Privacy & cookies

Updated: 12 September 2026

Controller and contact

Ricardo Serodio, based in Portugal, is the controller for this website. For privacy enquiries and to exercise your rights, contact [email protected].

Browsing data

This is a professional portfolio with public career information and links to projects and credentials. There are no visitor accounts, contact forms, subscriptions or purchases on this website. The contact button opens your email application; it does not send data automatically.

Cloudflare provides hosting, page delivery and security. Browser requests involve technical data such as IP address, requested URL, date and time, browser information and security signals. Our legal basis is our legitimate interest in providing and protecting this website, under Article 6(1)(f) GDPR.

We do not maintain a visitor database or export routine browsing logs. Technical records are retained only as needed for delivery, fault diagnosis and security, within the settings and obligations of the services involved. Records concerning a specific incident may be kept until it and any associated legal obligations are resolved.

Cookies and device storage

The current website code does not install advertising or audience-measurement cookies, tracking pixels, or identifiers in localStorage or sessionStorage. Page resources are hosted with the website. There are no automatically loaded third-party players.

Cloudflare may use strictly necessary protection mechanisms, including security cookies when an access challenge is required. See Cloudflare's security-cookie information. Browser settings let you manage cookies; blocking necessary mechanisms may affect access. If optional technologies are introduced, this notice and any required consent controls will be updated before activation.

Correspondence

If you contact us, we process your email address, name if provided, message and necessary correspondence to respond. Please avoid sending sensitive data or identity documents unless necessary. Any verification requested will be proportionate.

General correspondence is handled on the basis of our legitimate interest in responding. Data-rights requests are handled to comply with legal obligations (Article 6(1)(c) GDPR). Our retention policy is to remove routine correspondence within 12 months after the matter closes. A limited record may be retained longer where a legal obligation or actual dispute justifies it. Privacy enquiries are not used for marketing.

Providers and international processing

Privacy emails are forwarded by Cloudflare to the controller's Microsoft-hosted mailbox. These providers process the information necessary to deliver and store messages and operate their services. We do not sell personal data.

Providers operate internationally, so processing can take place outside the European Economic Area. Depending on the service and provider's role, applicable safeguards include adequacy decisions and contractual safeguards such as standard contractual clauses. See Cloudflare's data-processing terms, Cloudflare's privacy notice and Microsoft's privacy statement. Contact us for information about safeguards relevant to your request.

External links

Opening an external link takes you to another service, which may process data, use cookies or request information under its own terms. Links do not automatically load embedded third-party services on this website.

Your rights

Subject to the GDPR's conditions, you may request access, rectification, erasure, restriction or portability, and object to processing based on legitimate interests. We do not make automated decisions with legal or similarly significant effects about visitors.

Send requests to [email protected]. We normally respond within one month. If complexity or the number of requests justifies a lawful extension, we will explain it within the first month. You can complain to Portugal's Comissão Nacional de Proteção de Dados (CNPD) or your local supervisory authority.