This Privacy Policy explains how PLATEIA HABITUAL LDA (“we”, “us”, “our”) collects, uses, shares, and protects your personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation – GDPR) and Portuguese data protection law.
By accessing our website, submitting a form, or using our services, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller and Contact Details
PLATEIA HABITUAL LDA
Registered address: Avenida Manuel Violas, 476, São Felix da Marinha, 4410-137
NIF: 519005813
Email: info@notbad.show
Phone: +351 915 529 055
Data Protection Officer (external):
Email: dpo@notbad.show
Our Data Protection Officer is appointed voluntarily.
2. General Principles
We process your personal data strictly in accordance with the GDPR, based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, integrity, confidentiality, and storage limitation.
This Policy fully describes the categories of data we collect, the legal bases for processing, how long we retain data, and the rights you have as a data subject.
3. Data We Collect and How We Obtain It
We only collect data that is necessary for the provision of our services:
• Personal identification data: Full name, date of birth, nationality, passport details or NIF
Passport data is processed with enhanced technical and organizational security measures (encryption, restricted access). We do not collect special categories of data under Article 9 GDPR.
• Contact details: Phone number, email address, city of residence
• Course-related information: Selected course, language level, schedule preferences
• Payment information: Processed exclusively through certified payment providers. We do not store card or payment details.
• Media materials: Photos and videos taken during classes (only with your explicit consent)
• Technical data: IP address, browser type, cookies and device identifiers
• How we obtain data:
We collect data from the following sources:
• Directly from you (forms, email, phone, in person)
• Automatically through cookies and analytics services
• From publicly available sources (e.g., if you publicly share your contact details on social media)
We only use publicly available data to reach out to you in relation to a request you have initiated (e.g., inquiry about courses).
4. Purposes and Legal Bases for Processing
We process your data only when a valid legal basis applies:
• Performance of a contract: Enrolling you in a course, providing educational services
• Compliance with legal obligations: Issuing invoices and certificates, maintaining accounting documentation
• Legitimate interests: Customer support and communication, website analytics and improvement, site security and fraud prevention
• Direct marketing: Newsletters and updates about new courses, legal basis: your consent, or our legitimate interest (soft opt-in). You can opt out at any time.
• Photos and videos: Promotional and educational purposes, legal basis: your explicit consent, obtained separately and revocable at any time.
We do NOT use:
• Automated decision-making
• Profiling that produces legal or significant effects
5. Data Sharing and International Transfers
We share personal data only when strictly necessary:
Service providers:
• Dropbox Inc. – cloud storage
• Google LLC – email and analytics
Authorities:
Government authorities when required by law.
International transfers:
When data is transferred outside the EEA (including to the U.S.), it is done on the basis of:
• Standard Contractual Clauses (SCCs)
and/or
• EU–US Data Privacy Framework (where applicable)
with additional safeguards such as encryption and transfer impact assessments.
We ensure that all processors provide guarantees of GDPR compliance.
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:
• Contractual and accounting records: 10 years (as required by Portuguese tax law)
• Marketing contacts: 3 years from last interaction
• Technical data and cookies: up to 12 months
• Photos and videos: up to 5 years or until consent is withdrawn
Passport data and NIF are stored only for the duration of the contract and retained no longer than 10 years in compliance with tax obligations.
After retention periods expire, data is permanently deleted or anonymized.
7. Your Rights Under the GDPR
You have the following rights, free of charge and at any time:
• Access your personal data
• Rectify inaccurate or incomplete data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability (transfer to another organisation)
• Withdraw consent at any time
• Define instructions regarding your data after death
To prevent unauthorized access, we may request identity verification before processing your request.
We respond to all requests within 1 month (extendable to 2 months for complex requests, with notice).
Contact for requests: dpo@notbad.show
8. Right to Lodge a Complaint
If you believe your rights have been violated, you may lodge a complaint with the Portuguese Data Protection Authority:
Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt
9. Children’s Data
We do not knowingly collect personal data of individuals under 16 years of age without verified consent of a parent or legal guardian.
If such data is collected unintentionally, it is deleted immediately.
10. Photos and Videos
Photos and videos may be taken during courses for promotional and educational purposes.
We use such materials only after obtaining your explicit prior consent, which you may withdraw at any time by writing to:
info@notbad.show
11. Cookies and Trackers
We use cookies to provide essential website functions, improve performance, and analyze usage.
Our website uses a cookie consent banner that allows you to choose cookie categories (necessary, functional, analytics, marketing).
Detailed information about cookies is provided in our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version is always available on our website.
For any questions relating to the protection of your data, please contact:
dpo@notbad.show
info@notbad.show
+351 915 529 055
PLATEIA HABITUAL LDA© 2026. All rights reserved
By accessing our website, submitting a form, or using our services, you acknowledge that you have read and understood this Privacy Policy.
1. Data Controller and Contact Details
PLATEIA HABITUAL LDA
Registered address: Avenida Manuel Violas, 476, São Felix da Marinha, 4410-137
NIF: 519005813
Email: info@notbad.show
Phone: +351 915 529 055
Data Protection Officer (external):
Email: dpo@notbad.show
Our Data Protection Officer is appointed voluntarily.
2. General Principles
We process your personal data strictly in accordance with the GDPR, based on the principles of lawfulness, fairness, transparency, purpose limitation, data minimisation, accuracy, integrity, confidentiality, and storage limitation.
This Policy fully describes the categories of data we collect, the legal bases for processing, how long we retain data, and the rights you have as a data subject.
3. Data We Collect and How We Obtain It
We only collect data that is necessary for the provision of our services:
• Personal identification data: Full name, date of birth, nationality, passport details or NIF
Passport data is processed with enhanced technical and organizational security measures (encryption, restricted access). We do not collect special categories of data under Article 9 GDPR.
• Contact details: Phone number, email address, city of residence
• Course-related information: Selected course, language level, schedule preferences
• Payment information: Processed exclusively through certified payment providers. We do not store card or payment details.
• Media materials: Photos and videos taken during classes (only with your explicit consent)
• Technical data: IP address, browser type, cookies and device identifiers
• How we obtain data:
We collect data from the following sources:
• Directly from you (forms, email, phone, in person)
• Automatically through cookies and analytics services
• From publicly available sources (e.g., if you publicly share your contact details on social media)
We only use publicly available data to reach out to you in relation to a request you have initiated (e.g., inquiry about courses).
4. Purposes and Legal Bases for Processing
We process your data only when a valid legal basis applies:
• Performance of a contract: Enrolling you in a course, providing educational services
• Compliance with legal obligations: Issuing invoices and certificates, maintaining accounting documentation
• Legitimate interests: Customer support and communication, website analytics and improvement, site security and fraud prevention
• Direct marketing: Newsletters and updates about new courses, legal basis: your consent, or our legitimate interest (soft opt-in). You can opt out at any time.
• Photos and videos: Promotional and educational purposes, legal basis: your explicit consent, obtained separately and revocable at any time.
We do NOT use:
• Automated decision-making
• Profiling that produces legal or significant effects
5. Data Sharing and International Transfers
We share personal data only when strictly necessary:
Service providers:
• Dropbox Inc. – cloud storage
• Google LLC – email and analytics
Authorities:
Government authorities when required by law.
International transfers:
When data is transferred outside the EEA (including to the U.S.), it is done on the basis of:
• Standard Contractual Clauses (SCCs)
and/or
• EU–US Data Privacy Framework (where applicable)
with additional safeguards such as encryption and transfer impact assessments.
We ensure that all processors provide guarantees of GDPR compliance.
6. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected, or as required by law:
• Contractual and accounting records: 10 years (as required by Portuguese tax law)
• Marketing contacts: 3 years from last interaction
• Technical data and cookies: up to 12 months
• Photos and videos: up to 5 years or until consent is withdrawn
Passport data and NIF are stored only for the duration of the contract and retained no longer than 10 years in compliance with tax obligations.
After retention periods expire, data is permanently deleted or anonymized.
7. Your Rights Under the GDPR
You have the following rights, free of charge and at any time:
• Access your personal data
• Rectify inaccurate or incomplete data
• Request deletion (“right to be forgotten”)
• Restrict processing
• Object to processing
• Data portability (transfer to another organisation)
• Withdraw consent at any time
• Define instructions regarding your data after death
To prevent unauthorized access, we may request identity verification before processing your request.
We respond to all requests within 1 month (extendable to 2 months for complex requests, with notice).
Contact for requests: dpo@notbad.show
8. Right to Lodge a Complaint
If you believe your rights have been violated, you may lodge a complaint with the Portuguese Data Protection Authority:
Comissão Nacional de Proteção de Dados (CNPD)
Website: www.cnpd.pt
9. Children’s Data
We do not knowingly collect personal data of individuals under 16 years of age without verified consent of a parent or legal guardian.
If such data is collected unintentionally, it is deleted immediately.
10. Photos and Videos
Photos and videos may be taken during courses for promotional and educational purposes.
We use such materials only after obtaining your explicit prior consent, which you may withdraw at any time by writing to:
info@notbad.show
11. Cookies and Trackers
We use cookies to provide essential website functions, improve performance, and analyze usage.
Our website uses a cookie consent banner that allows you to choose cookie categories (necessary, functional, analytics, marketing).
Detailed information about cookies is provided in our Cookie Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
The latest version is always available on our website.
For any questions relating to the protection of your data, please contact:
dpo@notbad.show
info@notbad.show
+351 915 529 055
PLATEIA HABITUAL LDA© 2026. All rights reserved
