Privacy notice

Who is responsible

Tomás Adão da Fonseca is the controller for every card on this site. Contact: tomas@2fadvisory.com.

What is collected

If you only view a card or save the contact, no personal data is stored and no cookies are set. The site keeps anonymous counts (views, saved contacts, taps on buttons) with no IP address or device identifier.

If you send your details through the form: your name, your email address and/or phone number, and your company if you give it, together with the card you used and the date.

To prevent abuse, the site keeps a short code derived from your IP address for at most 24 hours. The address itself is not stored.

Why, and on what basis

To follow up on our meeting and stay in professional contact. The legal basis is legitimate interest (Article 6(1)(f) GDPR): you chose to share your details so that we could stay in touch. Abuse prevention also relies on legitimate interest.

Your details are not added to marketing lists and are never sold.

Who else processes the data

Cloudflare, which hosts the site and its database and delivers the notification email, and Microsoft, which provides the mailbox where Tomás Adão da Fonseca receives that email. Some processing may take place outside the European Economic Area; such transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

How long it is kept

Kept while we are in professional contact, deleted automatically after 36 months without contact, or sooner if you ask.

Your rights

You can ask for access to your data, its correction or deletion, restriction of its use, or a copy in a portable format, and you can object to its use, by writing to tomas@2fadvisory.com. You can also complain to the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (www.cnpd.pt).