Privacy Policy

1. Introduction

Welcome to Asian In Portugal ("we," "our," or "us"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679 — and Portuguese data protection laws.

This Privacy Policy explains how we collect, use, store, and protect your personal information when you visit our website at asianinportugal.com (the "Website").

2. Data Controller

The data controller responsible for your personal data is:

3. What Data We Collect

We may collect and process the following categories of personal data:

3.1 Information You Provide

• Contact Form Data: When you use our contact form, we collect your name, email address, and the content of your message.
• Community Participation: If you join our Facebook community through links on our site, any data shared there is governed by Facebook's privacy policy.

3.2 Automatically Collected Data

• Usage Data: Pages visited, time spent on pages, referring URLs, browser type, device information, and IP address.
• Cookies and Tracking Technologies: We use cookies and similar technologies as described in our Cookie Policy.

3.3 Third-Party Data

• Google Analytics: Anonymous usage statistics and demographics data.
• Google AdSense: Advertising-related data for serving relevant ads.

4. How We Use Your Data

We process your personal data for the following purposes:

• To respond to your inquiries and provide support via the contact form.
• To improve our website content, functionality, and user experience.
• To analyze website traffic and usage patterns through Google Analytics.
• To display relevant advertisements through Google AdSense.
• To comply with legal obligations under Portuguese and EU law.
• To protect our legitimate interests, including website security and fraud prevention.

5. Legal Basis for Processing

Under the GDPR, we rely on the following legal bases to process your personal data:

• Consent (Art. 6(1)(a)): For non-essential cookies, analytics, and advertising. You can withdraw consent at any time via the "Privacy & Cookie Settings" link in our footer.
• Legitimate Interest (Art. 6(1)(f)): For website security, fraud prevention, and improving our services.
• Contract Performance (Art. 6(1)(b)): To respond to your contact form submissions.
• Legal Obligation (Art. 6(1)(c)): To comply with applicable laws and regulations.

6. Third-Party Services

6.1 Google Analytics

We use Google Analytics to understand how visitors interact with our website. Google Analytics collects data such as pages visited, session duration, and approximate geographic location. This data is anonymized and aggregated. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.

6.2 Google AdSense

We use Google AdSense to display advertisements on our website. Google AdSense may use cookies and web beacons to serve ads based on your prior visits to our website or other websites. You can opt out of personalized advertising by visiting Google Ads Settings.

6.3 Google Tag Manager

We use Google Tag Manager (GTM) to manage and deploy marketing and analytics tags on our website. GTM itself does not collect personal data, but it facilitates the loading of other scripts (such as Google Analytics and Google AdSense) that may collect data as described above.

6.4 Facebook

Our website contains links to our Facebook community group. When you interact with these links, Facebook may collect data according to their own privacy policy.

7. Cookies and Consent Management

Our website uses cookies to enhance your browsing experience, analyze site traffic, and serve advertisements. We use Google's Consent Management Platform (CMP) under Google Consent Mode v2 to collect and manage your consent preferences. All non-essential cookies are denied by default until you provide consent through the CMP dialog. You can change your preferences at any time via the "Privacy & Cookie Settings" link in our footer. For detailed information about the cookies we use, please refer to our Cookie Policy.

8. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

• Right of Access (Art. 15): You have the right to request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You can request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You can request the deletion of your personal data ("right to be forgotten"), subject to legal obligations.
• Right to Restriction of Processing (Art. 18): You can request that we limit the processing of your data in certain circumstances.
• Right to Data Portability (Art. 20): You can request a machine-readable copy of the data you have provided to us.
• Right to Object (Art. 21): You can object to processing based on legitimate interests, including profiling and direct marketing.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at hello@asianinportugal.com. We will respond to your request within 30 days.

9. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained for up to 12 months, then deleted.
• Analytics data: Retained for up to 26 months (as configured in Google Analytics).
• Cookie consent preferences: Managed by Google's Consent Management Platform; retained for up to 13 months.
• Server logs: Retained for up to 90 days.

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include SSL/TLS encryption, secure hosting, and access controls.

11. International Data Transfers

Some of our third-party service providers (such as Google) may process data outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

12. Children's Privacy

Our website is not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us and we will promptly delete it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy, wish to exercise your data protection rights, or have a complaint, please contact us:

You also have the right to lodge a complaint with the Portuguese Data Protection Authority (Comissão Nacional de Proteção de Dados — CNPD) at www.cnpd.pt.