Legal
Privacy Policy
This Policy explains what personal data we process, for what purpose and on what legal basis, how long we keep it, and how you can exercise your rights under the General Data Protection Regulation (GDPR).
1. Data controller
PortCasinoReview, Avenida da Liberdade 110, 1.º andar, 1269-046 Lisbon, Portugal. Privacy contact: privacidade@portcasinoreview.com.
2. Data we collect
We collect only what is strictly necessary:
- Contact details you voluntarily provide through the contact form: name, email address, subject and message content;
- Technical data generated automatically by the server: IP address (truncated), browser type and version, operating system, referring page, date and time of the request;
- Usage data collected by analytics cookies, only if you have given consent in the cookie banner;
- Preferences stored in strictly necessary cookies, such as your chosen language and your cookie decision.
We do not collect special categories of data. We do not request payment details, identity documents or any information about your gambling activity. We have no access to accounts you open with operators.
3. Purposes and legal bases
- Replying to your messages — basis: consent (Article 6(1)(a) GDPR), given when you submit the form;
- Ensuring the operation, security and integrity of the site, including abuse and attack prevention — basis: legitimate interest (Article 6(1)(f));
- Measuring audience and improving content through aggregated statistics — basis: consent (Article 6(1)(a));
- Complying with applicable legal obligations, including those relating to gambling advertising — basis: legal obligation (Article 6(1)(c)).
4. Cookies
We use strictly necessary cookies, which do not require consent, and analytics cookies, which are only set after you give express consent through the banner shown on your first visit.
You can accept, reject or change your preferences at any time. The details of each cookie, its purpose and its retention period are set out in our Cookie Policy.
5. Sharing of data
We do not sell, rent or trade personal data to third parties for marketing purposes.
We may share data, strictly as necessary, with: our hosting provider, acting as a processor under a contract meeting Article 28 GDPR; statistics providers, only where consent has been given; and public authorities, where legally required.
When you leave this site through a link to an operator, that operator’s privacy policy applies. We do not transmit your personal data to them — the link carries only a campaign identifier, containing no data that identifies you.
6. International transfers
Data is processed within the European Economic Area. Should any transfer to a third country become necessary, it will be carried out under a European Commission adequacy decision or Standard Contractual Clauses, with any applicable supplementary safeguards.
7. Retention periods
- Contact form messages: 24 months after the last interaction;
- Technical server logs: 12 months;
- Aggregated, anonymised statistical data: up to 26 months;
- Consent preference cookie: 6 months;
- Language preference cookie: 12 months.
8. Your rights
Under the GDPR you have the following rights:
- Access to the personal data concerning you;
- Rectification of inaccurate or incomplete data;
- Erasure (“right to be forgotten”), where applicable;
- Restriction of processing;
- Data portability;
- Objection to processing based on legitimate interest;
- Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
To exercise any of these rights, write to privacidade@portcasinoreview.com. We respond within a maximum of 30 days. You may also lodge a complaint with the Comissão Nacional de Proteção de Dados (CNPD), the supervisory authority in Portugal.
9. Security
We apply appropriate technical and organisational measures, including encrypted transmission (HTTPS/TLS), security headers, data minimisation, access control and rate limiting on forms.
No system is entirely impenetrable, but we review our protective measures periodically.
10. Minors
This site is intended solely for adults aged 18 and over and does not knowingly collect data from minors. If you become aware that a minor has provided us with personal data, please contact us and we will delete it immediately.
11. Changes to this Policy
We may update this Policy. The version in force is always the one published on this page, with its update date. Material changes will be signalled prominently on the site.