Privacy Policy

Last updated on November 11, 2025

1. Commitment to Privacy

Last updated on 11 October 2025

The protection of your privacy is fundamental. In this policy, we explain how we collect, use, store, and protect your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and applicable Portuguese legislation.

The website castrosbarroso.com is managed by Era Arqueologia S.A., the entity responsible for processing personal data.

1. DATA CONTROLLER

Entity: Era Arqueologia S.A.

HeadQuarters: Calçada de Santa Catarina, 9-C, 1495-705 Cruz Quebrada-Dafundo, Portugal

Email: rgpd@era-arqueologia.pt

Website: castrosbarroso.com

Era Arqueologia S.A. determines the purposes and means of processing the personal data collected on this website.

2. PERSONAL DATA COLLECTED

The following information may be collected through the website:

  • Contact form: name, email, telephone number, and message.
  • Technical data: IP address, browser type, device, pages visited and time spent on the site (via cookies).
  • Cookie preferences: consent recorded via Cookiebot.

No sensitive data (ethnic origin, religion, health, etc.) is collected.

3. PURPOSES OF PROCESSING

The personal data collected is processed for the following purposes:

  1. Contact request management – responding to messages sent via the form.
  2. Technical management of the website – ensuring security, performance, and compatibility.
  3. Statistical analysis – measuring website traffic and usage anonymously.
  4. Compliance with legal obligations – when required by law or competent authority.

4. LEGAL BASIS FOR PROCESSING

The treatment is based on:

  • Consent – for non-essential cookies (statistical and marketing).
  • Execution of pre-contractual procedures – response to requests via contact form.
  • Legitimate interest – ensuring the security and functioning of the website.
  • Legal obligation – compliance with applicable legal standards.

5. DATA RETENTION

  • Contact form: kept only for the time necessary to respond to the request and follow up on it.
  • Cookies: stored for the period defined in each category in Cookiebot.
  • Technical navigation data: stored for limited periods for security and statistical purposes.

6. SHARING AND SUBCONTRACTING

Personal data is not sold or transferred to third parties..

However, they may be processed by service providers contracted by Era Arqueologia S.A. (e.g., web hosting, technical maintenance), who act only under instructions and with adequate security guarantees.

7. INTERNATIONAL TRANSFERS

Some third-party services (such as Google Analytics) may involve data transfers outside the European Union. These transfers comply with GDPR rules through:

  • European Commission adequacy decisions.
  • Standard contractual clauses approved by the EU.
  • Recognised certifications, such as the EU-US Data Privacy Framework.

8. RIGHTS OF DATA SUBJECTS

The user may, at any time, exercise the following rights:

  • Access – knowing what data is being processed.
  • Rectification – correcting incorrect or incomplete data.
  • Erasure – request the deletion of data (‘right to be forgotten’).
  • Limitation – restricting processing in certain situations.
  • Objection – contesting processing for specific purposes.
  • Portability – receive data in a structured format and transfer it to another controller.
  • Withdrawal of consent – withdraw consent at any time, without affecting the lawfulness of previous processing.

These rights may be exercised through the email: rgpd@era-arqueologia.pt

9. DATA SECURITY

Era Arqueologia S.A. implements appropriate technical and organisational measures to protect personal data against:

  • Unauthorised access.
  • Accidental alteration or loss.
  • Improper disclosure.
  • Unauthorised or illegal treatment.

This includes the use of secure connections (HTTPS), access controls, monitoring, and internal data protection policies.

10. COOKIES

The processing of data related to cookies is detailed in the Cookie Policy, which forms an integral part of this Privacy Policy.

11. MINORS

The website is not intended for children under the age of 16. If data from minors is collected without parental consent, it will be deleted as soon as it is detected.

12. POLICY CHANGES

This Policy may be updated to reflect legal, technological, or organisational changes. We recommend that you consult this page regularly. Relevant changes will be communicated on the website.

13. CONTROL AUTHORITY

If you believe that your data is being processed incorrectly, you have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

14. CONTACTS

For any questions regarding the processing of personal data:

Era Arqueologia S.A.

Calçada de Santa Catarina, 9-C

1495-705 Cruz Quebrada-Dafundo, Portugal

Email: rgpd@era-arqueologia.pt