Privacy policy

Who handles your data

Pedro Cerqueira · Tax no. PT156339374 · Coimbra
pedro@pedrocerqueira.pt

The controller of the data collected on pedrocerqueira.pt. For any question or request about your data, write to pedro@pedrocerqueira.pt.

When you write to us

The contact form keeps your name, email and message (and your phone number, if you give it), and emails them to the photographer. It also keeps an encrypted code of your IP address to stop abuse — the IP cannot be recovered from it.

They are used only to reply and, where relevant, prepare a quote: a request you make before any contract.

They are deleted automatically after 1 year.

When you sign up for a workshop

A booking keeps:

• your name, email and phone number;
• the message you write;
• the name and contact details of anyone you book for (please let them know);
• your tax number, billing name and address, when asked for.

They are used to manage the booking, the places and the waiting list, send you workshop updates and issue the invoice — the contract you enter by booking; invoicing is a legal obligation.

When you open a course document from your booking page, the site records that you opened it and on which day, so the photographer knows how many participants have seen the materials.

Personal data leaves the site 2 years after the workshop: only the number of places remains. Invoices are kept outside the site for as long as tax law requires.

When you create an account for the Photography Course

A course account keeps:

• your name and email;
• your password, encrypted — nobody can read it, not even me;
• the district you choose;
• whether you want news from the Academy, and when you said so;
• when you created the account and the last time you opened the course;
• whether you have the whole course (bought or offered) or only the sample chapters.

They are used to give you access to the course. The district tells me where readers are from and, only if you tick the news box, lets me tell you about courses near you — without that box, I send you nothing beyond the account's own emails and your purchases.

An account that is never confirmed deletes itself after 7 days. The others stay while they exist: on the «Conta» page, inside the course, you can change your details, stop receiving news or delete the account at any time. You can also ask at pedro@pedrocerqueira.pt.

When you buy the Photography Course

Payment happens on Stripe's page (Stripe Payments Europe, Ltd.), which handles the card, MB WAY or Multibanco details — I never see or keep them. From the payment I keep:

• the name and email of whoever paid;
• the amount, the VAT, the date and the payment method;
• your tax number (NIF), if you give it for the invoice;
• the confirmation that you asked for immediate access to the course.

They are used to give you access, issue the invoice and meet tax obligations. These records are kept for as long as tax law requires, even if you delete your account.

In client galleries

Galleries are private: only people with the password can get in. When you enter, the gallery may ask for your email (and your name, if you give it). It also keeps:

• the photos you mark as favourites and the notes you write;
• a log of visits and downloads, with an encrypted code of your IP address and your browser type;
• the emails the site sends you (a file is ready, the gallery is about to expire).

They are used to give you access to the photos, keep your choices, let you know about them and check the photos arrived — delivering the commissioned work, and a legitimate interest in doing it well. Links to share a single photo last 3 months.

A gallery stays online for 1 year, unless the client asks for it to be permanent. When it expires the photos are removed, and the email, favourites and visit and download logs are removed 30 days later.

When I send you a proposal

A proposal is sent through a link that is yours alone. When you open, print or download it, the site records:

• what you did and when;
• the type of device (computer, phone or tablet).

It does not keep your IP address: it uses an encrypted code that changes every day and cannot be traced back to it.

This lets me know the proposal arrived and when to follow up — it is part of preparing a contract you asked for. The records are deleted automatically after 1 year, or earlier if I delete the proposal.

Testimonials

After a delivery, I may invite you to leave a testimonial about the work. If you do, I keep the text, your name and, if you give it, your role or company, together with the work it refers to.

• Nothing is published before I read it.
• It only appears on the site with your name if you tick the permission box on the form.
• You can ask at any time for the testimonial to be corrected or removed by writing to pedro@pedrocerqueira.pt.

“My photos”

In some galleries you can take a selfie to see only the photos you appear in. The selfie never leaves your phone or computer: it is turned into a code of numbers right there, and only that code is sent.

That code is biometric data. It is kept only if you agree, in the box shown before the selfie, and it is linked to your email so you can find your photos again without a new selfie, in this and other galleries on this site. It is used for nothing else.

You can delete it at any time with the “Delete my code” button in the gallery or by writing to pedro@pedrocerqueira.pt. If you don't, it is deleted on its own after 1 year without use.

For the search to work, the faces in a gallery's photos are turned into codes of the same kind when the photos are prepared. They are not images: they are only compared with the code of the person searching, inside that gallery, and they are deleted with the photos. If you don't want your face included, write to pedro@pedrocerqueira.pt and we will remove it.

When you just browse the site

The site counts page views without cookies and without third-party analytics. Each visit is logged with an encrypted code that changes every day: it lets us count visitors, but not know who you are or follow you from one day to the next. Course documents (PDFs, images, manuals, videos) are counted the same way, to know how many people opened each one. These logs are kept for 400 days.

To protect password areas, failed sign-in attempts keep the IP address for two days. The server's technical error logs may include the IP address and are used only to fix faults.

Cookies

The site only uses what it needs to work:

• pc_sessao — the session: makes forms and gallery access work. Lasts up to 30 days.
• pc_visitante — in a gallery, remembers the email you gave so you don't have to type it again. Lasts 400 days.
• browser local storage — remembers, for example, that you closed a tip.

There are no advertising cookies, no Google Analytics and no social media pixels. That is why there is no cookie banner.

Who else has access

The site and its email are hosted by Infomaniak Network SA, in Switzerland, which processes data only on this site's behalf. Switzerland has an adequacy decision from the European Commission: data there has the same protection as in the European Union.

The fonts and everything else the site needs come from this server. The only exceptions are the ones you choose: a YouTube or Vimeo video only loads if you tap it, links to Instagram or LinkedIn only open if you follow them, and a course manual in HTML may fetch fonts, images or scripts from other services when you open it — from then on, those services' rules apply. Those manuals open isolated from the rest of the site: they cannot read your data or your session.

Data is never sold or given to anyone.

Your rights

At any time you can:

• find out what data about you exists and get a copy;
• correct it;
• ask for it to be deleted;
• restrict or object to its use;
• take it elsewhere, in a file;
• withdraw consent you gave, without affecting what was done before.

Write to pedro@pedrocerqueira.pt. You will get a reply within one month.

If you think your data was not handled properly, you can complain to the Portuguese data protection authority, CNPD (https://www.cnpd.pt).

Changes to this policy

When the site changes how it handles data, this page changes with it and the review date at the top is updated.