Privacy policy

Who we are

This site is run by a sole trader (empresário em nome individual) based in Portugal, who is the controller of personal data under the General Data Protection Regulation (GDPR). The controller’s full identification is given in the terms and conditions. The lead supervisory authority is the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD).

In short

• There are no accounts, payments, forms or newsletters: we don’t ask you for any personal data.
• We use no cookies, no analytics, no advertising and no tracking of any kind.
• Searching and looking up parcels on the map happen in your browser: what you type in the search box and the parcels you click are not sent to us.
• As with any website, your IP address passes through the servers that deliver the pages and the map (see below).

What data is processed, why, and on what legal basis

Technical access data. When you open a page or move the map, your browser requests files from our servers. These requests necessarily include your IP address, the address of the page or map section requested, the date and time, and your browser type. They are used to deliver the site, keep it secure (for example against attacks) and fix errors. The legal basis is our legitimate interest in providing a website that works and is secure (GDPR art. 6(1)(f)). We don’t use this data to identify you or to build profiles.

Shared links. If you share a link to a parcel, the address contains that parcel’s identifier and the map position. That link exists only because you created and shared it; we don’t store it.

Cookies and browser storage

This site stores no cookies of its own or other data in your browser. That is why we show no cookie banner. The details, including the security cookies Cloudflare may set, are in the cookie policy.

Who data is shared with

We don’t sell, rent or trade personal data, and we don’t use it for advertising. Technical requests reach the following parties:

• Cloudflare, Inc. — hosting of the site and the maps, content delivery and protection against attacks. Cloudflare acts as our processor, on our behalf.
• Third-party map services, which your browser contacts directly when you use the map. They receive your IP address and the map area you are viewing, and process this data under their own privacy policies:
  • Direção-Geral do Território (Portugal) — 30 cm orthophoto, when zoomed in;
  • EOX IT Services GmbH (Austria) — Sentinel-2 satellite imagery, when zoomed out;
  • GitHub, Inc. (Protomaps) — fonts for the map labels.

International transfers

Cloudflare and GitHub are headquartered in the United States. Transfers rely on the European Commission’s Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.

How long

Cloudflare’s technical logs are kept for a short time — hours to a few days — and then deleted automatically. We keep no other personal data.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, portability and objection. As we keep no data that identifies you, in practice there is little or nothing these requests could apply to, but we will answer any request within 30 days. You also have the right to lodge a complaint with the CNPD.

Children

This site is not directed at children.

Security

The whole site is served over HTTPS (an encrypted connection).

Changes

We will update this policy when the site changes — for example when paid reports, accounts or e-mail reminders are added, which involve processing other data. The date at the top of the page shows the version in force.

Contact

For privacy questions, write to:

info@aceiro.pt