Privacy Policy

Data controller

escalla is the controller of the personal data collected through this site and decides the purposes and means of that processing.

For any question about personal data, including exercising your rights, write to geral@escalla.pt.

What we collect

Only what you voluntarily send through the contact form: name, email address, company name (optional) and the message you write. On the website and photography proposal request, we also collect the business name and town, the type of space, whether it already has a website, a phone number (optional) and the campaign that brought you to the request.

If you accept cookies, Google collects data about your visit so we can measure how our ads perform (see Cookies and storage in your browser). We build no profiles. The request IP address is held in memory only, for a few minutes, purely to rate-limit abusive form submissions.

What we use it for

To answer your request and to carry out the preliminary steps towards a possible engagement. We do not use your data for marketing and we do not sell it to third parties.

The legal bases are your consent, given when you submit the form, and pre-contractual steps taken at your request, under Article 6(1)(a) and 6(1)(b) GDPR.

Who processes data for us

Email delivery is handled by Resend, Inc., acting as a processor, which may process the data in the United States. That transfer is covered by the Standard Contractual Clauses approved by the European Commission.

The site is hosted by Vercel Inc. No other third party receives the data you submit through the form.

If you accept cookies, Google Ireland Limited receives browsing data (such as pages visited, IP address and cookie identifiers) for Google Ads measurement, and may transfer it to the United States under the EU-US Data Privacy Framework. The legal basis is your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

How long we keep it

Contact messages are kept for 24 months from our last contact with you, after which they are deleted. If the request leads to a contract, the associated data is then kept for the statutory periods that apply to the contractual relationship and to tax obligations.

Security

All traffic to this site is encrypted in transit over HTTPS. Access to the messages we receive is limited to those at escalla who need to read them in order to answer your request.

We take no solely automated decisions and build no profiles from the data you send us. The form is not intended for anyone under 16, and we do not knowingly collect data from minors.

Cookies and storage in your browser

The site stores these entries in your browser:

The local storage entries are strictly functional within the meaning of Article 5(3) of the ePrivacy Directive and require no prior consent. Google cookies are only set if you accept, and last up to 90 days. You can change your choice at any time:

• escalla.consent (local storage): records whether you accepted or rejected cookies.
• escalla.locale-hint (local storage): records that you have dismissed the language notice, so it is not shown again.
• Google Ads cookies (_gcl_au and similar), only with your consent: measure whether a visit came from one of our ads.

Your rights

As a data subject you have the right to:

To exercise any of these rights, write to geral@escalla.pt. We reply within one month. You also have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.

• access the data we hold about you;
• ask for incorrect or incomplete data to be corrected;
• ask for the data to be erased;
• ask for processing to be restricted;
• object to the processing;
• receive the data in a structured, commonly used format;
• withdraw consent at any time, without affecting the lawfulness of earlier processing.

Changes to this policy

If we change this policy we update the date at the top of the page. Material changes are notified by email to anyone with an active conversation with us.