Cookie Policy
Last updated: 31 December 2025 Version: 3.1.0
1. General Information
This Cookie Policy explains how TrataMentes uses cookies and similar technologies on the website tratamentes.pt in accordance with:
- General Data Protection Regulation (GDPR)
- Portuguese Law nº 58/2019 (transposition of the ePrivacy Directive)
- CNPD Guidelines (Portuguese Data Protection Authority)
Data Controller
TrataMentes Email: privacy@tratamentes.pt Phone: +351 937 543 312
Data Protection Officer (DPO)
Email: privacy@tratamentes.pt
2. What Are Cookies
Cookies are small text files stored on your device (computer, tablet, phone) when you visit a website. They allow the site to recognise your device and remember certain information about your visit.
Types of Cookies by Duration
- Session Cookies: Deleted when you close your browser
- Persistent Cookies: Remain on your device for a set period
Types of Cookies by Origin
- First-Party Cookies: Set directly by TrataMentes
- Third-Party Cookies: Set by external providers (Google, Elfsight)
3. Cookies Used on TrataMentes
3.1 Essential Cookies (Required)
Legal Basis: Legitimate interest (GDPR Art. 6(1)(f))
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
tratamentes_cookie_consent | Store cookie preferences | 12 months | TrataMentes |
session_id | Maintain user session | Session | TrataMentes |
Purpose: Basic website functionality, navigation, forms and security. Cannot be disabled as they are necessary for basic operation.
3.2 Google Analytics (Optional)
Legal Basis: Consent (GDPR Art. 6(1)(a))
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
_ga | Unique user identification | 2 years | Google Ireland Limited |
_ga_* | Session identification | 2 years | Google Ireland Limited |
Purpose: Traffic analysis and website behaviour for improvements. Data Transfer: European Union (Google Ireland Limited) Anonymisation: IP automatically anonymised More information: Google Analytics Privacy
3.3 Google Maps (Optional)
Legal Basis: Consent (GDPR Art. 6(1)(a))
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
NID | Map personalisation | 6 months | Google Ireland Limited |
1P_JAR | Security analysis | 1 month | Google Ireland Limited |
Purpose: Display interactive maps of TrataMentes locations. Data Transfer: European Union (Google Ireland Limited) More information: Google Maps Privacy
3.4 Elfsight Testimonials (Optional)
Legal Basis: Consent (GDPR Art. 6(1)(a))
| Cookie | Purpose | Duration | Provider |
|---|---|---|---|
elfsight_* | Testimonials widget | Variable | Elfsight |
Purpose: Display dynamic testimonials from Google Reviews. Data Transfer: United States of America (Standard Contractual Clauses) More information: Elfsight Privacy Policy
3.5 Marketing Cookies (Currently Inactive)
Legal Basis: Consent (GDPR Art. 6(1)(a))
We currently do not use marketing or advertising cookies. If we implement Google Ads, Facebook Pixel or similar in the future, specific new consent will be requested.
4. Legal Basis for Processing
GDPR - Article 6
- Legitimate Interest (f): Essential cookies for operation
- Consent (a): All other optional cookies
Law nº 58/2019 - ePrivacy Directive
We comply with Portuguese legislation on cookies and privacy in electronic communications.
Minimum Age
In accordance with Portuguese legislation, this website is intended for users at least 13 years of age.
5. Your Rights
5.1 Consent Management
- Accept/Reject: You can choose which cookies to accept
- Change Preferences: Available in the site footer or via floating button
- Withdraw Consent: At any time, free of charge
5.2 GDPR Rights
- Access: Request a copy of your data
- Rectification: Correct incorrect data
- Erasure: “Right to be forgotten”
- Portability: Export your data
- Objection: Object to processing
- Restriction: Restrict processing
5.3 How to Exercise Rights
Email: privacy@tratamentes.pt Automatic Export: Available in cookie settings Response: Maximum 30 days as per GDPR
6. Managing Cookies in Your Browser
Disabling Cookies
You can disable cookies in your browser settings:
- Chrome: Settings → Privacy → Cookies
- Firefox: Preferences → Privacy → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy → Cookies
⚠️ Warning: Disabling essential cookies may affect website functionality.
Do Not Track
We respect “Do Not Track” signals from your browser when technically possible.
7. Data Retention
| Data Type | Retention Period |
|---|---|
| Cookie consent | 12 months |
| Audit logs | 3 years (CNPD compliance) |
| Google Analytics data | 18 months (anonymised) |
| Google Maps data | As per Google policy |
Automatic Cleanup
The system automatically cleans old data according to defined periods.
8. International Transfers
Google (Analytics/Maps)
- Recipient: Google Ireland Limited
- Country: Ireland (EU/EEA)
- Adequacy Decision: Applicable (EU)
Elfsight
- Recipient: Elfsight
- Country: United States of America
- Safeguards: Standard Contractual Clauses (SCC)
9. Security
Implemented Measures
- Encryption: Mandatory HTTPS
- Anonymisation: IPs automatically masked
- Limited Access: Authorised personnel only
- Audit: Access logs monitored
Security Incidents
In case of data breach, CNPD will be notified within 72 hours as per GDPR Art. 33.
10. Audit and Compliance
Audit System
- Automatic Logs: All actions are recorded
- Retention: 3 years for CNPD compliance
- Access: Available to competent authorities
Compliance Verification
- CNPD: Audit-ready
- GDPR: Continuous compliance
- Law 58/2019: Full compliance
11. Contacts and Complaints
Direct Contact
Email: privacy@tratamentes.pt Response: Maximum 30 days
Supervisory Authority
CNPD - Portuguese Data Protection Authority Website: www.cnpd.pt Email: geral@cnpd.pt Phone: +351 213 928 400
You have the right to lodge a complaint with CNPD if you believe your data processing is not compliant.
12. Changes to This Policy
Change Notification
- Minor Changes: Update of modification date
- Significant Changes: Notification via website banner
- New Categories: New consent request
Version History
- v3.1.0 (31/12/2025): Migration to Tailwind CSS, cookie system update
- v3.0.0 (15/01/2025): Enhanced GDPR 2025 compliance
- v2.0.0 (01/01/2024): Initial GDPR implementation
- v1.0.0 (15/06/2023): First version
13. Additional Information
Similar Technologies
This policy also applies to:
- Local Storage: Browser local storage
- Session Storage: Session storage
- Web Beacons: Tracking pixels
- Fingerprinting: Not used
International Compliance
- GDPR: European Union
- CCPA: California (if applicable)
- Portuguese Law: nº 58/2019
Executive Summary
✅ Essential Cookies: Always active (legitimate interest) 🔒 Optional Cookies: Only with your consent 📊 Purpose: Improve experience and features 🇵🇹 Compliance: GDPR + Portuguese Law nº 58/2019 📧 Contact: privacy@tratamentes.pt 🛡️ Rights: Access, rectification, erasure, portability ⏰ Retention: 12 months (consent), 3 years (audit) 🌍 Transfers: EU (Google), USA with safeguards (Elfsight)
This document complies with Portuguese and European legislation in force.
For specific questions about this policy, contact privacy@tratamentes.pt