PRIVACY
Privacy Policy
Last updated: 21 September 2026
Your privacy matters. This Privacy Policy explains how personal data is processed when you use paulocoliveira.com, subscribe to the 5 Minutos de Qualidade newsletter or contact me through the website.
Its purpose is to explain clearly what data is processed, why it is processed, the legal basis, how long it is kept and what rights you have.
1. Data controller
The controller responsible for the personal data described in this policy is:
Paulo Oliveira Website: paulocoliveira.com Email: contato@paulocoliveira.com
For privacy-related questions or to exercise your rights, you may use this email address.
2. Personal data that may be processed
The data processed depends on how you use the website.
2.1. 5 Minutos de Qualidade newsletter
When you subscribe to the newsletter, the following data may be processed:
- full name;
- email address;
- information required to register and manage your subscription, including subscription status, unsubscribe requests and technical information required to deliver messages;
- a record of the consent you provided.
The newsletter is managed using MailerLite.
2.2. Contact form
When you send a message through the contact form, the following data may be processed:
- name;
- email address;
- subject;
- message;
- language;
- acknowledgement of the privacy information;
- date and time of the request.
This data is used to receive, assess and reply to your message and, where relevant, to follow up on an enquiry related to mentoring, training, speaking, services or another potential professional relationship.
The message may be stored in the website's contact system and forwarded to my professional email account.
2.3. Technical and security data
When you access the website, the server and technical infrastructure may process data required for operation, security and diagnostics, such as:
- IP address;
- date and time of access;
- pages or resources requested;
- browser type and technical device information;
- information related to errors, security and service operation.
This data is not used to create commercial profiles of visitors.
3. Purposes and legal bases
Newsletter and email communications
Newsletter data is used to:
- manage your subscription to 5 Minutos de Qualidade;
- send new newsletter editions;
- deliver materials associated with the subscription, such as the QA Career Guide;
- send other communications related to Paulo Oliveira's work within the scope presented when you subscribed;
- manage unsubscribe requests and subscription preferences.
The legal basis for these communications is your consent.
You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.
Contact form
Data submitted through the contact form is processed in order to reply to the request you submitted.
Depending on the content of your message, processing may be necessary to:
- take steps at your request before potentially entering into a contract; or
- pursue the legitimate interest of replying to enquiries, questions and contacts received through the website.
Submitting the contact form does not automatically subscribe you to the newsletter.
Website security and operation
Technical data may be processed on the basis of the legitimate interest in:
- keeping the website available and secure;
- preventing abuse and incidents;
- investigating errors;
- protecting the infrastructure and users.
Where the retention or disclosure of certain data is required by law, processing may also be based on compliance with a legal obligation.
4. MailerLite and newsletter management
The 5 Minutos de Qualidade newsletter uses MailerLite to manage subscribers and send messages.
When you subscribe, the data required for the subscription, including your name and email address, is sent to MailerLite so that it can provide the newsletter management and delivery service.
For this subscriber data, MailerLite acts as a service provider processing data on behalf of the controller, under the applicable terms and data processing agreement.
According to the legal information currently published by MailerLite, subscriber data for customers located in the European Economic Area is processed using infrastructure located within the European Union. MailerLite may use sub-processors to provide the service and states that it applies legally required safeguards where an international data transfer is applicable.
5. Other service providers and recipients
Personal data may be processed by service providers that are strictly necessary to operate the website and related services, including:
- hosting and infrastructure providers;
- the email/SMTP provider used to receive or send contact-form messages;
- MailerLite, for newsletter management;
- technical providers required for security, maintenance or service operation.
These providers should process data only to the extent necessary to provide their respective services.
Personal data is not sold.
Data may also be disclosed where necessary to comply with a legal obligation, respond to a valid request from a competent authority, or establish, exercise or defend legal rights.
6. External links and services
The website contains links to third-party services and websites, including, depending on the page, payment or checkout platforms, social networks, video platforms, event pages and other external services.
When you follow a link to an external service, any processing carried out by that service is governed by its own privacy policies and terms.
These services may include platforms such as Eduzz, LinkedIn, Instagram, GitHub, YouTube, WhatsApp and event or conference websites.
This Privacy Policy applies to processing carried out within paulocoliveira.com and does not replace the privacy policies of external services.
7. Data retention
Personal data is kept only for as long as necessary for the purposes for which it was collected.
Newsletter
Data used for the newsletter is kept while your subscription remains active.
When you unsubscribe, your data will no longer be used to send marketing communications. Minimal records may be retained for as long as necessary to:
- respect and demonstrate your unsubscribe request;
- prevent unwanted messages;
- demonstrate, where necessary, the existence and scope of the consent previously provided;
- comply with legal obligations.
Website contact requests
Requests submitted through the contact form may be kept for up to 12 months after the last interaction, unless:
- there is a contractual or pre-contractual relationship that justifies further retention;
- information must be retained to comply with legal obligations;
- retention is necessary to establish, exercise or defend legal rights.
Technical data and logs
Technical and security logs should normally be retained for no longer than 30 days, but may be retained for longer where necessary to investigate a security incident, abuse or a legal obligation.
8. Cookies and similar technologies
The website may use cookies or equivalent mechanisms that are strictly necessary for its operation and security, including mechanisms used for form protection and to prevent fraudulent requests.
The website does not currently aim to use advertising cookies or create behavioural profiles of visitors.
If analytics, advertising or other technologies requiring consent are introduced in the future, this policy and the website's consent mechanism should be updated before they are used.
9. Security
Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, alteration, disclosure or improper destruction.
No online service can guarantee absolute security. Measures are reviewed and adjusted according to the nature of the service and the risks identified.
10. Your rights
Under applicable data protection law, you may, where relevant:
- request access to your personal data;
- request correction of inaccurate or incomplete data;
- request deletion of your data;
- request restriction of processing;
- object to certain processing;
- request data portability where applicable;
- withdraw consent at any time for processing based on consent;
- lodge a complaint with the competent supervisory authority.
Requests may be sent to:
Exercising these rights is generally free of charge. Requests will be handled within the time limits required by applicable law.
11. Unsubscribing and objecting to marketing
You may stop receiving the newsletter and other marketing communications at any time by using the unsubscribe mechanism included in the messages or by emailing contato@paulocoliveira.com.
After you unsubscribe, your data will no longer be used for new marketing communications, without prejudice to the possible retention of minimal information required to respect the unsubscribe request and comply with legal obligations.
12. Supervisory authority
If you believe that the processing of your personal data breaches applicable data protection law, you have the right to lodge a complaint with a supervisory authority.
In Portugal:
Comissão Nacional de Proteção de Dados (CNPD) www.cnpd.pt
Where possible, you are encouraged to contact contato@paulocoliveira.com first so that the matter can be reviewed and answered.
13. Automated decision-making and profiling
This website does not make decisions based solely on automated processing that produce legal effects or similarly significant effects on users.
Data submitted through website forms is not used to create automated decision-making profiles.
14. Changes to this policy
This Privacy Policy may be updated when there are relevant changes to the website, services used, processing purposes or applicable law.
The version published on this page will always show the date of the latest update.
15. Contact
For questions about this Privacy Policy, personal data processing or the exercise of your rights:
Paulo Oliveira contato@paulocoliveira.com