1. Data controller
Cinema Plastique, based in Faro, PT, reachable at geral@cinemaplastique.pt, is the controller for personal data collected through this website under Regulation (EU) 2016/679 (GDPR) and Portuguese Law 58/2019.
Full company identification is available in the Legal Notice.
2. Data we collect
- Contact form: name, email, project type and message.
- Browsing data (only with your consent): pages visited, referrer, approximate country (from IP), user agent.
- Cookies and similar technologies: see the Cookie Policy.
3. Purposes and legal basis
- Responding to inquiries — pre-contractual measures at your request (Art. 6(1)(b) GDPR).
- Site usage analytics (GA4, GTM) — your consent (Art. 6(1)(a) GDPR).
- Marketing and campaign measurement (Meta Pixel, TikTok Pixel) — your consent.
- Legal obligations (e.g. accounting, tax) — Art. 6(1)(c) GDPR.
4. Retention
- Contact form messages: up to 24 months after our last interaction.
- Aggregated visit statistics: up to 26 months.
- Data covered by legal obligations: for the period required by law.
5. Recipients and processors
We rely on providers that process data on our behalf under data-processing agreements:
- Supabase / Lovable Cloud — hosting and database.
- Cloudflare — content delivery and protection.
- Web3Forms — email notification delivery.
- Google (Analytics, Tag Manager) — usage analytics.
- Meta (Facebook/Instagram) and TikTok — marketing pixels (consent only).
Some providers may process data outside the European Economic Area. In those cases we rely on appropriate safeguards (EU Standard Contractual Clauses).
6. Your rights
Under the GDPR, you have the right to:
- Access, rectify, erase or restrict the processing of your data.
- Object to processing and request data portability.
- Withdraw consent at any time, without affecting the lawfulness of prior processing.
- Lodge a complaint with the Portuguese DPA — Comissão Nacional de Proteção de Dados (CNPD) at www.cnpd.pt.
To exercise these rights, contact us at geral@cinemaplastique.pt.
7. Security
We apply appropriate technical and organisational measures to protect personal data from loss, unauthorised access or disclosure.
8. Changes to this policy
This policy may be updated. The "last updated" date above shows the version currently in force.