How I handle your data

Who is responsible for your data

I am Ana Nave and I work under the NAVE brand. I am responsible for deciding how and why personal data is processed on this website.

If you have any questions about this page or your data, you can contact me at ana@bynave.com.

What I collect and why

If you contact me through the website form, I receive the information you choose to provide: your name, email address, business or project, what needs to change and, if you wish, any date you have in mind.

I use this information only to respond to your enquiry, understand the context and prepare a possible conversation or proposal. The legal basis for this processing is taking pre-contractual steps at your request.

Your name and email address are necessary for me to reply. The remaining fields marked as optional may be left blank.

Your data is not sold, added to marketing lists or used to send you communications unrelated to your enquiry. If I ever want to contact you for another reason, I will ask for your permission first.

There is no automated decision-making or profiling.

Who else may have access to your data

To keep the website running and respond to enquiries, I use providers of hosting, technical infrastructure, security and email services.

These providers receive only the data needed to provide their respective services and process it in accordance with the applicable contractual terms and legal obligations.

Some of these services may involve the processing of data outside the European Economic Area. Where this happens, the transfer is based, as applicable, on an adequacy decision or legally recognised safeguards such as Standard Contractual Clauses.

You may ask for the identity of the providers I use and further information about the applicable safeguards by contacting ana@bynave.com.

How long I keep it

If an enquiry does not lead to a project, I keep the data for 24 months after our last contact. It is deleted once that period has ended.

If we work together, the data needed to carry out the project, manage the contractual relationship, issue invoices or meet legal obligations will be kept for the period applicable to each purpose.

You may ask for your data to be deleted before these periods end. I will respond without undue delay and within one month at the latest. If there is no legal obligation or other legitimate reason to keep the data, it will be deleted.

Cookies and tracking

I do not use cookies, traffic analytics, advertising pixels or tracking technologies.

The website stores only two preferences in your browser: the language you selected and whether you prefer paper or green mode. This information remains on your device, is not sent to me and disappears if you clear your browser data.

If you do not complete the form, I do not receive your contact details. As with any website, however, the server may process technical logs required for operation and security.

Technical logs

The server that makes the website available may record technical information relating to requests it receives, including the date and time, IP address, browser type and pages requested.

This data is processed on the basis of the legitimate interest in keeping the website available, secure and protected against errors, misuse or attacks. It is not used to analyse your behaviour or build a profile about you.

It is kept only for as long as necessary for operation, security and the investigation of possible incidents, in accordance with the criteria and retention periods applied by the technical services used.

Your rights

You may ask me to:

• provide access to the personal data I hold about you;
• correct inaccurate or incomplete data;
• delete data where there is no legal basis for keeping it;
• restrict how your data is processed;
• object to processing based on a legitimate interest;
• provide your data in a portable format where this right applies.

To exercise any of these rights, contact ana@bynave.com. I may ask for the information strictly necessary to confirm your identity and protect the data from unauthorised access.

I will respond without undue delay and within one month at the latest.

You may also lodge a complaint with the Portuguese Data Protection Authority, the CNPD, without contacting me first. If you prefer to speak to me beforehand, I will do my best to clarify or resolve the matter.