Privacy Policy

Controller and scope

DG LABS is maintained by Daniel José Barros Garcia, a self-employed professional, the owner of this website and the controller of the personal data associated with it. For privacy questions or to exercise your rights, contact mail@danielgarcia.pt. This policy describes only this domain.

Technical browsing data

To receive a page, your browser communicates your IP address and technical request information to the server, such as the requested resource, the date and browser details. Providing and securing the website pursues the legitimate interest in enabling access to content and preventing misuse, under Article 6(1)(f) of the GDPR. Browsing does not require an account.

Contact form and email

The form sends its fields over HTTPS to the DG Labs server, which validates the request and emails mail@danielgarcia.pt through the Dominios.pt email service. Name, email and message are required; company or project, area of interest and budget are optional. The data is not saved in a website contact database. If the form is unavailable, you may contact us directly by email.

If you send the message, your name, address, the project information you include and the email metadata are processed to reply and follow up on the enquiry. The basis is the legitimate interest in responding to correspondence, Article 6(1)(f), or steps taken at your request before entering into a contract, Article 6(1)(b), where the enquiry concerns commissioning a service. Avoid including credentials or sensitive data.

Protection against form abuse

When the form approaches the visible area of the page, Cloudflare Turnstile is loaded to check automated requests. Cloudflare receives technical data, including the IP address and browser information, needed for verification. The website code does not send message fields to Cloudflare. The server confirms the verification result before attempting to send the email. This processing protects the form against spam and abuse.

To limit requests and prevent repeated sending, the server temporarily stores HMAC-derived identifiers, counters and timestamps. This file does not contain the plain IP address, message fields or Turnstile token. Records expire within one hour and are removed on the next request or by the scheduled cleanup task. Hosting technical logs follow the provider’s rules.

Theme preference

Your light or dark theme choice is saved in browser localStorage under dg-labs-theme to remember the preference you requested. This key is not sent by the website code to an analytics service and has no expiry period set by local storage. You can change it with the theme button or delete it through your browser’s site data settings. The language is determined by the page URL.

Retention and providers

Correspondence is retained to reply and follow up on the matter and, where necessary, to meet legal obligations or establish, exercise and defend rights relating to it. The need for retention depends on the status of the enquiry and the obligations applicable to it; the website does not have a database of contact messages. Where a contract is entered into, data necessary to perform it is processed under Article 6(1)(b) of the GDPR, and data required to meet legal obligations under Article 6(1)(c). Contractual data is retained in accordance with applicable legal obligations.

Hosting is provided by DMNS – DOMINIOS, S.A. (Dominios.pt), whose address is Parque Multiusos Lt. 3A, 8005-409 Faro. Dominios.pt provides email services for addresses on the danielgarcia.pt domain. These services are involved in delivering pages and receiving and replying to messages. External links open services with their own processing practices; this policy does not extend to those services.

Automated decisions

The features of this website do not include user profiling or automated decisions producing legal or similarly significant effects.

Rights and complaints

You may request access, rectification, erasure, restriction or object to processing and, where the legal requirements are met, portability of your data. Where processing depends on consent, you may withdraw it without affecting earlier processing. Send your request to mail@danielgarcia.pt, identifying the matter and the data needed to locate it. Identity will be verified only to the extent necessary to protect the data.

You may lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt. Requests are handled within the time limits and conditions set by the GDPR.