1. Scope and operator information
Reelpockscenegarden is an editorial website about Lisbon vintage art. The company profile in the footer is illustrative and is not evidence of a registered legal entity or an operational office. A verified controller identity, hosting provider and working contact mailbox must be confirmed by the operator before accepting personal correspondence in a live business context. The designated privacy and DPO-enquiry address is [email protected]; naming this address does not assert that a statutory Data Protection Officer has been appointed.
2. Information collected
You can read every guide without an account. The website has no checkout, newsletter subscription, tracking pixel or analytics library. Its script stores a cookie-preference record in your browser. That record contains a version, selection time and optional-category choices, not your name or email.
The contact form checks information locally and prepares a link for your email application. It does not submit a form to a server. Your name, email, subject and message remain in the current page until you choose to open the email link; your browser may independently offer autofill. If you send the email, your email provider and the recipient’s provider process its contents and ordinary message metadata.
3. Purposes and legal bases
Essential preference storage supports your requested privacy choice. Any future optional tracking would require an appropriate notice and, where required, prior consent; today no such tools are installed. Correspondence, if received by an operational mailbox, would be used to answer your request, address corrections or handle rights enquiries. Relevant GDPR bases may include legitimate interests in responding to ordinary enquiries, steps requested before a contract, or compliance with a legal obligation. Consent may be withdrawn where it is the applicable basis.
4. Hosting, processors and external links
Delivering a hosted page necessarily involves network information such as an IP address. A deployment host may retain security or access logs under its own configuration. This build does not identify a selected hosting or email processor, so it cannot truthfully specify their log retention or processing locations. The operator must disclose these details when configured. Where international transfers require safeguards, those must be established rather than assumed.
Fonts use your device’s installed typefaces. Styles, scripts and schematic maps are supplied with the website. Homepage photographs load from images.unsplash.com. When your browser requests these images, the image provider receives your IP address and ordinary request information needed to deliver them. Each photograph uses a no-referrer policy to avoid sending this page’s address, but that does not conceal your IP address. Images may be cached by your browser. Image delivery is not controlled by the analytics or functional preference switches.
These photographs are external image files, not embedded galleries or an analytics library. We do not send contact-form contents or the locally stored consent record to the image provider. Its processing and retention are governed by its own practices; see Unsplash’s privacy policy. The operator should review this external delivery arrangement and applicable transfer requirements before deployment.
Maps remain static illustrations, not third-party embeds. Clicking an external map, tourism, photography or transport link takes you to a separate service with its own privacy practices. We do not control that service.
5. Retention and security
The preference record expires logically after 180 days and is replaced or removed when the site next checks it. You can clear it sooner through browser site-data controls. Contact fields are not deliberately stored by this website. For a configured correspondence service, the intended default is to delete ordinary enquiries within twelve months after resolution, unless a legal requirement or active dispute justifies longer retention. This is not a claim about an unconfigured mail server. Do not include identity documents, payment details or sensitive personal information in ordinary enquiries.
6. Your GDPR and California rights
Where GDPR applies, you may request access, correction, erasure, restriction and portability, and object to qualifying processing. You may withdraw consent without affecting prior lawful processing. You can complain to Portugal’s Comissão Nacional de Proteção de Dados or another competent supervisory authority. Applicable response deadlines and proportionate identity checks apply.
Where the CCPA or CPRA applies to the operator, eligible California residents may request access, deletion and correction, and exercise applicable opt-out and sensitive-information rights without unlawful discrimination. This website does not sell personal information, share it for cross-context behavioural advertising or perform automated profiling. It does not require you to disable a Global Privacy Control signal to browse.
7. Children and changes
The site is intended for a general audience, not for collecting children’s information. A parent or guardian who believes a child has sent personal data should contact the privacy address. Material changes to processing require an updated policy and, where necessary, renewed consent. Read the cookie policy for the exact storage record and controls.