Privacy Policy

1. Who is the data controller

The data controller is the Madeira Digital editorial team (info@madeiradigital.pt), operating from Funchal, Madeira Autonomous Region, Portugal.

2. What data we collect

Madeira Digital operates as an editorial site — no products, no checkout, no member area, no lead-capture forms. Data collection is therefore minimal:

• Data you send us by email. When you email info@madeiradigital.pt we keep your email address, the message content, and any information you share voluntarily. We retain it only as long as needed to handle the request.
• Server technical data. The hosting platform automatically logs IP address, browser agent, and access time for security and abuse prevention. Logs rotate and are typically deleted within 30 days.
• Aggregated visit statistics. When we activate web analytics (Google Analytics 4 or alternative), data will be configured in IP-anonymized mode with no cross-sharing for advertising. Activation will be announced on this page before it takes effect.

We do not collect: sensitive data (health, religion, political opinion), data from minors knowingly, payment data (there is no checkout), nor do we feed third-party advertising profiles.

3. How we use the data

• Replying to your email and following up editorially.
• Operating and protecting the site (security, abuse prevention).
• Understanding, in aggregate, which content is useful (no individual identification).
• Meeting legal obligations (retention of communications for required legal periods, where applicable).

We do not use your data for: unsolicited direct marketing, advertising profiling, sale to third parties, or enrichment of external databases.

4. Legal basis (GDPR)

• Legitimate interest — to respond to spontaneous contacts, to operate the site, for non-individualised aggregated analysis.
• Compliance with legal obligation — for record retention when required by Portuguese or European law.
• Consent — applicable only if a subscription form or similar is later activated; in that case it will be explicit and revocable.

5. Third parties and processors

To run the site we use a small number of technical providers. The current ones (and future, if anything changes) are listed here:

• Hosting and CDN — Next.js deployment platform (Netlify, Vercel, or Cloudflare Pages, depending on operational choice). They operate EU servers and/or global networks under EU Standard Contractual Clauses.
• Email — business-email provider (Microsoft 365 or Google Workspace) to receive and reply to info@madeiradigital.pt.
• Analytics (pending activation) — Google Analytics 4 with IP-anonymization and no advertising sharing; or a privacy-first alternative (Plausible, Fathom).

We do not run advertising pixels (Facebook Pixel, Google Ads conversion, TikTok Pixel) or remarketing tools.

6. Cookies

The site uses strictly necessary cookies (language preference, technical session). When analytics is activated, a consent banner will be shown for non-essential cookies, in line with the ePrivacy directive. You can disable non-essential cookies at any time without losing essential functionality.

7. Your rights

At any time, you have the right to:

• Access the information we hold about you.
• Request correction of inaccurate data.
• Request deletion ("right to be forgotten") where applicable.
• Request restriction of processing.
• Receive your data in a portable format.
• Object to processing based on legitimate interest.
• Lodge a complaint with the Portuguese Data Protection Authority (CNPD), at www.cnpd.pt.

To exercise any of these rights, email info@madeiradigital.pt. We may ask for identity verification before acting.

8. Changes to this policy

This policy may be updated to reflect operational changes (e.g. analytics activation or a newsletter launch). The "Last updated" date at the top of this page always tracks the current version. Material changes will also be noted on the site’s updates page.