Privacy Policy
Last updated:
In short: this site is a static portfolio. It has no accounts, forms, cookies or analytics, runs no advertising and tracks nobody for marketing. I only handle personal data if you contact me, and only to reply to you.
1. Who is responsible
The controller of your data is Moisés Matos Braz, an individual living in Aveiro, Portugal. For anything about personal data, write to moisesmatosbraz3359@gmail.com. I have not appointed a data protection officer because none is required in this case.
2. What data I handle and why
| When | Data | What for | Legal basis (GDPR) | For how long |
|---|---|---|---|---|
| You contact me by email or on LinkedIn | Your name, your email address, the content of your message and whatever else you choose to tell me | To reply to you and follow up on the contact | Legitimate interest in replying to you, or steps taken at your request before entering a contract (Art. 6(1)(f) and (b)) | As long as needed to deal with the contact; you can ask me to delete it at any time |
| You visit the site | Technical request data (IP address, date and time, requested page, browser and device), handled by Cloudflare, which delivers the site (my server keeps no access logs) | To deliver the site and protect it from abuse | Legitimate interest in the operation and security of the site (Art. 6(1)(f)) | At Cloudflare, under its own rules; on my server it is not stored. I do not use it for any other purpose |
Providing me with data is always voluntary; without it I may not be able to reply to you.
3. What I do not do
- I do not use cookies or similar technologies to follow you (see the Cookie Policy).
- I do not use analytics, advertising, tracking pixels or behavioural profiles.
- I do not sell or hand over personal data, and I make no automated decisions about you.
- The site loads nothing from third parties — no fonts, scripts, maps, videos or embedded social networks: everything comes from the site’s own address.
4. Who else may have access
- Cloudflare (Cloudflare, Inc.), which delivers the site: requests from visitors go through its network and an encrypted tunnel (Cloudflare Tunnel) to my server, where the site is hosted. It acts as my processor and sees the technical request data (point 2). I do not turn on its visitor analytics or its bot-detection and security-challenge features, which can set cookies.
- The email provider (Google, through Gmail), which handles the messages you send me.
- LinkedIn, if you contact me there: that conversation is subject to LinkedIn’s own policy.
Cloudflare and Google may process data outside the European Economic Area, in particular in the United States. When they do, the transfer relies on the safeguards provided by the GDPR: the EU-US Data Privacy Framework and, as a fallback, the European Commission’s standard contractual clauses (which are part of Cloudflare’s data processing agreement).
5. Links to other sites
The site links to LinkedIn, GitHub and the University of Aveiro. When you click one you leave this site: what happens next depends on the privacy policy of those sites, which I do not control. I send them no data about you.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, portability and objection (Articles 15 to 21 GDPR). To exercise them just send me an email; I will reply within one month at the latest.
If you believe the processing of your data breaches the law, you have the right to lodge a complaint with the supervisory authority: the Comissão Nacional de Proteção de Dados (CNPD), at cnpd.pt.
7. Security
The site is static and reaches you over HTTPS: it has no database, private area or forms. It runs on a server of mine, which Cloudflare connects to the Internet through an encrypted tunnel, without exposing the server directly. The messages you send me stay only in my mailbox, under the security measures of its provider.
8. Changes to this policy
When something changes I update this page and the date at the top. If I ever use analytics or third-party services, I will say so here and in the Cookie Policy before turning them on, and ask for your consent whenever the law requires it.