Last updated: 10 May 2026
1. Data Controller
Name: João Costa Fernandes Tax ID: 215863330 Address: R. do Proletário 7, lote 1, 2794-076 Carnaxide, Portugal Email: geral@joaocostafernandes.com Website: www.joaocostafernandes.com
This Privacy Policy applies to all personal data collected through the website www.joaocostafernandes.com and describes how your data is collected, used, stored and protected, in compliance with the General Data Protection Regulation (GDPR, EU Regulation 2016/679) and other applicable legislation.
2. Personal Data Collected
Depending on your interaction with the website, we may collect the following personal data:
2.1 Application Form (Business Compass / Career Compass)
When you submit an application to one of the mentoring programs, we collect:
- Full name
- Email address
- Phone number (optional)
- LinkedIn profile (optional)
- Company name
- Role
- Description of current situation and goals
2.2 Corporate Contact Form
When you request information about corporate training, we collect:
- Name
- Email address
- Any additional data you choose to include in your message
2.3 Newsletter Subscription
When you subscribe to the newsletter, we collect:
- Email address
2.4 Browsing Data (collected automatically)
During your visit, the following data is collected automatically through cookies and similar technologies:
- IP address (anonymised)
- Browser and device type
- Pages visited and time spent
- Traffic source (how you reached the site)
- Interaction data with the website
3. Purposes and Legal Basis of Processing
| Purpose | Legal Basis (GDPR) |
|---|---|
| Evaluating applications to mentoring programs | Pre-contractual measures (Art. 6(1)(b)) |
| Responding to corporate training inquiries | Legitimate interest (Art. 6(1)(f)) |
| Sending the newsletter on leadership, business and AI | Consent (Art. 6(1)(a)) |
| Statistical analysis of website use (Google Analytics) | Consent (Art. 6(1)(a)) |
| Measuring effectiveness of advertising campaigns (Meta Pixel) | Consent (Art. 6(1)(a)) |
4. Cookies and Tracking Technologies
The website uses cookies and similar technologies. A cookie is a small text file stored on your device that allows your browser to be recognised on future visits.
4.1 Cookies Used
Essential Cookies Required for the basic functioning of the website. Do not require consent.
| Cookie | Purpose | Duration |
|---|---|---|
| Language preference | Save your language choice (PT/EN) | 1 year |
| Cookie consent | Record your choice on cookies | 1 year |
Analytics Cookies (Google Analytics) Help us understand how visitors use the website by collecting aggregated and anonymous information.
| Cookie | Purpose | Duration |
|---|---|---|
| _ga | Distinguish unique users | 2 years |
| _ga_3G8KNT7KVS | Maintain session state | 2 years |
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may be transferred to the United States under the EU-U.S. Data Privacy Framework.
Marketing Cookies (Meta Pixel) Allow us to measure the effectiveness of advertising campaigns on Facebook and Instagram and to display relevant ads.
| Cookie | Purpose | Duration |
|---|---|---|
| _fbp | Identify the browser for advertising | 3 months |
| fr | Display relevant ads | 3 months |
Provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland. Data may be transferred to the United States under the EU-U.S. Data Privacy Framework.
4.2 Cookie Management
You can manage your cookie preferences at any time through your browser settings. Disabling analytics and marketing cookies does not affect the functioning of the website.
Instructions by browser:
- Chrome: Settings > Privacy and security > Cookies
- Firefox: Settings > Privacy & Security
- Safari: Preferences > Privacy
- Edge: Settings > Cookies and site permissions
5. Sharing Data with Third Parties
Your personal data may be shared with the following entities, exclusively for the described purposes and with adequate protection guarantees:
| Entity | Purpose | Location |
|---|---|---|
| Brevo (Sendinblue) | Sending and managing the newsletter | France (EU) |
| Google Analytics | Statistical analysis of the website | Ireland (EU) / USA |
| Meta Platforms | Measuring advertising campaigns | Ireland (EU) / USA |
| Hotmart | Book purchases (external redirect) | Brazil / Netherlands (EU) |
When data is transferred outside the European Economic Area, that transfer is carried out under European Commission adequacy decisions or EU-approved standard contractual clauses.
Your data is not sold, assigned or shared with third parties for purposes other than those described here.
6. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Application data (mentoring programs) | 2 years after submission, or for the duration of the contractual relationship |
| Corporate contact data | 1 year after last contact |
| Newsletter data (email) | Until subscription cancellation |
| Browsing data and cookies | According to the duration of each cookie (see section 4) |
After the retention period, data is securely and irreversibly deleted.
7. Your Rights
Under the GDPR, you have the following rights regarding your personal data:
Right of Access (Art. 15) - You may request confirmation that your data is being processed and obtain a copy of it.
Right to Rectification (Art. 16) - You may request correction of inaccurate or incomplete personal data.
Right to Erasure (Art. 17) - You may request deletion of your personal data, where applicable.
Right to Restriction of Processing (Art. 18) - You may request restriction of processing in certain circumstances.
Right to Data Portability (Art. 20) - You may request your data in a structured, commonly used and machine-readable format.
Right to Object (Art. 21) - You may object to processing when the legal basis is legitimate interest.
Right to Withdraw Consent - When processing is based on consent, you may withdraw it at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, send an email to geral@joaocostafernandes.com with the subject "Data Protection". We will respond within a maximum of 30 days.
You also have the right to lodge a complaint with the National Data Protection Commission (CNPD), the Portuguese supervisory authority:
CNPD Av. D. Carlos I, 134, 1.º, 1200-651 Lisboa www.cnpd.pt
8. Data Security
We adopt appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction or alteration, including:
- Encrypted communication via HTTPS/TLS
- Restricted access to personal data only to those who need to process it
- Use of providers that comply with recognised security standards and offer adequate data protection guarantees
9. Links to External Sites
The website may contain links to third-party sites (Instagram, LinkedIn, YouTube, Spotify, Medium, Hotmart). These links are provided solely for your convenience. We do not control nor are responsible for the privacy practices of these sites. We recommend reading their respective privacy policies.
10. Minors
Our services are not intended for minors under 18. We do not knowingly collect personal data from minors. If we become aware that data has been collected from a minor, we will proceed with its immediate deletion.
11. Changes to this Policy
This Privacy Policy may be updated periodically to reflect changes in our practices or applicable legislation. The date of the last update is indicated at the top of this document. We recommend regularly reviewing this page.
12. Contact
For any questions related to the protection of your personal data:
Email: geral@joaocostafernandes.com Subject: Data Protection Address: R. do Proletário 7, lote 1, 2794-076 Carnaxide, Portugal