Sphortos

Privacy Policy

1. Data Controller

EPISÓDIO INTELIGENTE LDA., with registered office at Rua Francisco Sá Carneiro, 73, 2.º Frente, Carregal do Sal, District of Viseu, 3430-048, Portugal, VAT number 517 457 318, is the entity responsible for processing the personal data collected through the Platform, in compliance with the General Data Protection Regulation (GDPR) — Regulation (EU) 2016/679.

2. Personal Data Collected

We collect the following personal data:

  • Identification data: name, email address, password (encrypted)
  • Contact data: mobile phone number (when provided)
  • Payment data: information necessary to process transactions (handled by PCI-DSS certified payment processors — we do not store card data)
  • Usage data: IP address, browser type, pages visited, session duration
  • Event data: events viewed, photographs purchased

3. Purposes of Processing

Your data is processed for the following purposes:

  • Provision of the Platform’s services and management of the user account
  • Payment processing and invoice issuance
  • Service communications (purchase confirmations, support)
  • Marketing communications, only with prior consent
  • Compliance with legal obligations
  • Service improvement and usage analysis

4. Image Protection and Privacy in Photographs

All photographs published on the platform have people’s faces pixelated by default, as a proactive privacy protection measure. This approach ensures that no person is identifiable in the images without their own consent.

We provide a removal request button on all photographs. Anyone appearing in an image may request its removal in a simple and immediate way. Our team reviews and responds to all requests as a priority.

We believe in dialogue and transparency. If you have any concern about a photograph — before or after submitting a formal request — we encourage you to contact us directly. We are always available to find the most appropriate solution for each situation, in a prompt and respectful manner.

We operate in full compliance with the GDPR — Regulation (EU) 2016/679 — and all applicable data protection legislation in Portugal and the European Union.

5. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

  • Performance of a contract: for the provision of the requested services
  • Consent: for marketing communications
  • Legal obligation: for compliance with tax and regulatory duties
  • Legitimate interest: for fraud prevention and security improvement

6. Data Retention

Data is retained for the period necessary to fulfill the purposes for which it was collected, plus any applicable legal retention periods.

7. Data Sharing

We do not sell or disclose your data to third parties for commercial purposes. We may share data with:

  • Payment processors to complete transactions
  • Technology service providers supporting the operation of the Platform
  • Public authorities, when required by law

8. Data Subject Rights

You have the right to:

  • Access your personal data
  • Rectify inaccurate or incomplete data
  • Request the erasure of your data (“right to be forgotten”)
  • Object to processing or request its restriction
  • Data portability
  • Withdraw consent at any time, without affecting the lawfulness of prior processing

To exercise your rights, please contact us through the privacy email address indicated on our website. You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD) at www.cnpd.pt.

9. International Transfers

If your data is transferred outside the European Economic Area, we ensure that such transfers are carried out on the basis of appropriate safeguard mechanisms, such as standard contractual clauses approved by the European Commission.

10. Security

We adopt appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. Payment data is processed exclusively by PCI-DSS certified processors.

11. Contact of the Data Controller

For matters related to data protection, please contact our Data Protection Officer (DPO) through the email address indicated in the Privacy section of our website.

Last updated: March 2026