Privacy Policy

1. Data controller

The controller of your personal data is Clínica de Dislexia Dra. Celeste Vieira II, Lda, tax ID 519270452, established at R. de Dr. Eduardo Torres 91, 4450-218 Matosinhos, Portugal. Contact: [email protected] · +351 912 476 935 / +351 933 345 010.

For any data protection matter, you can contact us directly at [email protected]. Given the size and nature of our activity, we are not required to appoint a Data Protection Officer (DPO).

2. Nature of the activity and types of data

Our activity is educational and learning-support in nature (assessment and intervention for dyslexia, dyscalculia, school support and guidance). All data we collect through this website is treated as ordinary personal data under Article 6 GDPR.

We do not collect special categories of data (for example, health data) through this website. The form is only for an initial enquiry.

Through this website, the only data we collect is what you voluntarily provide in the contact form:

• Name
• Email address
• Phone number (optional)
• Subject and message (which may include a brief description of a child's or adult's situation)

We do not collect payment data through the website. We do not carry out automated profiling or automated individual decision-making based on your data.

3. Purposes and legal basis

We process your data for the following purposes and on the following bases:

• To respond to your enquiry and, where relevant, schedule an assessment — basis: your consent, given by ticking the acceptance box on the form (Art. 6(1)(a)), and pre-contractual steps at your request (point (b)).
• To keep the site secure and prevent spam and abuse — basis: our legitimate interest (point (f)).
• To comply with legal obligations to which we are subject — basis: compliance with a legal obligation (point (c)).

You may withdraw your consent at any time by contacting us at [email protected], without affecting the lawfulness of processing already carried out.

4. Children's data

Many of our services are aimed at children and young people. Any data about minors included in your messages is provided by the holder of parental responsibility. By submitting the form, you declare that you are authorised to share that data and to contact us on the minor's behalf.

We treat minors' data with special care and only to the extent necessary to respond to the request and provide the support sought.

5. How we handle the information (no database)

This is a static website with no database. The contact-form message is sent by email to the clinic and is not stored in any system on this site. Subsequent handling (reply, scheduling) is carried out through the clinic's internal channels.

6. Processors and transfers

To operate the website and communicate with you, we rely on providers acting as processors or recipients, handling data on our behalf:

• Website hosting / content-delivery and security network: Hetzner Online GmbH (Germany) and Cloudflare, Inc.
• Form anti-spam verification: Cloudflare Turnstile, which processes your IP address only to tell humans from bots.
• Sending and receiving email: OVHcloud (OVH SAS).
• Traffic and conversion measurement, only if you allow it in the cookie banner: Google Analytics 4 and Google Ads, by Google Ireland Limited. These tools are only activated after your consent and are described in the Cookie Policy.

Some of these providers (for example Cloudflare and Google) may process data outside the European Economic Area, in particular in the United States. In such cases we ensure appropriate safeguards are in place, such as the European Commission's standard contractual clauses.

7. Retention period

We keep your data only for as long as necessary for the purposes for which it was collected. As the site stores no data, your message remains in the clinic's mailbox for as long as the contact lasts and, at most, for 12 months after the last communication, unless a legal retention obligation applies. After that period, the data is deleted.

8. Your rights

As a data subject you have the rights set out in the GDPR:

• Access to your personal data
• Rectification of inaccurate or incomplete data
• Erasure ("right to be forgotten")
• Restriction of processing
• Data portability
• Objection to processing
• Withdrawal of consent, at any time

To exercise these rights, contact us at [email protected]. You also have the right to lodge a complaint with the competent supervisory authority — in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

9. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or disclosure, including encrypted transmission (HTTPS) of this website.

10. Cookies

The use of cookies and similar technologies is described in detail in our Cookie Policy, accessible from the site footer.

11. Changes to this policy

This policy may be updated to reflect legal or operational changes. The date of the latest revision appears at the top of the page.