Privacy Policy

Last updated: August 2026

This Privacy Policy explains how Rodrigo Santos ("I," "me," or "my") processes personal data when you visit my portfolio website at rodrigo-santos.pt ("the Website").

Data Controller

The data controller responsible for your personal data is Rodrigo Santos. You can contact me at rodrigo.s.santos003@gmail.com.

What Data I Collect

The Website is a static portfolio. I do not operate contact forms, newsletters, accounts, or advertising on the Website itself. When you visit, the following data may be processed:

• Hosting and server logs: When you request a page, my hosting provider (Vercel Inc.) processes technical data needed to deliver the Website, such as your IP address, browser type (User-Agent), requested URL, referrer, and timestamps. This data is generated automatically when you use the internet.
• Vercel Web Analytics: I use Vercel Web Analytics to understand traffic in aggregate. It does not use cookies. It may record page views, the page URL, referrer, approximate location (country/region/city), browser, operating system, and device type. Vercel identifies visitors using a short-lived hash derived from the incoming request; that identifier is discarded after 24 hours.
• Vercel Speed Insights: I use Vercel Speed Insights to measure website performance. It does not use cookies and may record route, URL, country, browser, device type, operating system, network speed, and Core Web Vitals metrics (such as page load timing).
• Contact outside the Website: If you email me or contact me through LinkedIn or GitHub using the links on the Website, any personal data you choose to send (such as your name and email address) is processed in that separate channel, not through a form on this site.

How I Use Your Data

• To host the Website and deliver pages to your browser.
• To understand how the Website is used and to improve its content and performance.
• To respond to messages you send me voluntarily by email or through third-party platforms.

Legal Basis (GDPR)

I process personal data on the following bases under Article 6 of the GDPR:

• Legitimate interests (Art. 6(1)(f)): Hosting the Website, maintaining security, measuring audience in a privacy-friendly way, and improving performance. I have assessed that these interests do not override your rights, given the limited nature of the data and the absence of advertising or profiling.
• Consent or pre-contractual steps (Art. 6(1)(a) or (b)): If you contact me directly, I process the information you provide to respond to your inquiry.

Cookies and Similar Technologies

The Website does not set analytics or marketing cookies. Vercel Web Analytics and Speed Insights operate without cookies. If you choose to opt out of analytics, your preference is stored in your browser's local storage under the key analytics-consent so the Website can remember your choice on future visits.

Your browser may still store strictly necessary technical data for normal operation, which you can manage in your browser settings.

Recipients and Processors

I use Vercel Inc. to host the Website and to provide Web Analytics and Speed Insights. Vercel processes data on my behalf as a service provider. Vercel's privacy information is available in the Vercel Privacy Policy and their product-specific documentation for Web Analytics and Speed Insights.

I do not sell your personal data. I do not share it with third parties for their own marketing purposes.

International Transfers

Vercel Inc. is based in the United States. Where personal data is transferred outside the European Economic Area or the United Kingdom, appropriate safeguards apply, such as Standard Contractual Clauses and, where applicable, participation in the EU-U.S. Data Privacy Framework.

Data Retention

• Hosting logs: Retained by Vercel according to their platform configuration and documentation.
• Analytics and Speed Insights: Visitor session identifiers used by Vercel Web Analytics are discarded after 24 hours. Aggregated metrics are retained to provide historical statistics.
• Email and direct messages: Retained only as long as needed to respond to your inquiry and for any reasonable follow-up, unless a longer retention period is required by law.

Your Rights

If you are in the European Economic Area or the United Kingdom, you have the right to:

• Access the personal data I hold about you.
• Request correction of inaccurate data.
• Request erasure in certain circumstances.
• Request restriction of processing in certain circumstances.
• Object to processing based on legitimate interests, including analytics and performance measurement. You can opt out using the control above or by emailing me.
• Request data portability where applicable.
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

To exercise these rights, email rodrigo.s.santos003@gmail.com. I may need to verify your identity before responding.

Right to Complain

You have the right to lodge a complaint with a supervisory authority. In Portugal, the competent authority is the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

Data Security

I take reasonable measures to protect personal data, including using reputable hosting infrastructure and keeping the Website software up to date. No method of transmission over the internet is completely secure.

Changes to This Policy

I may update this Privacy Policy from time to time. The "Last updated" date at the top of this page will reflect the latest version. Material changes will be published on this page.

Contact

Questions about this Privacy Policy or your personal data can be sent to rodrigo.s.santos003@gmail.com.