HomeDestinationsItinerariesFood & WineBeachesTransportContact
Quiet stone archway and whitewashed wall in a historic Portuguese town

Home / Privacy Policy

Privacy Policy

What we collect, why we collect it, how long we keep it and how to make us delete it. Written to be read, not skimmed past.

Last updated: 12 January 2026 · Version: 3.1

1. Who we are

This website, lanternscleverpocket.lat, is published by Azulejo Media Publishing Lda. ("we", "us"), a company registered in Portugal under number 514 302 887, with its registered office at Rua da Bica de Duarte Belo 47, 1200-058 Lisboa, Portugal.

We are the data controller for personal data processed through this site. For any privacy matter, write to [email protected].

2. Our approach in one paragraph

We are a small independent magazine. We do not sell personal data, we do not run behavioural advertising, and we do not build profiles of readers. The only personal data we hold is what you deliberately send us — your name, email address and message — plus anonymised statistics about which pages are read.

3. What we collect and why

DataWhenPurposeLegal basisKept for
Name, email, message, travel monthYou submit the contact formTo answer your enquiryLegitimate interest (Art. 6(1)(f))24 months
Email addressYou tick the newsletter boxTo send the monthly dispatchConsent (Art. 6(1)(a))Until you unsubscribe
Consent choiceYou use the cookie bannerTo remember your preferenceLegal obligation (ePrivacy)12 months
Aggregated page views, referrer, approximate country, device typeYou browse, with analytics consentTo understand which guides are usefulConsent (Art. 6(1)(a))14 months
Server logs (truncated IP, timestamp, URL)Every requestSecurity, abuse prevention, fault diagnosisLegitimate interest30 days

We do not knowingly collect data from anyone under 16. We do not process special-category data, and we ask that you do not include health, religious or similar information in a contact message.

4. Cookies and similar technologies

The site sets a small number of cookies and uses your browser's local storage to remember your consent choice. Nothing beyond the strictly necessary is set until you make a choice in the banner. The full inventory, including names and durations, is in our Cookie Policy.

5. Who else sees your data

We use a short list of processors, each bound by a data-processing agreement:

  • Hosting and CDN — serving pages and storing server logs, within the EEA.
  • Email delivery — for replies and the newsletter, within the EEA.
  • Privacy-focused analytics — aggregated, cookieless where possible, EEA-hosted.
  • Google Fonts — fonts are requested from Google's servers when you load a page, which necessarily discloses your IP address to Google. If you prefer to avoid this, block third-party font loading in your browser.

We do not sell, rent or trade personal data. We disclose data to authorities only where legally compelled.

6. International transfers

Our processors are chosen to keep data inside the European Economic Area. Where a transfer outside the EEA is unavoidable, it is covered by the European Commission's Standard Contractual Clauses and a transfer impact assessment.

7. Your rights

Under the GDPR you may at any time:

  1. Access your data

    Request a copy of everything we hold about you, in a portable format.

  2. Correct it

    Have inaccurate or incomplete data amended.

  3. Erase it

    Ask us to delete it, where we have no overriding legal reason to keep it.

  4. Restrict or object

    Limit how we process it, or object to processing based on legitimate interest.

  5. Withdraw consent

    For the newsletter or analytics, at any time and without affecting past lawful processing.

  6. Complain

    To the Portuguese supervisory authority, the CNPD (Comissão Nacional de Proteção de Dados), or to the authority in your country of residence.

We respond to rights requests within 30 days and never charge for them.

8. Security

The site is served exclusively over HTTPS. Access to the contact inbox is limited to two editors and protected by two-factor authentication. Backups are encrypted at rest and retained for 30 days. In the unlikely event of a breach affecting your rights, we will notify the CNPD within 72 hours and inform you directly where required.

9. Links to other sites

Our guides link to railway operators, museums, restaurants and booking platforms. Once you follow such a link, their privacy policy applies, not ours. We have no control over and accept no responsibility for third-party data practices.

10. Changes to this policy

We update this policy when our processing changes. The version number and date at the top always reflect the current text, and material changes are announced in the newsletter and on the homepage for 30 days.

11. Contact

Azulejo Media Publishing Lda., Rua da Bica de Duarte Belo 47, 1200-058 Lisboa, Portugal.
Privacy enquiries: [email protected]
General: [email protected]