Privacy Policy

1. Introduction
This Privacy Policy describes how the website Viana – The Legend of the Golden Hearts (“we”, “our”, “site”) collects, uses, stores, shares, and protects the personal data of visitors and users (“you”, “user”). By using this website, you agree to the terms described in this policy.

2. Data We Collect
We may collect the following types of data:
Data provided directly by you: when you use the “Contact” form (name, email, message).
Automatic / technical data: such as IP address, browser type, operating system version, pages visited, time spent on the site, server log data, and cookie data.
Third-party / external service data: if integrated into the site (e.g., analytics, social networks) — data collected through those providers.

3. Purposes of Data Processing
We use the collected data for the following purposes:

• To respond to your contact requests via the form (reply to messages, provide requested information).

• To improve, maintain, and manage the site, its content, and usability.

• To carry out statistical and performance analyses (e.g., via analytics tools).

• To comply with legal or regulatory obligations, where applicable.

• To prevent fraud and protect the integrity of the site.
   

4. Legal Basis for Processing
Depending on the type of data and purpose, we rely on the following legal bases:

• User consent (for form submissions, use of non-essential cookies).

• Performance of a contract or provision of a requested service (where applicable).

• Legitimate interest (e.g., to improve the site or ensure security).

• Compliance with a legal or regulatory obligation.
   

5. Data Sharing
We do not sell your personal data. We may share data in the following situations:

• With service providers (e.g., hosting, analytics tools, technical support) — only to the extent necessary.

• With authorities or legal entities, if required by law or court order.

• With partners or collaborators, if you authorize it or if it is necessary for the operation of an integrated service.
   

6. Cookies and Similar Technologies
We use cookies to facilitate navigation, remember preferences, and collect statistical access data.
You can configure your browser to reject cookies or alert you when a cookie is sent.
Some cookies are strictly necessary for the operation of the site; others are optional (analytics, marketing). You have the right to consent to or refuse optional cookies.

7. Data Security
We implement technical and organizational measures to protect data against unauthorized access, destruction, loss, or alteration.
Access to personal data is restricted to authorized personnel who need it to perform their duties.

8. Data Retention
We retain personal data for as long as necessary to fulfill the purposes described in this policy, or as required by law.
After that period, data will be deleted or anonymized, unless there is a legal requirement to retain it for longer.

9. Your Rights
You may exercise the following rights under applicable data protection laws:

• Right of access: request confirmation and access to your data.

• Right to rectification: request correction of inaccurate or incomplete data.

• Right to erasure (“right to be forgotten”): request data deletion under certain conditions.

• Right to restriction of processing: request that the use of your data be limited.

• Right to data portability: obtain your data in a structured format and transfer it to another controller.

• Right to object: object to the processing of your data when based on legitimate interest or for marketing purposes.

• Right to withdraw consent: when processing is based on consent, without affecting the lawfulness of prior processing.

• Right to lodge a complaint with the data protection authority (in Portugal: Comissão Nacional de Proteção de Dados — CNPD).
   

10. International Data Transfers
If your data is transferred to servers or service providers outside the European Economic Area, such transfers will be made in accordance with legal safeguards (standard contractual clauses, adequacy decisions, consent, etc.).

11. Minors
This site is not directed to individuals under the age of 16 (or other applicable local age). If you are a minor, please obtain permission from your parents or guardians before providing any personal data. If we become aware that we have collected personal data from a minor without consent, we will take steps to delete such data.

12. Changes to This Policy
We may update this policy periodically. The date of the last update will be indicated at the beginning (or bottom) of the document. When significant changes occur, we will notify you appropriately (e.g., via a banner on the site or email).

13. Contact
If you have questions, requests, or complaints about this policy, please contact us through the email provided on the website or via another available communication channel.