This Privacy Policy explains how Lisboeta (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit lisboeta.news or subscribe to our newsletter. We are committed to complying with the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.

1. Data Controller

Lisboeta
Lisbon, Portugal
Email: privacy@lisboeta.news

2. What Data We Collect

2.1 Newsletter Subscription

When you subscribe to our newsletter, we collect:

• Email address — to send you the newsletters you selected.
• Subscription preferences — which newsletters you opted into (daily briefing, weekly recap).
• Confirmation timestamp — records when you confirmed your subscription (double opt-in).

2.2 Automatically Collected Data

• Analytics data — We use Vercel Analytics, a privacy-friendly, cookieless analytics service. It collects aggregated page view data (page URL, referrer, browser type) without setting cookies or tracking individual users.
• IP address — Temporarily processed for rate limiting on the newsletter signup form (to prevent abuse). IP addresses are not stored long-term or used for tracking.

2.3 Local Browser Storage

We store your recent search queries (up to 5) in your browser's localStorage for convenience. This data never leaves your device and is not transmitted to our servers.

3. Legal Bases for Processing

Under the GDPR, we process your data on the following legal bases:

• Consent (Art. 6(1)(a)) — Newsletter subscription. You provide explicit consent by entering your email and confirming via the double opt-in email. You may withdraw consent at any time by unsubscribing.
• Legitimate interest (Art. 6(1)(f)) — Rate limiting and anti-abuse measures to protect the service; aggregated analytics to understand site usage and improve the service.

4. Third-Party Service Providers

We use the following third-party services that may process data on our behalf:

These providers process data under data processing agreements and, where applicable, rely on EU Standard Contractual Clauses (SCCs) or the EU–US Data Privacy Framework for international transfers.

5. International Data Transfers

Some of our service providers are based in the United States. Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including EU Standard Contractual Clauses and the EU–US Data Privacy Framework, as applicable.

6. Data Retention

• Newsletter data — Retained for as long as your subscription is active. When you unsubscribe, your preferences are disabled. You may request full deletion of your record at any time.
• Rate limiting data — Automatically expires within hours and is not linked to any personal profile.
• Analytics data — Aggregated and anonymised; no individual-level data is retained.

7. Your Rights Under the GDPR

If you are in the European Economic Area, you have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Rectification — Request correction of inaccurate data.
• Erasure — Request deletion of your data (“right to be forgotten”).
• Restriction — Request that we limit how we process your data.
• Portability — Receive your data in a structured, machine-readable format.
• Objection — Object to processing based on legitimate interest.
• Withdraw consent — Withdraw your newsletter consent at any time by clicking “Unsubscribe” in any email or contacting us.

To exercise any of these rights, email us at privacy@lisboeta.news. We will respond within 30 days.

8. Right to Lodge a Complaint

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority:

Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt

9. Cookies

For details on cookies and similar technologies used on this site, please see our Cookie Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last updated” date. We encourage you to review this page periodically.

11. Contact

For any privacy-related questions or requests, contact us at privacy@lisboeta.news.