Privacy Policy
Last updated: 21 April 2025
1. Who We Are
Cinderelo.com is run by João Prata (Data Controller under EU GDPR). For privacy queries contact [email protected].
2. What Personal Data We Collect
Category | Examples | Purpose | Legal basis (GDPR)
- Identification: Nominator & Candidate names, date of birth, nationality, government ID (if shortlisted) | Verify eligibility and prevent fraud | Art. 6 (1)(b) contract
- Contact: Email, phone, postal address | Communicate about the Contest | Art. 6 (1)(b)
- Profile: Photos, biography answers, compatibility test results | Matchmaking evaluation & publicity | Consent – Art. 6 (1)(a)
- Technical: IP address, device type, cookies, analytics events | Site security and improvement | Legitimate interest – Art. 6 (1)(f)
Special categories: We do not intentionally collect sensitive data (health, religion, etc.). Please do not provide it.
3. How We Use Your Data
- Administer the Contest and verify eligibility.
- Contact you about application status.
- Publish success stories or promotional content only with explicit written consent.
- Comply with legal obligations, e.g., anti‑money‑laundering checks.
4. Sharing & Transfers
We share data only with:
- Service providers (cloud hosting, email, video‑conferencing) under confidentiality agreements.
- Professional advisers (lawyers, auditors).
- Public authorities when legally required.
Data may be stored on servers outside the EEA. When we do, we rely on an adequacy decision or Standard Contractual Clauses to safeguard it.
5. Retention
- Unsuccessful Candidate data: 2 years after final decision.
- Winner & spouse data: 10 years for tax/accounting obligations.
- Cookie logs: up to 26 months.
6. Your Rights (EU GDPR)
You can access, correct, erase, restrict, object or request portability of your personal data. Lodge complaints with the Portuguese Data Protection Authority (CNPD) if needed.
7. Security
We use HTTPS encryption, logical access controls, and regularly review hosting provider SOC 2/ISO 27001 certifications. No system is 100 % secure; report vulnerabilities to [email protected].
8. Children
Our Site is not directed to minors under 18. We will delete any data inadvertently collected from minors.
9. Cookies & Tracking
We use first‑party cookies for login/session management plus Google Analytics for aggregated statistics. You can manage cookies in your browser; disabling may affect site functionality.
10. Changes to This Policy
We will post any updates here and, where appropriate, notify you by email.
11. Contact
João Prata – Data Controller
Email: [email protected]