Privacy Policy
Your privacy matters to us. This policy explains what personal data we process, for which purposes, who we share it with and what your rights are under the General Data Protection Regulation (GDPR).
Av. da Liberdade, 67-B, 3.º B, 1250-140 Lisboa, Portugal
info@bocean.pt · +351 218 247 167
Data we collect
We collect the data you provide through the contact form (name, email, phone and message) and through Calendly appointment scheduling, as well as technical data generated by browsing (IP address, access logs and cookies). We do not collect special categories of data through the website.
Purposes and legal basis
We process your personal data for the following purposes, on the legal bases shown:
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Respond to enquiries and provide services | Name, email, phone, message | Pre-contractual steps / contract performance — Art. 6(1)(b) |
| Schedule meetings (Calendly) | Name, email, scheduling data | Pre-contractual steps — Art. 6(1)(b) |
| Website security and logs | IP address, access logs | Legitimate interest (network and information security) — Art. 6(1)(f) |
| Traffic analytics and advertising | Cookie identifiers, usage data | Consent — Art. 6(1)(a) |
| Legal and accounting obligations | Billing data | Legal obligation — Art. 6(1)(c) |
Recipients, processors and controllers
We do not sell your personal data. We share data with the recipients listed below. Hosting (Google Cloud), business email (Google Workspace), scheduling (Calendly) and font delivery (Google Fonts) act as processors, handling data on our behalf and on our instructions under data-processing agreements (Art. 28 GDPR). Google Analytics, Google Ads and Microsoft Clarity, however, act as independent (or joint) controllers for the processing they carry out for their own purposes, under their own terms — and in those cases data is shared only with your consent.
| Recipient | Purpose | Location / safeguard |
|---|---|---|
| Google Ireland Ltd / Google LLC | Google Analytics 4, Google Ads, Google Fonts | EU and USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
| Microsoft Corporation | Microsoft Clarity (session analytics) | USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
| Calendly LLC | Appointment scheduling | USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
| Google LLC (Google Workspace) | Business email | EU/USA — EU-US Data Privacy Framework + Standard Contractual Clauses |
| Google Cloud (EMEA) | Website hosting | European Union (Madrid, Spain) |
International transfers
Some processors are based in the USA. Transfers rely on the EU-US Data Privacy Framework, where the recipient is certified, and/or the European Commission’s Standard Contractual Clauses, with supplementary measures where applicable. Hosting and email storage are located in the European Union.
Advertising and remarketing
When you accept advertising cookies, we use Google Ads to measure conversions and to show Blue Ocean ads on other Google sites and platforms (remarketing), based on your visit to this site. We do not use this data to categorise you on the basis of sensitive data. You can turn off ad personalisation at any time in Google’s ad settings, or withdraw consent via the "Manage cookies" button.
Retention periods
We keep data only for as long as necessary for the stated purposes and any applicable legal periods, after which it is deleted or anonymised:
| Data | Retention |
|---|---|
| Contact-form messages and emails | Up to 24 months after the last contact (longer where a contract or legal obligation requires) |
| Meeting records | Duration of the relationship + applicable legal periods |
| Server access logs | Up to 12 months |
| Analytics data (GA4 / Clarity) | As configured in the tools (up to 14 months in GA4) |
| Consent record | 180 days (consent validity) + proof period |
Your rights
You may exercise, at any time and free of charge, your rights of access, rectification, erasure, restriction, portability and objection, and withdraw any consent given (without affecting the lawfulness of prior processing). To do so, contact us using the details below. You also have the right to lodge a complaint with the Portuguese supervisory authority (CNPD — www.cnpd.pt).
Managing and withdrawing consent
You can change or withdraw your cookie consent at any time using the "Manage cookies" option in the site footer or the button below, which reopens the consent banner.
Data protection contact
For any question about this policy or the processing of your data — including to exercise your rights — contact us at privacy@bocean.pt. You may also use the data controller’s contact details shown above.