This policy explains which personal data we process on this website and on the VidaPass waiting list. The app will have its own policy.
Who is the controller
Marcelo Rodrigues Da Cunha, Lisboa, Portugal.
For any request about your data: privacidade@vidapass.app.
This website
This website uses no cookies, analytics or advertising, and no fonts or scripts from other companies. It stores nothing in your browser.
The website is hosted by Cloudflare. To deliver the pages and protect the site from attacks, Cloudflare processes technical data, such as the IP address. We never use this data to identify visitors.
Waiting list: what we keep
Only your email address, the language of the site, the date and version of the text you accepted, and the date you confirmed your sign-up.
We do not ask for health data. Please do not write health data in emails you send us.
Why, and on what basis
To send you emails about the launch of VidaPass. The basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any moment, with the "Leave the list" link in every email or by writing to privacidade@vidapass.app.
To stop sign-ups by bots, the form uses Cloudflare Turnstile, which receives the IP address and technical data from the browser. To limit abusive requests, we only keep an irreversible digest of the IP address (never the IP itself), for 24 hours at most. The basis is our legitimate interest in protecting the site (Article 6(1)(f) GDPR).
Email confirmation
After signing up, you receive an email with a link to confirm. This way, nobody can sign up someone else's email address. Without confirmation, you receive no further emails.
Where it is kept and who processes it for us
The list is kept in a database in the European Union, separate from the app's data, with no access from the app or the public.
Processors: Supabase (database, in the European Union), Cloudflare (website hosting, bot protection and forwarding the emails you send us) and Mailjet (sending the emails, from nao-responder@vidapass.app).
Emails you send us at privacidade@vidapass.app or contacto@vidapass.app are forwarded by Cloudflare to a Gmail (Google) mailbox, where we read and answer them.
If any of these services processes data outside the European Union, it does so with the safeguards set out in the GDPR, such as the European Commission's standard contractual clauses.
For how long
Unconfirmed sign-ups: deleted after 7 days.
The whole list: deleted after the app is launched, or after 24 months, whichever comes first.
If you leave the list, your email address is deleted straight away.
Your rights
You can ask for access to your data, its correction, its deletion or its portability, object to the processing and withdraw your consent. Write to privacidade@vidapass.app. We reply within one month.
You can also lodge a complaint with the Portuguese data protection authority (Comissão Nacional de Proteção de Dados, CNPD), www.cnpd.pt, or with the authority of your country.
We never sell data
We do not sell, rent or share your email address with other companies for advertising.
Changes
If this policy changes, the new version is published on this page, with its date. If the change affects the waiting list, we let everyone on the list know by email.