Privacy Policy
This Privacy Policy explains how LUMINOUS GIANT — UNIPESSOAL LDA ("we", "us") processes personal data when you visit www.miguelenes.com or contact us. Processing follows Regulation (EU) 2016/679 (GDPR) and Portuguese Law No. 58/2019.
Last updated: 2026-08-25
- Company name
- LUMINOUS GIANT — UNIPESSOAL LDA
- Legal form
- sociedade unipessoal por quotas
- NIPC
- 519357124
- Registered office
- Rua Companhia dos Caolinos, 102, R/C Esq Tras, 4460-205 Senhora da Hora, Matosinhos, Porto district, Portugal
- Manager
- Carlos Miguel Ferreira de Castro Enes de Oliveira (NIF 235578428)
- General contact
- info@miguelenes.com
- Privacy contact
- privacy@miguelenes.com
- Legal contact
- legal@miguelenes.com
Data controller
Data controller: LUMINOUS GIANT — UNIPESSOAL LDA. Privacy questions: privacy@miguelenes.com. Legal enquiries: legal@miguelenes.com. General contact: info@miguelenes.com.
miguelenes.com is the personal brand and blog of Miguel Enes, operated by the company. We have not appointed a Data Protection Officer under Article 37 GDPR because our processing does not meet the thresholds requiring one.
Categories of personal data
Depending on how you use the site, we may process:
- Technical and security data (IP address, browser type, request metadata) processed by Cloudflare to deliver and protect the site
- Consent, theme, and locale preferences stored in cookies or local storage
- Optional analytics data (pages viewed, device type, referral source) if you accept analytics cookies
- Email correspondence content and your email address if you contact us
Purposes and lawful bases
| Processing | Purpose | Lawful basis (GDPR Art. 6) |
|---|---|---|
| Site delivery and security (Cloudflare) | Operate, protect, and troubleshoot the website | Legitimate interests (Art. 6(1)(f)) |
| Consent record, theme, locale | Remember your choices and language | Legitimate interests / strictly necessary cookies (Art. 6(1)(f)) |
| Analytics (GA4, Plausible) | Understand aggregated site usage | Consent (Art. 6(1)(a)) — only after opt-in |
| Email correspondence | Respond to enquiries | Legitimate interests (Art. 6(1)(f)) or pre-contractual steps (Art. 6(1)(b)) where applicable |
| Legal compliance | Meet legal obligations and respond to authorities | Legal obligation (Art. 6(1)(c)) |
Recipients and processors
We use trusted service providers who process data on our instructions:
We do not sell personal data.
- Cloudflare, Inc. — hosting, CDN, and security (global network; may involve transfers outside the EEA with appropriate safeguards)
- Google Ireland Limited — Google Analytics 4 when you consent to analytics
- Plausible Insights OÜ — privacy-oriented analytics hosted in the EU when you consent
International transfers
Some providers (notably Cloudflare and Google) may process data in the United States or other countries outside the EEA. Where required, transfers rely on Standard Contractual Clauses, adequacy decisions, or other GDPR Chapter V mechanisms.
Retention
Consent records in cc_cookie are kept for about six months. Analytics retention follows each vendor's policy (typically up to 26 months for GA4 aggregates). Email correspondence is kept as long as needed to handle your request and applicable legal periods.
Your rights
Under GDPR you may request access, rectification, erasure, restriction, portability, or object to processing based on legitimate interests. You may withdraw analytics consent at any time via Cookie preferences in the footer.
You may lodge a complaint with the CNPD (Comissão Nacional de Proteção de Dados) at www.cnpd.pt. Rights requests may be submitted in Portuguese or English to privacy@miguelenes.com.
Automated decisions and minors
We do not use automated decision-making or profiling with legal or similarly significant effects. The site is not directed at children under 16; we do not knowingly collect their data.
Security
We apply appropriate technical and organisational measures, including HTTPS, Cloudflare protection, and consent-gated analytics loading.
Changes
We may update this policy when the site, vendors, or legal requirements change. Material cookie changes trigger a new consent prompt via an incremented policy revision.