Palmira Studio
Privacy Policy
Last updated: September 2026
Palmira Studio respects the privacy of visitors to its website and handles personal data responsibly, transparently and in accordance with applicable data protection legislation, including the General Data Protection Regulation (GDPR).
1. Data controller
The controller responsible for the personal data collected through this website is:
Rita Alexandra Mateus Garcia
Palmira Studio
Portugal
contact@palmira-studio.com
For any question related to privacy or data protection, you may contact us at the address above.
2. What personal data is collected
The website may collect personal data when a visitor uses the contact form.
The data requested is:
- name;
- email address;
- company, where applicable;
- language selected on the website.
The form does not request a phone number, postal address, files or other additional personal data.
Palmira Studio seeks to limit data collection to what is necessary for the purposes for which it is processed.
3. What we use the data for
Data submitted through the contact form is used to:
- respond to contact requests;
- provide the materials or documents requested through the website;
- communicate with the person who made contact regarding their request;
- where applicable, establish, prepare or follow up on a professional relationship.
Data provided through the form is not used for personalised advertising, remarketing or the creation of advertising profiles.
4. Legal basis for processing
Data submitted through the form is processed to the extent necessary to respond to the request made and, where applicable, to take steps at the request of the data subject prior to entering into a contractual relationship.
Where processing is based on consent, it may be withdrawn at any time, without affecting the lawfulness of processing carried out before its withdrawal.
The use of Google Analytics for website measurement and analysis purposes depends on the visitor's consent, as described in our Cookie Policy.
5. How the data is handled
When a visitor submits the contact form, the data is processed by the website's system and transmitted through the Resend email delivery service.
The website does not maintain its own database of form submissions.
Requests received are sent to:
The visitor also receives an automatic reply at the email address they provided in the form.
Resend acts as an email delivery infrastructure provider and states that message data may include, among other elements, email address, metadata and message content, including attachments where applicable. Resend also states that its main processing operations take place in the United States and that it uses mechanisms provided for in its Data Processing Addendum for international transfers.
The website also uses Cloudflare as the infrastructure that runs the application. Cloudflare states that it may store and access certain information in the United States and in the European Economic Area and that it uses safeguards for international transfers.
6. Google Analytics
The website uses Google Analytics 4 (GA4) to understand how the website is used and to analyse traffic.
The measurement ID used is:
G-CPR1LZQBWR
Google Analytics is implemented through Google Consent Mode.
Before the visitor gives their consent for analytics measurement, analytics storage is set to denied. In this state, Google Analytics does not read or write Analytics cookies associated with analytics storage. However, the operation of Consent Mode may allow certain signals to be sent without cookies ("cookieless pings") for measurement and modelling purposes.
When the visitor accepts the use of Analytics, analytics storage changes to granted, allowing the use of the storage technologies necessary for measurement.
When the visitor rejects it, analytics storage remains at denied.
Palmira Studio does not deliberately send to Google Analytics the data entered in the contact form, including name, email address or company.
Google provides specific information about data processing and the transfers associated with Google Analytics.
7. Storage on the device
The website uses certain local storage technologies for the website's own functionality.
These include:
palmira_consent_v1— stores the visitor's choice regarding Analytics consent;palmira-language— stores the language preference selected by the visitor;palmira-hero-sound— stores, for the duration of the browser session, the preference relating to the sound of the videos on the FLOR and VOW pages.
These mechanisms are different from cookies and are used for the website's own functionality.
The current code does not define an expiration period for values stored in localStorage. The sound preference uses sessionStorage and lasts for the duration of the browser session.
8. Data retention
Data submitted through the contact form is retained only for the period necessary to manage the contact, respond to the request and, where applicable, follow up on a professional relationship.
Where legal obligations require certain data to be retained for a specific period, that data may be retained for the period required by law.
With regard to the Resend service, the retention periods applicable to the service can be found in Resend's own documentation. Resend currently states a retention period of 30 days for email data and logs on the Free, Pro and Scale plans, while backups are kept for 7 days.
9. Data subject rights
Under applicable legislation, the data subject may, where applicable, exercise rights relating to their personal data, including:
- the right of access;
- the right to rectification;
- the right to erasure;
- the right to restriction of processing;
- the right to object;
- the right to data portability;
- the right to withdraw consent where processing is based on consent.
To exercise these rights, you may contact:
Additional information may be requested to confirm the identity of the requester, where necessary.
The GDPR establishes that data subject requests must be handled without undue delay and, as a rule, within one month at most.
10. Complaints
Without prejudice to any other administrative or judicial remedy, the data subject has the right to lodge a complaint with the supervisory authority responsible for data protection.
In Portugal, the supervisory authority is the:
National Data Protection Commission (Comissão Nacional de Proteção de Dados — CNPD)
11. Security
Palmira Studio seeks to implement appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, disclosure or destruction.
Despite the measures adopted, no transmission or storage of information over the Internet can be guaranteed to be absolutely secure.
12. Changes to this policy
This Privacy Policy may be updated whenever necessary to reflect changes to the website, the services used or applicable legal obligations.
The most recent version will always be available on this page, with an indication of the respective update date.
Contact
Palmira Studio
Rita Alexandra Mateus Garcia
Portugal
contact@palmira-studio.com