This page explains what personal data passes through the Muche website, who handles it, why, and what you can do about it. The short answer: very little. The site has no forms, no user accounts, no traffic analytics and no advertising, and when you open a page your browser talks only to the site itself.
Who is responsible
The controller of your personal data is:
Muche, LDA.
NIPC 516400479
Rua do Cruzeiro, Ed. D. Afonso, Bl. 1, 2.º esquerdo
5400-213 Chaves, Portugal
conteudos@muche.pt
If you have any question about this page or about your data, write to us at that email address or by post to the address above.
This policy applies to the muche.pt website. The Digital Hub (hub.muche.pt) is a separate service and is not covered by it.
What happens when you open the site
Server logs
The site is hosted on Cloudflare (Cloudflare Pages). Whenever you open a page, Cloudflare's servers receive and record your IP address and the details of the request, such as the page you asked for, the date and time and the type of browser. They are used to keep the site running and to protect it from attacks and abuse.
- Legal basis: our legitimate interest in keeping the site secure and working (Article 6(1)(f) of the GDPR).
- Retention: these logs are kept by Cloudflare, and it is Cloudflare that decides for how long. We do not set that period.
When you write to us
The site has no forms: contact is by email. If you write to conteudos@muche.pt (or click an email address on the site), your message arrives in our mailbox, which is hosted on Google Workspace. We keep your email address and whatever you write to us, so that we can reply.
Nothing else happens to it. Messages do not go into a CRM, onto a mailing list or into a database: they stay in the mailbox.
- Legal basis: your request, when you write to ask for a proposal or a service (Article 6(1)(b) of the GDPR); in other cases, our legitimate interest in replying to people who write to us (point (f)).
- Retention: we keep messages for as long as the relationship justifies it, that is, while there is a conversation, a project or a legal obligation to meet. We have not set a period in days or years, because it depends on the case, and we would rather say so than make up a number. If you want us to delete a conversation, ask: we will delete it, unless the law requires us to keep something (invoicing documents, for example).
The Teentac preview
In the "Work" section, on the desktop version, the site shows an image of a laptop. There is a button that loads Teentac's live website inside it. Teentac is a client of ours, and that website is not ours.
Your browser contacts teentac.pt only after you click that button. When you do, teentac.pt receives your IP address and the usual details of a request, and may store its own cookies on your device. That no longer goes through us: it is handled by Teentac, under that website's own privacy policy. If you do not click the button, none of this happens. On phones and tablets there is no button: you only see the image.
- Legal basis: your consent, which you give by clicking the button (Article 6(1)(a) of the GDPR). You can withdraw it whenever you like: reload the page and Teentac's website is no longer open. Any cookies it has already stored can be cleared in your browser settings.
Cookies and browser storage
The site sets no cookies. It only stores the language you choose in your browser, and that stays with you. The details are in the cookie policy.
Automated decisions and profiling
We make no automated decisions about you and we do not profile you. There is no behavioural analysis, no targeted advertising and nothing like it.
Who receives your data
- Cloudflare, which hosts the site and therefore receives the server logs.
- Google, which provides Google Workspace, where email messages are kept. Google processes them on our behalf.
- Teentac, only if you click the preview button, and on its own account.
We do not sell data to anyone or pass it on for marketing.
Cloudflare and Google are US companies and use servers in several countries, so this data may be processed outside the European Economic Area. Each describes, in its own privacy policy, the safeguards it applies to those transfers: Cloudflare and Google.
Links to other sites
The site links to Facebook, Instagram, LinkedIn and the Digital Hub. These are ordinary links, with no buttons or embeds: your browser only contacts those sites if you click, and from then on their rules apply.
Your rights
Under the General Data Protection Regulation (GDPR), you can:
- find out whether we process data about you and obtain access to it;
- ask for incorrect data to be corrected;
- ask for your data to be erased;
- ask for processing to be restricted;
- object to processing that is based on our legitimate interest;
- receive your data in a common format, where that applies;
- withdraw your consent at any time, without affecting anything done before you withdrew it.
To exercise any of these rights, write to conteudos@muche.pt. We reply within one month. We may ask you to confirm who you are before we deal with the request. Server logs are kept by Cloudflare, so for those we may need to contact it.
If you think we are not handling your data properly, you have the right to lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal: www.cnpd.pt.
You are not required to give us any personal data in order to view the site. If you want us to reply by email, your address is unavoidable; the rest is whatever you choose to tell us.
Changes
When this page changes, the date at the top changes with it. If a change affects what we do with your data, we will say so clearly here and, where the law requires it, ask for your consent first.