Privacy Policy
Last updated: 5 November 2026
This policy explains how Cruz Geoscience handles personal data received through cruzgeoscience.com and through direct contact by email or phone. It is written to meet the requirements of the EU General Data Protection Regulation (GDPR) and Portuguese data protection law.
Who is responsible for your data
The data controller is João da Cruz Correia, trading as Cruz Geoscience, based in Lisbon, Portugal. For any question about this policy or your personal data, write to joao.correia@cruzgeoscience.com.
What data we collect
This website has no contact forms, no user accounts and no analytics or advertising tools. We only receive personal data when you choose to contact us, typically your name, email address, phone number, company and the project information you decide to share.
When you visit the site, our hosting provider automatically records standard technical server logs, such as your IP address, browser type and the pages requested, for security and to keep the site running.
Why we use it and on what legal basis
We use the information you send us to reply to your enquiry, prepare proposals and deliver contracted services. The legal basis is taking steps at your request before entering into a contract, or performing a contract (GDPR Article 6(1)(b)). Server logs are processed on the basis of our legitimate interest in operating a secure website (Article 6(1)(f)). We do not use your data for automated decision making or profiling, and we never sell it.
Who we share it with
We share personal data only with service providers that are needed to run the business, namely our website hosting provider (GoDaddy) and our email provider, and with professional advisers such as our accountant where required by law. Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.
How long we keep it
Enquiries that do not lead to a project are deleted within 24 months of our last contact. Data relating to clients and contracts is kept for as long as the relationship lasts and afterwards for the period required by Portuguese tax and accounting law, currently 10 years for invoicing records. Server logs are kept by the hosting provider for a limited period in line with its own policy.
Cookies
This website does not set cookies and does not use tracking technologies. All fonts and files are served from our own hosting, so no third-party services are contacted when you browse the site.
Your rights
You have the right to access, correct or delete your personal data, to restrict or object to its processing, and to receive a copy of the data you provided in a portable format. To exercise any of these rights, email joao.correia@cruzgeoscience.com and we will reply within 1 month.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
Security
The site is served over an encrypted HTTPS connection, and access to email and business records is protected by individual credentials. Project data received from clients is handled under the confidentiality terms agreed for each engagement.
Changes to this policy
We may update this policy, for example when the business structure changes. The date at the top always shows the latest version.