Privacy Policy

1. Who We Are

VIVA Portugal is an independent publication operated by Adilson Cláudio Jorge Sonhi, based in Portugal. Adilson Cláudio Jorge Sonhi is the data controller responsible for the personal data described in this Privacy Policy. If you have any question about your personal data, you can reach us using the details in the Contact section below.

2. Information We Collect

Information you provide

• Account data - your email address and a display name when you create an account or sign in with Google. Your profile may optionally include an avatar and a short bio.
• Comments - the text of the comments you post on articles, linked to your account.
• Newsletter - your email address and language preference when you subscribe.
• Saved articles - the articles you bookmark while signed in, linked to your account.

Information collected automatically

• Usage and device information - when you allow analytics cookies, Google Analytics collects information such as pages viewed, approximate location (country/region), and device and browser type. Before you give consent, Google Analytics runs in a cookieless mode that only sends aggregated signals and does not store identifiers on your device.
• Performance data - Vercel Web Analytics and Vercel Speed Insights collect aggregated, cookieless traffic and performance measurements.

We do not operate a contact form that stores messages; our Contact page provides email addresses you can write to directly.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and keep you signed in
• Publish and moderate the comments you submit
• Let you save and manage bookmarked articles
• Send the newsletter you subscribed to and let you unsubscribe
• Understand how the Site is used, when you consent to analytics, so we can improve content and performance
• Keep the Site secure and prevent abuse
• Comply with legal obligations

4. Legal Bases for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Performance of a requested service - creating and running your account, publishing your comments, and saving your bookmarks
• Consent - sending the newsletter and setting analytics cookies
• Legitimate interests - keeping the Site secure, preventing abuse, and basic aggregated measurement, balanced against your rights
• Legal obligation - where we must keep or disclose data to comply with the law

You can withdraw consent at any time (see “Your Rights” and “Account and Newsletter Choices”).

5. Cookies and Analytics

We use a small number of cookies to run the Site and, only with your consent, to measure how it is used. Non-essential cookies (such as Google Analytics) stay off until you accept them. We use Google Consent Mode, which keeps analytics storage denied by default; while denied, Google Analytics receives only aggregated, cookieless signals. Vercel Web Analytics and Vercel Speed Insights are cookieless and used for aggregated measurement.

For the full list of cookies, their purpose and duration, see our Cookie Policy.

6. Service Providers

We rely on a small number of trusted providers that process data on our behalf or as needed to deliver their service:

• Supabase - database, authentication, and file storage
• Vercel - hosting, Web Analytics, and Speed Insights
• Google - Google sign-in (OAuth) and Google Analytics
• Resend - sending newsletter and account-related emails

7. Data Sharing

We do not sell your personal data. We share data only with the service providers listed above, and where required by law or to protect our legal rights.

8. International Transfers

Some of our service providers may process data outside your country or the European Economic Area (EEA). Where that happens, we rely on the appropriate safeguards required by applicable law.

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy, to comply with legal obligations, resolve disputes, and maintain security. In practice:

• Account data - kept while your account exists and removed when you delete your account
• Comments - kept while your account and the related article exist
• Newsletter subscription - kept until you unsubscribe
• Saved articles - kept until you remove them or delete your account

10. Your Rights

Under the GDPR, you may have the right to:

• Access your personal data and obtain a copy
• Rectify inaccurate or incomplete data
• Erase your personal data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent for consent-based processing

You can exercise some of these directly on the Site (see the next section). For any other request, contact us using the details below.

11. Account and Newsletter Choices

• Account - you can update your display name and delete your account from your account settings. Deleting your account removes your associated personal data, subject to any legal retention requirements.
• Newsletter - you can unsubscribe at any time from your account settings or through the unsubscribe mechanism provided.
• Analytics and advertising consent- you can change or withdraw your consent at any time using the “Cookie preferences” link in the site footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

12. Advertising

The Site includes the technical groundwork for Google AdSense (such as an ads.txt file and a publisher ID), but the AdSense loader is currently disabled. We are not loading AdSense advertising technologies, and no advertisements are served through this integration at this time. If advertising is enabled in the future, we will update this policy and the consent controls accordingly.

13. Children’s Privacy

The Site is not directed at children. We do not knowingly collect personal data from children, and we do not carry out age verification. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Security

We use appropriate technical and organisational measures to protect personal data, including encryption in transit (TLS) and the authentication and access controls provided by our infrastructure providers.

15. Changes to This Policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top indicates the most recent revision.

16. Contact

If you have questions about this Privacy Policy or your personal data, contact us at hello@vivaportugal.blog.