Privacy Policy

Last update: (19/11/2025) 

This Privacy Policy describes how arboretum.pt collects, uses, stores, and protects the personal data of its visitors and users, in accordance with the General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and other applicable legislation in Portugal.

By using this website, you agree to the terms of this Policy.

1. Data Controller

The data controller is:

arboretum.pt
Contact email: geral@arboretum.pt

If you have any queries, questions, or wish to exercise any rights relating to data protection, you may contact us at this address.

2. What personal data do we collect?

Arboretum.pt only collects personal data necessary for its operation, namely:

2.1 Data provided voluntarily by the user

Data submitted via forms (if applicable):

• Name 

• Email address
• Message sent
  (If you wish, I can adapt it to fit the existing forms.)
  

2.2 Data collected automatically

Through cookies and similar technologies (see Cookie Policy):

• IP address (anonymised in GA4)

• Usage and browsing data

• Device type and browser

• Pages viewed

• Time spent on the website

2.3 Data for advertising and remarketing

• Google Ads cookie identifiers

• Meta Pixel Identifiers

• Aggregated data for campaign segmentation and analysis

No sensitive personal information is collected.

3. Purpose of data processing

The data collected is used for:

3.1 Communication

• Respond to contact requests sent by the user.

3.2 Statistics and experience improvement

• Analyse website traffic and user behaviour (Google Analytics 4).

• Improve content, performance, and functionality.

3.3 Advertising

• Measuring the effectiveness of advertising campaigns.

• Display personalised advertisements or advertisements tailored to the user’s interests (Google Ads and Meta Pixel).

3.4 Legal compliance

• Ensure compliance with applicable legal obligations.

4. Legal basis for processing

The processing of personal data is based on:

• Consent (analytics, marketing and form cookies).

• Legitimate interest (website security and technical operation).

• Execution of user requests (when they contact us).

5. Who we share data with

5.2 International transfers

Google and Meta services may store data outside the EU, particularly in the US.
These companies use mechanisms such as Standard Contractual Clauses (SCC) to ensure compliance with the GDPR.

Arboretum.pt does not sell or disclose personal data to third parties for commercial purposes.

6. Data retention period

The data will be kept for the time strictly necessary to fulfil the purposes for which it was collected:

If the user withdraws consent, the data will no longer be processed for the corresponding purpose.

7. Rights of the data subject

The user has the right to:

• Access your personal data

• Correct incorrect data

• Deleting data (“right to be forgotten”)

• Limit treatment

• Objecting to processing

• Data portability

• Withdraw consent at any time

To exercise these rights, you must send a request to:

📧 geral@arboretum.pt

8. Data security

We have implemented appropriate technical and organisational measures to ensure:

• Confidentiality

• Integrity

• Availability

• Protection against unauthorised access

However, no system is completely secure – in the event of a data breach, the authorities and affected users will be notified in accordance with the GDPR.

9. Links to external websites

Arboretum.pt may contain links to other websites.
We are not responsible for the privacy policies or content of these websites.

10. Changes to this Privacy Policy

This policy may be updated whenever necessary due to legal or technological changes.

The latest version will always be available at arboretum.pt.

11. Contact

For questions or requests regarding data protection, please contact:

arboretum.pt 
📧 geral@arboretum.pt