Privacy & cookies

Who is responsible

Mano de Plata is an independent project in development, led by Ricardo Serodio in Portugal. It is not presented as an incorporated company. Ricardo Serodio is the controller of the personal data covered by this page.

For questions about the project or your personal data, email [email protected].

This website introduces ideas and our own projects. It does not accept orders, payments, enrolments or the conclusion of contracts. The four visual examples are fictional concepts, not client work.

When you contact us

Email links open your email application. We only receive a message if you send it. We process the email address, the name you use and the content you share to reply and follow up on the matter.

The legal basis is our legitimate interest in responding to enquiries addressed to the project and keeping the context needed for the conversation, under Article 6(1)(f) of the GDPR. You may object to this processing. We do not use these contacts for newsletters or marketing campaigns.

Sending a message is voluntary. Without a reply address and enough information about the matter, we may be unable to respond. Please do not send unnecessary identity documents, banking details, health information or other sensitive data.

Browsing and security

The website uses Cloudflare Pages for hosting and delivery. When serving pages, Cloudflare may process IP addresses, request data, browser information and technical logs to deliver content, keep the service working and prevent abuse.

Our legitimate interest in providing and protecting the website is the basis for technical processing carried out on our behalf. Cloudflare also describes processing for which it is independently responsible in its privacy policy.

Cookies and external links

This website's code does not set advertising or audience measurement cookies, create visitor profiles or use local storage to track visitors. It does not include forms, a newsletter, embedded videos or social media scripts.

The hosting provider's security mechanisms may use strictly necessary technical resources where applicable. The absence of tracking on the page does not mean that no technical processing takes place on the server.

The PT | EN selector uses links between pages. It does not store your language choice in cookies or browser storage, or automatically redirect you based on your location.

We do not load optional tracking tools in this version, so we do not display a consent request for those tools. If we add analytics, advertising or embedded content that requires consent, it will be blocked until the visitor makes a choice, with options to accept, refuse and withdraw consent.

Cloudflare may use technical security cookies when its protection mechanisms are triggered. Their presence and duration depend on the mechanisms used. See the Cloudflare cookie documentation.

An external link, such as the WISESTRIKE Music website, only opens that service when you select it. Your visit is then subject to that service's privacy rules.

Providers and transfers

Hosting is provided by Cloudflare. Project email uses Spacemail by Spaceship and is accessed through Microsoft's Outlook. These providers may process the data needed to deliver, support and secure their services.

We do not sell your data. Data may be disclosed to authorities where legally required. Access to correspondence is limited to the controller and the providers needed for the service to operate.

Providers may use infrastructure or subprocessors outside the European Economic Area. Cloudflare's and Spaceship's agreements provide safeguards for the transfers they cover, including standard contractual clauses. You can request information about applicable safeguards using the contact above.

See Cloudflare's data processing terms, Spaceship's privacy policy, Spaceship's data processing addendum and Microsoft's privacy statement.

How long we keep data

Closed general correspondence is retained, while useful for understanding the enquiry, for a maximum of 24 months after the last contact. The need to retain it is reviewed manually at least once a year and at the end of that period. Data that is no longer necessary is deleted by a manual decision, without automatic deletion.

Ongoing matters are retained for as long as needed to handle them. Documents subject to legal obligations or needed to establish, exercise or defend rights may be retained for the applicable periods, with limited access and specific justification. Moving messages to a review or archive folder does not, by itself, restart or extend the retention period.

Technical hosting data follows the periods and criteria of the services used, including operational needs, security, incident investigation and legal obligations. We do not maintain our own visitor database or a permanent export of browsing logs.

Your rights

You may request access, rectification, erasure or restriction of processing, and object where provided for by the GDPR. Portability applies when its legal requirements are met. If any future processing relies on consent, you may withdraw it without affecting earlier processing.

Send your request to [email protected]. We will normally respond within one month; any lawful extension will be explained and communicated. Proportionate information may be needed to verify your identity.

You have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados, without contacting us first.

Scope and changes

This information covers the project presentation and related enquiries. The website does not make automated decisions with legal or similarly significant effects on visitors. Before adding a shop, forms, a newsletter or analytics tools, we will review this information and the choices available.