Who is responsible
Aleksandra Cherniaeva is the controller of personal data collected through ribbonform.pt, under the Ribbonform Objects name. For privacy questions or to exercise your rights, contact hello@ribbonform.pt.
The data we collect and why
When you submit a form, we collect your name and email, plus any optional details you provide: company, role, project type, required date and notes. We also store the page from which you sent the enquiry, including its URL parameters, to understand the piece or request it relates to. Please avoid including sensitive data or other people’s personal information in the notes or page address.
We use these details to reply, prepare quotations, follow up on sample requests and discuss projects. The legal basis is taking steps at your request before entering into a contract (GDPR Article 6(1)(b)), or, for general correspondence, our legitimate interest in responding to enquiries (Article 6(1)(f)). Optional fields are not required; without a name and email we cannot handle a request through the form.
Sending an enquiry does not subscribe you to marketing. We do not sell your details or use the forms for automated decisions or profiling.
Website operation and security
Hosting and security providers process technical data needed to deliver and protect the site, such as IP address, browser information, request time and requested address. The basis is our legitimate interest in keeping the site available and secure. Essential security and authentication cookies are used. The choice made in the cookie notice stays in this browser’s local storage.
Google Analytics and Meta Pixel are not installed. Verification of the site in Google Search Console does not install a visitor analytics cookie. See the cookie policy for names, purposes and durations.
Where data is processed
Enquiries are stored in the website database and can be accessed by the controller and authorised administrators to follow up on your request. Hosting is provided through OpenAI Sites with Cloudflare infrastructure. Email services are involved when we correspond with you. Your enquiry details are not published on the website.
These providers’ operations may involve processing outside the European Economic Area, including in the United States. Contact us for information about the providers and safeguards applicable to a transfer. See also the OpenAI privacy policy and Cloudflare privacy policy.
How long data is kept
We keep enquiry details while needed to reply and follow up and, if an enquiry becomes a project, for as long as needed to carry out that project and meet legal obligations or establish legal claims. Enquiry deletion is managed manually; the form has no automatic time-based deletion. Contact us to request erasure or ask which retention criteria apply to your case. Retention of platform technical data depends on the provider; you can ask us for this information.
Your rights
Subject to the GDPR’s conditions, you can request access, correction, erasure, restriction and portability of your data, and object to processing based on legitimate interests. If processing relies on consent, you can withdraw it at any time without affecting the lawfulness of earlier processing. Send your request to hello@ribbonform.pt. We may ask only for the information needed to verify your identity. We normally respond within one month, subject to extensions permitted by the GDPR.
You can complain to Portugal’s Comissão Nacional de Proteção de Dados (CNPD) or the supervisory authority in the country of your habitual residence, place of work or alleged infringement.
European rules and updates
Read the General Data Protection Regulation (GDPR) and the European Commission’s explanation of your rights. This page will be updated if the website’s practices change; the date above identifies the published version.