Privacy Notice

Last Updated: Oct 5, 2026

This Privacy Notice explains how Flamingo Ponderado - Unipessoal LDA ("we", "us", or "our") collects, uses, and protects your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese laws.

1. Data Controller Contact Information

If you have any questions regarding your personal data, please contact us at:

• Company Name: Flamingo Ponderado - Unipessoal LDA
• Email: hello@flamingoponderado.com
• Registered Address: Rua Cardoso Avelino, Nº 21 S2 4700-212 Braga, Braga, Portugal

2. Purposes and Legal Bases for Processing

We process your personal data for the following purposes:

• Responding to Inquiries: To address questions or requests you submit to us. Such questions or requests imply your consent for us to use your names and addresses to write and deliver our reply. Moreover, our replies might contain your message as a whole, which might contain your personal data.
• Contractual Necessity: To fulfill our obligations under any contracts with you. When we deliver services to you, we might contact you.
• Legal Obligations: To comply with applicable laws and regulations. This includes following tax rules. This also includes following copyright rules. In many cases we are not allowed to remove or modify the names of the authors from copyrighted work.
• Legitimate Interests: To establish, exercise, or defend legal claims. This includes asking you to fulfill your contractual obligations. We might ask you to pay, to provide services, to give things according to contracts. In these cases, we might use your personal data to create the content of the message and to deliver the message to you. Moreover, we might use your personal data in extra-judicial or judicial processes for legitimate interests.

3. Categories of Personal Data Collected

We collect personal data through emails and their attachments, letters, envelopes, packages, bank transfers we receive from you, which may include:

• Full Name
• Title and Affiliation
• Email Address
• Addresses
• Phone Numbers
• Banking Details
• Tax ID (including for example VAT number)
• Licenses
• Professional Insurance Policy
• Any additional information you voluntarily provide

We also collect personal data as part of program code we receive. Such program code might contain your personal data because you are mentioned as an author or a contributor of the program code, or because you appear as an author or an editor of cited literature, or for other reasons.

This website does not collect personal data. This website does not record your IP address. This website does not use cookies. This website does not use javascripts. If this website starts collecting personal data in the future, we will update this policy and obtain consent where required.

4. Data Sharing

Your personal data may be shared with:

• Email and calendar provider: To faciliate our communication with you.
• Code Repository Services: To facilitate development and distribute of program code. Such program code might contain your personal data because you are mentioned as an author or a contributor of the program code, or you appear as an author or an editor of a cited literature, or for other reasons.
• Banks: To make a bank transfer to you if needed.
• Public Authorities: to respond to their requests, or to ask them to help us exercise our rights.

We ensure that any third parties with whom we share your personal data comply with GDPR requirements, with their Data Processing Agreements.

5. International Data Transfers

We might transfer and store your personal data in Switzerland. Our email and calendar provider is located in Switzerland. Transfers to Switzerland are governed by the EU–Switzerland adequacy decision.

If you are located outside European Economic Area, when we send you something electronically or physically, we send your personal data outside European Economic Area. In many cases, we are not aware whether your are located inside or outside European Economic Area.

If your email server might be located outside European Economic Area, when we send you an email, we might be sending our email containing your personal data to your email server located outside European Economic Area. In many cases, we are not aware whether your email server is located inside or outside European Economic Area.

When we obtain program code and its modification history under a license, we might distribute the program code globally under the conditions of the license. Such program code and its modification history might contain your name and email address.

6. Data Retention

We may retain your personal data contaiined in licensed program code as long as the license permits storage.

We may retain your personal data that appear in financial records for ten years to comply with our legal obligations.

We retain your personal data while you are our contract counterparty and there is still outstanding possible contractual obligations of any side.

We retain your personal data contained in your inquiries for a period of 14 months. This duration allows us to respond to your inquiries with renewed information.

7. Security Measures

We encrypt our local storage. We employ two-factor-authentication on the remote services that we use.

We maintain an up-to-date, comprehensive list of our data storage. We periodically review the contents of our data storage.

8. Exercising Your Rights Under GDPR

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

• Access: Request access to your personal data.
• Rectification: Request correction of inaccurate or incomplete data.
• Erasure: Request deletion of your personal data under certain conditions.
• Restriction: Request restriction of processing under certain circumstances.
• Data Portability: Request to receive your personal data in a structured, commonly used format.
• Objection: Object to the processing of your personal data based on legitimate interests.

You can exercise these rights by contacting us through the following methods:

• Email: hello@flamingoponderado.com
• Postal Mail: Rua Cardoso Avelino, Nº 21 S2, 4700-212 Braga, Braga, Portugal

We may need to verify your identity before processing your request. For the verification, we might send you a randomly generated number to your contact on our file. We aim to respond to all requests within one month, in accordance with GDPR requirements. If your request is complex or if we receive numerous requests, we may extend this period by up to two additional months, and we will inform you accordingly.

9. Right to Withdraw Consent

If we process your personal data based on your consent, you have the right to withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing based on consent before its withdrawal.

10. Automated Decision-Making

We do not use automated decision-making or profiling in our data processing activities, except for email spam filters.

11. Lodging a Complaint

If you believe that your data protection rights have been violated, you have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados - CNPD).

You can submit a complaint through the CNPD's website: https://www.cnpd.pt.

12. Updates to the Privacy Notice

This privacy policy might get updated. The up-to-date privacy policy is available on our webpage. We recommend reviewing it periodically to stay informed.

13. External Links

Our website may contain links to other websites. We are not responsible for the content of websites that can be reached by following links on our website.