do mal o menos
Architectural PhotographyAbout

Privacy Policy

Index

  • About Us (Data Controller)
  • Commitment to Privacy and Data Protection
  • Collecting and Processing Personal Data
  • Use and Purposes of Personal Data
  • Legal Basis for Processing
  • Data Retention
  • Cookies and Advertising Policy
  • Transfer of Personal Data to Third Parties
  • Third-Party Links and Social Media
  • Security of Your Personal Data
  • Security Incident Management
  • Your Rights as a Data Subject
  • Changes to this Privacy Policy
  • Contact Information

About Us (Data Controller)

do mal o menos – Architectural Photography, located at Rua Rodrigues Sampaio, 152, 1150-282 Lisbon, Portugal, acts as the Data Controller. We are responsible for managing the website www.domalomenos.com and the digital services and applications offered under the do mal o menos brand (collectively, the "Site and Services").

You may also access our official content and interact with us through our designated social media profiles on Instagram and Threads.

Commitment to Privacy and Data Protection

We are committed to protecting your privacy and securing your personal data in compliance with applicable data protection laws. This Policy outlines how we handle the personal information collected or transmitted when you use the Site and Services.

Collecting and Processing Personal Data

We collect personal data when you interact with the Site and Services, such as when you submit contact forms, log in to private areas, or subscribe to our newsletters. We process the following categories of information:

  • Contact & Identity Data: Your name, email address, phone number, NIF, and company/entity name.
  • Technical & Usage Data: Your IP address, browser type, domain name, access times, pages viewed, and referring website addresses.

Use and Purposes of Personal Data

We process your data only when necessary to provide the Site and Services securely. Specifically, we use your information for:

  • Service Delivery: To verify identity, configure private client pages, process transactions, issue invoices, and provide support.
  • Site Improvement & Security: To monitor usage, optimize content presentation, and maintain advanced security measures. We may use automated processing to analyze user preferences.
  • Communication & Marketing: To respond to inquiries, send essential service notifications, and — only with your explicit consent — send newsletters and promotional offers.

Our Commitment: We will never sell, rent, or trade your personal data. We only share data with trusted third-party processors or when strictly required by law.

Your Rights: You may update your personal information, adjust your communication preferences, or withdraw your marketing consent at any time by contacting us.

Legal Basis for Processing

We only process your personal data when we have a valid legal foundation to do so under applicable law. All processing is justified by one or more of the following bases:

  • Consent: You have given us explicit consent for a specific purpose (such as receiving newsletters).
  • Contractual Necessity: Processing is necessary to fulfill a contract with you, or to take necessary steps at your request prior to entering into a contract.
  • Legal Obligation: We must process your data to comply with statutory and regulatory obligations (such as Portuguese tax and accounting laws).
  • Legitimate Interests: Processing is necessary to pursue our legitimate business interests (such as securing the Site and Services, preventing fraud, or improving our offerings), provided these interests do not override your fundamental privacy rights.

Data Retention

We retain your personal data only for as long as your account is active or as necessary to fulfill the purposes outlined in this Policy.

If you close your account or request data deletion by contacting us, we will securely delete your personal data without undue delay. However, we may retain specific, strictly necessary information even after account closure if we are legally required to do so (such as for tax and accounting purposes) or to resolve disputes.

Cookies and Advertising Policy

How We Use Cookies

Cookies are small text files stored on your device that help us improve your browsing experience. We use cookies for two main purposes:

  • Essential Functions: To securely manage your login sessions for the private client areas and ensure the Site and Services operate properly.
  • Analytics & Performance: To analyze traffic and estimate usage levels, allowing us to continuously optimize our platform.

Managing Your Cookies

You have full control over your data. You can manage your preferences, accept, or reject non-essential cookies at any time using our cookie settings panel. You can also adjust your browser settings, though disabling essential cookies may impact functionality.

Advertising and Affiliate Links

We use tools like Google Analytics for traffic analysis and advertising, but we will only activate these tracking cookies if you provide explicit consent through our cookie banner. We may share aggregated data with advertising partners.

The Site and Services may also contain affiliate links that generate a small commission for us if you click them. However, our editorial content remains strictly independent and is never influenced by advertisers unless explicitly labeled as "Sponsored Content."

Transfer of Personal Data to Third Parties

Trusted Service Providers

To operate the Site and Services, we may share your information with subcontracted third-party service providers. We only work with trusted partners who implement robust technical and organizational security measures. These relationships are governed by strict contracts to ensure your data is treated in full compliance with applicable privacy laws.

International Data Transfers

Some of our third-party service providers may be located outside the European Economic Area (EEA). We may occasionally need to transfer your personal data to countries that have not yet been recognized by the European Commission as providing an adequate level of data protection. Whenever such international transfers occur, do mal o menos ensures they are conducted in strict compliance with the General Data Protection Regulation (GDPR), utilizing approved legal safeguards and contracts to guarantee your information remains secure.

Payment Processors

If you purchase paid services from us, your transaction will be handled by secure, third-party payment gateways (such as Visa, Mastercard, or PayPal). We only provide these entities with the strictly necessary data required to validate and complete your payment safely.

Third-Party Links and Social Media

The Site and Services may include links to external websites and integrated social media features. These third-party entities may collect your IP address, track the pages you visit, and set cookies to enable their functionalities. Your interactions with these external platforms are governed entirely by their respective privacy policies, not by do mal o menos.

Security of Your Personal Data

Our Security Measures

do mal o menos implements robust technical and organizational measures to protect your personal data both online and offline. We continuously assess the risks associated with data processing to ensure our security practices meet modern industry standards and legal requirements.

Data Encryption

Whenever sensitive personal information is collected or transmitted through the Site and Services, it is protected using industry-standard encryption, such as the Secure Sockets Layer (SSL) protocol. This ensures your privacy and significantly reduces the risk of unauthorized data interception over the Internet.

Your Responsibility

Data security is a shared effort. As a user, you are strictly responsible for keeping your login credentials and access codes confidential. Additionally, you must ensure that the devices you use to access the Site and Services are adequately protected according to best practices, including using updated operating systems and antivirus software.

Security Incident Management

We continuously monitor our systems using advanced threat detection technologies to identify and mitigate potential security risks. In the unfortunate event of a privacy incident or personal data breach, we will act immediately to secure your data and will fulfill all notification obligations required by the GDPR without undue delay.

Your Rights as a Data Subject

Under the General Data Protection Regulation (GDPR) and applicable Portuguese data protection laws, you have the following rights regarding your personal data:

  • Access & Portability: To request a copy of the personal data we hold about you, or to request that we transfer it to another service provider.
  • Rectification: To correct or update any inaccurate or incomplete personal information.
  • Erasure (Right to be Forgotten): To request the deletion of your personal data when it is no longer necessary for the purposes for which it was collected.
  • Restriction & Objection: To limit how we process your data, or to object to our processing entirely (including objection to automated decision-making or profiling).
  • Withdrawal of Consent: To withdraw your consent for data processing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

How to Exercise Your Rights

You may exercise any of these rights by contacting us directly. We will make every reasonable effort to comply with your request without undue delay. Please note that we may refuse to comply with requests that are manifestly unfounded or excessive, particularly if they are repetitive.

Right to Complain

If you believe your privacy rights have been violated, you have the right to lodge a complaint with the Portuguese national supervisory authority:

Comissão Nacional de Proteção de Dados (CNPD)

Rua de São Bento, nº 148, 3º, 1200-821 Lisbon, Portugal

Changes to this Privacy Policy

We may review and update this Policy over time to reflect changes in our practices or legal requirements. We encourage you to consult this page whenever you provide personal data to do mal o menos.

If we make significant changes — particularly regarding how we process your data — we will provide a clear notice through our standard communication channels, such as a website notification or email. Your continued use of the Site and Services after these changes are posted constitutes your acceptance of the updated Policy. If you do not agree with any revisions, please discontinue your use of the Site and Services and do not submit further personal data to us.

Contact Information

To exercise your data protection rights or to ask any questions regarding your privacy and information security, please contact our Data Controller at mail@domalomenos.com

When contacting us, please provide your preferred method of response (email, telephone, or physical address).

Last update: 11 Jun 2026

© 2010–2026Terms of UsePrivacy PolicySite by nothing codes

This site uses cookies for analytics.
See our Privacy Policy.