Privacy Policy

Last updated: 20 September 2026

1. Data Controller

Lanternaweb ("we") is a web development studio based in Lisbon, Portugal. Website: lanternaweb.com. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Portuguese Law Lei n.º 58/2019. For any questions regarding data processing, please contact us at the email address listed in the Contacts section.

2. What Data We Collect

We collect only the data you provide to us yourself via messengers or email: your name, contact details (phone number, email, messenger handle) and the content of your inquiry. The website contains no forms and does not collect personal data automatically, except for technically necessary cookies (see the Cookie Policy).

3. Purposes and Legal Bases of Processing

Data is processed solely to respond to your inquiry, prepare a proposal and deliver the project. The legal bases are Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract, and performance of a contract) and Art. 6(1)(f) GDPR (legitimate interest — conducting business correspondence).

4. Disclosure to Third Parties

We do not sell or share your data with third parties for advertising purposes. Data may be processed by the services through which you contacted us (Telegram, WhatsApp, our email provider) in accordance with their own policies. Where data is transferred outside the EEA, such services apply the transfer mechanisms provided for by the GDPR (standard contractual clauses).

5. Retention Period

We retain correspondence and contact details for the duration of the discussion or project work, and for up to 3 years after completion — for business records and the protection of legal interests. Upon your request, we will delete data earlier, provided there is no legal obligation to retain it.

6. Your Rights

Under the GDPR you have the right to request access to your data (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and to object to processing (Art. 21). Contact us and we will respond within 30 days. You also have the right to lodge a complaint with the Portuguese supervisory authority — CNPD, Comissão Nacional de Proteção de Dados (cnpd.pt).

7. Security

Data is stored in secure services with restricted access and transmitted over encrypted channels (TLS). We do not retain data longer, or process it more broadly, than necessary for the stated purposes.