the GDPR (Regulation (EU) 2016/679) and Lei n.º 58/2019 (Portuguese implementation), we determine the purposes and means of processing personal data collected through our website and in the context of our IT Marketing services, unless otherwise agreed in a separate data processing agreement where we act as a processor on your behalf.

If you have questions about how your data is handled, or wish to exercise your rights, you may contact us using the details above. We will respond within the timeframes required by applicable law, typically within one month of receiving a valid request.

Information We Collect

What data we gather

We may collect personal data that you voluntarily provide when you contact us, request information, subscribe to communications, or engage with our marketing services. This may include:

• Identity data — name, company name, job title
• Contact data — email address, telephone number, postal address
• Communication data — messages, enquiries, and correspondence
• Technical data — IP address, browser type, device information, and operating system
• Usage data — pages visited, time spent on site, referral sources, and interaction patterns

We may also collect information automatically when you browse our website, including log files, device identifiers, approximate location derived from IP address, and interaction events such as clicks, scroll depth, and referral URLs.

Data you provide directly

• Contact form submissions (name, email, message content)
• Business enquiries and project briefs shared by email or meeting notes
• Billing and invoicing details where a commercial relationship exists
• Marketing preferences and newsletter subscriptions, where applicable

Data collected automatically

• Browser type, language, screen resolution, and operating system
• Date, time, and duration of visits; pages viewed and navigation paths
• Cookie identifiers and consent choices stored in your browser

We do not intentionally collect special categories of personal data (such as health, biometric, or political data) unless required for a specific service and with your explicit consent. We do not knowingly collect data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.

Why We Process Data

Legal basis & purposes

We process personal data only where we have a valid legal basis under Article 6 of the GDPR. Depending on the context, this may include:

• Consent — for optional cookies, marketing communications, or other processing where you have given clear permission
• Contract — to respond to enquiries, prepare proposals, deliver IT Marketing services, and manage client relationships
• Legitimate interests — to operate and improve our website, prevent fraud, ensure security, and pursue business development in a balanced manner that respects your rights
• Legal obligation — to comply with tax, accounting, regulatory, or court requirements under Portuguese and EU law

Where processing is based on legitimate interests, we assess whether our interests are overridden by your rights and freedoms. You may object to such processing at any time, and we will evaluate your request in accordance with applicable law.

We use personal data to deliver and improve our services, communicate with you, analyse website performance, maintain records of business correspondence, and protect the integrity of our systems and users.

Cookies & Tracking

How we use cookies

Our website uses cookies and similar technologies to ensure proper functionality, remember your preferences, analyse traffic, and improve your browsing experience. When you first visit our site, you may choose to accept all cookies or allow only essential cookies through our cookie banner.

• Essential cookies — required for core site functionality and security
• Analytics cookies — help us understand how visitors use the website (only with your consent)
• Preference cookies — remember settings such as cookie consent choices

Cookies are small text files stored on your device. Similar technologies such as local storage may be used to remember your cookie consent choice. We classify cookies as follows:

• Strictly necessary — enable core functionality, security, and load balancing; these do not require consent
• Analytics — help us understand aggregate traffic patterns and improve content (activated only with your consent)
• Functional — remember preferences such as language or cookie banner state

You can manage or delete cookies through your browser settings at any time. Disabling certain cookies may affect website functionality. Your consent preference is stored locally and can be reset by clearing site data or using the cookie banner controls where available.

For more information about how we use cookies in connection with analytics or third-party tools, contact us or refer to the documentation of any integrated service provider disclosed upon request.

Use & Sharing

How data is processed

We process personal data only where we have a lawful basis to do so, including consent, contractual necessity, legitimate interests, or legal obligation. We use your information to:

• Respond to enquiries and provide requested IT Marketing services
• Operate, maintain, and improve our website and digital presence
• Analyse performance and optimise our marketing activities
• Comply with legal, regulatory, and accounting requirements
• Protect our rights, security, and the integrity of our systems

We do not sell your personal data. We may share information with trusted service providers who assist us in hosting, analytics, communication, or technical operations, subject to appropriate data processing agreements. Data may also be disclosed where required by law or to protect our legal interests.

Categories of recipients may include website hosting providers, email and communication platforms, analytics providers (where consented), cloud storage services, professional advisers (accountants, lawyers), and payment processors where applicable. All processors are bound by written agreements requiring appropriate security measures and processing only on our documented instructions.

International transfers

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission, adequacy decisions, or other mechanisms permitted under GDPR Chapter V. You may request further information about specific transfers by contacting us.

How Long We Keep Data

Retention & security

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, and reporting requirements. Typical retention periods include:

• Enquiries — up to 24 months after last contact, unless a business relationship continues
• Client records — for the duration of the contract and up to 10 years thereafter for legal and tax purposes where required
• Website logs — generally up to 12 months, unless needed for security investigations
• Cookie consent records — as long as needed to demonstrate compliance with consent requirements

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure, or destruction. These measures include access controls, secure transmission where applicable, staff awareness, and regular review of our processing activities.

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the CNPD and, where required, affected individuals in accordance with Articles 33 and 34 of the GDPR.

Rights & Contact

Your rights and our commitment

Under the GDPR and applicable Portuguese law, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data, as well as the right to data portability and to withdraw consent at any time where processing is based on consent.

• Right of access — obtain confirmation and a copy of your personal data
• Right to rectification — correct inaccurate or incomplete data
• Right to erasure — request deletion where legally applicable (“right to be forgotten”)
• Right to restriction — limit processing in certain circumstances
• Right to data portability — receive data in a structured, machine-readable format where applicable
• Right to object — object to processing based on legitimate interests or direct marketing
• Right to withdraw consent — at any time, without affecting prior lawful processing
• Right to lodge a complaint — with the Comissão Nacional de Proteção de Dados (CNPD) at cnpd.pt

To exercise any of these rights, email info@detalhebrutal.com with sufficient detail to identify your request. We may need to verify your identity before responding. We aim to reply within one month, which may be extended by two further months for complex requests, as permitted by the GDPR.

DETALHE BRUTAL, UNIPESSOAL LDA · Campina dos Galegos, Apart. 11 SBA, 8150-058 São Brás de Alportel, Portugal.