Legal
Privacy.
Privacy notice under the General Data Protection Regulation (GDPR).
1. Controller
The controller of this site is Rui Castro, jurist, based in Funchal, Madeira, Portugal. Contact is through Rui Castro's LinkedIn profile; the site does not publish an email address.
2. What data is processed
The site uses no cookies, has no forms, user accounts or comments, and embeds no third party content that collects data. Fonts, images and other resources are served by the site itself. The only processing is the audience statistics and server logs described below.
3. Audience statistics
The site uses Vercel Web Analytics, a cookieless statistics tool with no cross site tracking. It collects only aggregated, anonymous data: pages viewed, country, referring page, device type, operating system and browser. Each visitor is distinguished only by a hash computed from the request, which changes every day and is discarded, so it cannot identify or follow anyone over time. The legal basis is the legitimate interest in understanding the audience of the publications (Article 6(1)(f) GDPR), and Vercel acts as processor.
4. Hosting and server logs
The site is hosted by Vercel Inc. To deliver pages and protect the infrastructure against abuse and attacks, Vercel processes, as a processor, technical data from each request, such as the IP address and the browser identifier (user agent). This processing is based on the legitimate interest in the security and operation of the site (Article 6(1)(f) GDPR); logs are kept for the limited period set by Vercel and may involve transfers outside the European Economic Area under the safeguards provided for in the GDPR. More information in Vercel’s privacy policy.
5. External links
The site links to LinkedIn and other external sources. When you open those pages, the privacy policy of that service applies, including LinkedIn’s privacy policy. The controller has no control over that processing.
6. RSS
The RSS feeds are public files. Following them in a feed reader requires no sign up and involves no collection of personal data by the controller.
7. Your rights
Under Articles 15 to 22 GDPR you have the rights of access, rectification, erasure, restriction of processing, data portability and objection, and the right not to be subject to decisions based solely on automated processing. As the site only processes technical data and anonymous statistics, there will normally be no data identifying you to which these rights apply; you can still exercise them through Rui Castro's LinkedIn profile.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
8. Changes
This notice may be updated if the way the site works changes. Last updated: 3 November 2026.