Privacy Policy
eluis.pt respects visitor privacy and handles personal data in a transparent, limited, and appropriate way for professional contact purposes.
Data controller
The data controller is Emanuel José Vargas Luís (Emanuel Luís), sole trader (empresário em nome individual), tax number (NIF) PT233800263, through the eluis.pt brand. Full identification details are under "Service provider" in the Terms of Use below.
Privacy contact: ola@eluis.pt
Data collected
Through the contact form, the following data may be collected:
The page path is included automatically so we can understand which content helped start the contact request. This does not use cookies or search parameters. The visit statistics also count the form submission and the page it was sent from, without the data you typed.
- Name
- Phone
- Project type
- Message
- Page path where the form was submitted
Technical data
The website may also process technical data required for operation and security, such as IP address, date and time of the request, browser, operating system, and server logs.
Name check
When you use the name check, the name you type and the country you choose are sent to DataForSEO (DataForSEO OÜ, Estonia) to get the first Google results, and to Anthropic (Anthropic, PBC, United States) to get the answer of an AI assistant with web search.
The website's server does not store the name or the results. The last result is kept only in the browser's session storage (sessionStorage), in that tab, so coming back to the page does not use another check, and it is deleted when the tab is closed. To apply the daily check limit, it keeps a counter per connection, identified by a one-way hash of the IP address and the date. Counters older than two days are deleted automatically at the next check.
Only check your own name or the name of someone who has authorised you, as the confirmation in the form asks.
Name Audit clients
When you request an audit, I process the data you send in the intake form (name and variations, city, profession, links to profiles and results) and the search results and AI answers I collect about that name. Purpose: delivering the service you ordered. Legal basis: performance of the contract. To collect the results, the name is searched in search engines and AI assistants (Google, Bing, ChatGPT, Gemini, Perplexity, Claude and DataForSEO). Retention: 12 months after the report is delivered, to compare with new measurements; then deleted. Invoices are kept for the legal period.
Purposes of processing
Personal data is processed to:
- Reply to contact requests
- Review quote or collaboration requests
- Follow up on communication initiated by the visitor
- Understand which page or content helped originate the contact request
- Run the name check requested by the visitor and apply the daily check limit
- Count visits and website use in aggregate, to improve the content
- Protect the website against abuse, spam, and misuse
- Improve the technical security and operation of the website
Legal basis
The processing of data submitted through the contact form is based on steps requested by the visitor before entering into a possible contract, or on the legitimate interest in replying to professional contact requests.
The processing of the name typed in the name check is based on the consent given in the form, where the visitor confirms they are checking their own name or the name of someone who has authorised them.
Visit statistics are based on the legitimate interest in understanding, in aggregate and without cookies, how the website is used.
The processing of technical security data is based on the legitimate interest in keeping the website safe, functional, and protected against abuse.
Data retention
Data submitted through the contact form is kept only for as long as needed to reply to the request and follow up on the communication.
When the contact does not result in a commercial or contractual relationship, the data will be deleted or archived within a maximum of 12 months after the last communication, unless a legal obligation or legitimate interest justifies a longer period.
Visit statistics are kept in Umami for 6 months.
Data sharing
Data is not sold and is not used for third party marketing.
Data may be processed by technical providers required for website hosting, email, security, and technical maintenance, limited to the purposes described on this page.
International transfers
The name check sends the name you type to Anthropic in the United States, and DataForSEO states in its privacy policy that it uses infrastructure providers in the United States. Umami stores the statistics in the European Union data region, but requests pass through Cloudflare and Vercel, and Umami lists other subprocessors in the United States. In those cases the safeguards in these providers' terms apply.
For the Name Audit, the name and its variations are searched in the services below, which process data outside the European Economic Area, mainly in the United States. The basis for each transfer is the one the provider states in its own privacy policy:
- Google (Search and Gemini; EU controller: Google Ireland Limited): EU-U.S. Data Privacy Framework (Google LLC), standard contractual clauses and adequacy decisions.
- Microsoft (Bing; Microsoft Ireland Operations Limited): EU-U.S. Data Privacy Framework (Microsoft Corporation), standard contractual clauses and adequacy decisions.
- OpenAI (ChatGPT; OpenAI Ireland Limited): adequacy decisions and standard contractual clauses.
- Perplexity (Perplexity AI, Inc.): standard contractual clauses.
- Anthropic (Claude; Anthropic Ireland, Limited): adequacy decisions and standard contractual clauses.
- DataForSEO (DataForSEO OÜ, Estonia): standard contractual clauses or adequacy decisions, for its processors outside the EU.
Your rights
Under applicable law, you may request:
- Access to your personal data
- Correction of inaccurate data
- Deletion of data
- Restriction of processing
- Objection to processing
- Data portability, where applicable
Exercising your rights
To exercise these rights, contact: ola@eluis.pt
Complaint
You also have the right to lodge a complaint with the Portuguese data protection authority, Comissão Nacional de Proteção de Dados.
Cookies and similar technologies
At this time, the website does not use marketing cookies or analytics cookies.
Strictly necessary technical mechanisms may be used for website operation, security, navigation, or language preference.
If analytics, advertising, or other technologies involving non essential cookies are added, this page must be updated and consent will be requested where required.
Visit statistics
The website uses Umami Cloud, in the European Union data region, to count visits, page views, where visits come from and clicks on some buttons, with technical data such as country (derived from the IP address), browser, operating system, device type and language. It uses no cookies, stores nothing on your device and does not identify visitors.
Names typed in the name check are not sent to the statistics. If your browser has Do Not Track turned on, nothing is recorded.
Security
eluis.pt applies appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration, or misuse.
Changes to this policy
This policy may be updated whenever necessary. The latest version will be available on this page.