Template text: must be reviewed by a lawyer/DPO, especially the legal basis for processing phone numbers and comments.
1. Data controller
[Nome da entidade], based at [Morada], is the controller of the personal data described in this policy. Contact: [email protected].
2. Data we collect
- Searches: the number looked up and daily aggregated statistics.
- Comments and reports: text, rating, optional name or nickname.
- Technical data: a hashed version of the IP address, used only to prevent abuse; we do not store the IP in clear.
- Contact: name and email when you write to us.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the search and comments service | Legitimate interest |
| Preventing abuse, spam and fraud | Legitimate interest |
| Answering contact and removal requests | Legal obligation / legitimate interest |
| Statistics and advertising | Consent |
4. Cookies
We use strictly necessary cookies (for example, to remember your language and base country) and, with your consent, analytics and advertising cookies.
5. Retention
Comments are kept while relevant to the service or until a valid removal request. Technical logs are kept for a maximum of 12 months.
6. Sharing
We do not sell personal data. We may use processors (hosting, analytics, advertising) bound by contract and, where required by law, competent authorities.
7. Your rights
Under the GDPR you have the right of access, rectification, erasure, restriction, portability and objection. If a number belongs to you and you want the related content reviewed, use the removal request.
8. Security
We apply appropriate technical and organisational measures, including encryption in transit and access control.
9. Contact and complaints
To exercise your rights write to [email protected]. You may also lodge a complaint with your data protection authority.