Privacy policy

1. Who is responsible for your data

Kim May Sam, tax number (NIF) 327318899, organises the "Mitos y Catrinas" workshops and is the controller of the data described in this policy.

For any privacy matter: hola@mitosycatrinas.com.

2. What data we process

• The details you enter in the pre-registration form: name, email and, if you wish, mobile number.
• Your preferred date for the workshop and the language of the page.
• Where your visit came from (for example, the ad or social network you came from), the date and time of the pre-registration, and the record that you agreed to be contacted.

We do not ask for sensitive data.

3. Why we use the data and on what legal basis

• To manage your pre-registration and keep you informed about the workshop: dates, venue, when payment opens, changes or cancellation. Legal basis: steps taken at your request before entering into a contract (Article 6(1)(b) GDPR).
• To know where pre-registrations come from, so we can plan our promotion. Legal basis: legitimate interest (Article 6(1)(f) GDPR). We only use it in aggregate figures.

We do not send advertising for other events, and we do not share your data with third parties for commercial purposes.

4. Who processes the data on our behalf

• LusoMagnet (Jesús Manuel Ferreira Andara), which runs the website and the form technically, as a processor under an Article 28 GDPR agreement.
• Google (Google Workspace): the spreadsheet where pre-registrations are stored and the confirmation email.
• Cloudflare: website hosting. For security, it logs technical data about visits, such as the IP address.

Google and Cloudflare may process data outside the European Economic Area. They do so with GDPR safeguards: the EU-US adequacy decision (Data Privacy Framework) and standard contractual clauses.

5. How long we keep the data

Up to 3 months after the last workshop. After that we delete the personal data or anonymise it. If you ask earlier, we delete it straight away.

6. Cookies

This website uses no cookies or tracking technologies: there is no visitor analytics and no advertising. The fonts are hosted on the website itself.

7. Your rights

You can ask to access, correct or delete your data, restrict or object to its processing, and request portability. Just reply to the confirmation email or write to hola@mitosycatrinas.com. We reply within one month.

If you think your data has not been handled properly, you can complain to the Portuguese data protection authority, the CNPD (www.cnpd.pt).

8. Changes

If this policy changes, we will publish the new version here with the date it was updated.