How we handle your data

Who handles the data

Onofriana — Marta Rosa, Portuguese tax no. 249368501, Rua dos Remédios 114, 4.º, 1100-450 Lisboa, Portugal. For any question about your data, or to exercise your rights, write to fado@onofriana.pt.

What we keep, and what for

Only what you give us, and only for this. We do not sell data to anyone.

• Booking request. What you type into the form (name, email and, if you give them, phone, place, type of event, date and message) is used to reply to and handle your request. It reaches us by email through Formspree and is kept in Onofriana’s management system (Supabase, in the European Union). Legal basis: steps taken at your request before a contract. It is kept for as long as the relationship lasts and, after that, for the applicable legal period.
• Booking a video call (marcar.martarosa.pt). Your name, email and, if you give them, phone, subject and message, and how you reached the page, are used to arrange and hold the meeting. They are kept in Onofriana’s system (Supabase, in the European Union); the meeting is created in Google Calendar, with a Google Meet link, and the emails go out through Resend. Legal basis: steps taken at your request before a contract. They are kept for 12 months after the meeting if it does not lead to a contract.
• News by email. The email you leave (with the language and the page you left it on) goes on the Resend list, which sends the messages. Legal basis: your consent. It stays there until you leave the list — through the link in every email, or by writing to us.
• Registering your copy of the CD. On the entretanto page, your email and, if you have the CD, your copy number. The email joins the list of those who have the record, on Resend; the number is kept with the email, in a notice sent to Onofriana. Legal basis: your consent. It stays there until you leave the list.
• Buying the CD. Your name, address, email and, if you give them, tax number and the name for the dedication are used to send the record and issue the invoice. Payment is made on Stripe, which does not give us your card details; the order is kept in Onofriana’s system (Supabase, in the European Union) and the invoice is issued on the Portuguese tax authority’s portal (Portal das Finanças). Legal basis: the purchase contract and, for the invoice, a legal obligation. Invoices are kept for 10 years, as tax law requires. If you ask for the news when buying, the purchase email joins the list of those who have the record, as in the previous point.
• Visit statistics. Only if you allow it in the cookie notice: Google Analytics records the pages viewed, the length of the visit, the type of device and where the visit came from, without keeping the full IP address. It is used to improve the site. Legal basis: your consent. The data is deleted after 14 months.

Cookies and players from other services

Without your consent, the site sets no cookies at all: the theme and language you choose stay in your own browser. You can change your mind with the “Cookies” button at the bottom of every page. Players from YouTube, Spotify, Deezer and Apple Music only load when you choose to listen or watch; from then on, those services’ own rules apply, and they may set their own cookies.

Outside the European Union

Google, Formspree, Resend and Stripe may process data outside the European Economic Area, mainly in the United States, with the safeguards the GDPR requires: the European Commission’s standard contractual clauses or the EU-US Data Privacy Framework.

Your rights

You may ask to see, correct or delete your data, to restrict its processing or object to it, and to take it with you. You may withdraw your consent at any time. If you believe your rights have not been respected, you may lodge a complaint with the Portuguese National Data Protection Commission (CNPD) at cnpd.pt.

This policy may change. The version in force is always the one on this page. This is a translation; in the event of any discrepancy, the Portuguese version prevails.

Last updated: November 2026.