← Back to the site

Privacy &
Cookie Policy

1. Who is responsible

The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR / RGPD) is:

Luisa Thiel
Rua do Arrabalde 30
2655-232 Ericeira, Portugal
NIF: 320959783
Email: info@luisa-thiel.com

No data protection officer has been appointed, as the conditions of Article 37 GDPR are not met.

2. The short version

This website sets no cookies. It uses no analytics and no tracking of any kind, and it loads no fonts, scripts, images or videos from third-party servers. Everything is delivered from our own web space.

If you only read the site, the sole personal data processed are the server log entries described in section 4. Beyond that, data is processed only if you write to us or sign up for the newsletter yourself.

3. Cookies and similar technologies

This website sets no cookies. It also does not use local storage, session storage, pixels, fingerprinting or any comparable technology that stores information on your device or accesses information already stored there. The newsletter sign-up does not set a cookie either.

Because no such technologies are used, no consent under Article 5(3) of the ePrivacy Directive (in Portugal implemented by Lei n.º 41/2004) is required, and no cookie banner is displayed. Should this ever change, this policy will be updated and consent will be obtained beforehand.

4. Server log files (hosting)

Each time a page or file is requested, the hosting provider automatically records technical information in log files:

Purpose and legal basis. This data is processed to deliver the website reliably, to ensure the stability and security of the server and to allow the investigation of misuse or attacks. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest lies in the technically faultless and secure operation of the website. This data is not merged with other data sources and is not used to identify individual visitors.

Retention. Log data is deleted by the hosting provider after a short period, unless a specific incident requires longer retention as evidence.

Processor. The website and the email address of this domain are hosted by IONOS SE, Elgendorfer Straße 57, 56410 Montabaur, Germany. The servers used are located within the European Union. IONOS processes this data solely on our instructions under a data processing agreement pursuant to Article 28 GDPR.

5. Contacting us by email

If you write to the email address published on this site, the content of your message, your email address and any other details you provide will be processed in order to deal with your enquiry. The legal basis is Article 6(1)(b) GDPR where your message relates to a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR based on our legitimate interest in responding to enquiries.

Your message is stored in the mailbox until it is no longer needed. Statutory retention obligations, in particular under tax and commercial law, remain unaffected. Please note that unencrypted email cannot be guaranteed to be secure in transit.

6. Newsletter

You can subscribe to a newsletter on this site. We ask for your first name, last name and email address. The name is used only to address you personally.

Confirmed opt-in. After you submit the form we store your details with the status “pending” and send you one email containing a confirmation link. Your subscription only becomes active when you click that link. If you do not confirm, nothing further is sent to you.

Legal basis. Article 6(1)(a) GDPR – your consent, given by ticking the box on the form and confirming the link. You may withdraw this consent at any time with effect for the future, without giving reasons, by writing to info@luisa-thiel.com. Withdrawal does not affect the lawfulness of processing carried out before it.

Storage and recipients. The subscriber list is stored as a file on our own web space at IONOS. It is not passed on to any third party and no external newsletter service is used. To limit abuse of the form, a one-way hash of the IP address used for the sign-up is stored; the IP address itself is not retained. Your details are deleted when you unsubscribe.

7. Links to social networks

This site links to profiles on Instagram and LinkedIn. These are plain hyperlinks. No social plugins, embedded feeds, share buttons or tracking pixels from those platforms are loaded, so no data is transmitted to them while you browse this site.

Only when you actively click such a link do you leave this website, and the respective provider – Meta Platforms Ireland Ltd. for Instagram, LinkedIn Ireland Unlimited Company for LinkedIn – receives your data and processes it under its own privacy policy, over which we have no influence.

8. Fonts and media

All typefaces, images and video used on this site are stored on our own web space and are delivered from there. No content delivery network, no Google Fonts and no external video platform is called, so your IP address is not disclosed to any such third party.

9. Your rights

Under the GDPR you have the right, at any time and free of charge, to:

To exercise any of these rights, simply write to the address in section 1.

10. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or the place of the alleged infringement. The competent authority for the controller is:

Comissão Nacional de Proteção de Dados (CNPD)
Av. D. Carlos I, 134, 1.º
1200-651 Lisboa, Portugal
cnpd.pt

11. Data security

This website is delivered over an encrypted TLS connection (HTTPS). You can recognise an encrypted connection by the https:// prefix in the address bar of your browser.

12. Changes to this policy

This policy will be updated whenever the website changes in a way that affects the processing of personal data. The version in force is always the one published here.

Last updated: 21 August 2026