Privacy Policy
Effective date: 6 September 2026
1. Who I am (Data Controller)
I am Ricardo Dias, an individual operating the website ricardodias.co (the “Site”).
This is my independent personal website. Although I work at Spotware Systems, Spotware does not own, operate, sponsor, or endorse this Site, is not its data controller, and does not receive personal data submitted through this Site unless I separately tell you otherwise at the point of collection.
Address: Limassol, Cyprus
Email for privacy requests: ricardo@ricardodias.co
This privacy policy explains how I collect, use, and protect your personal data when you visit this Site and use the contact form.
2. What personal data I collect and why
2.1 Contact form
When you use the contact form on this Site, I may collect:
- Name
- Email address
- Message content and any other information you choose to provide
Purpose: To respond to your inquiry and communicate with you about your request.
Legal basis: Legitimate interest and/or steps necessary to take at your request prior to entering into a contract (Article 6(1)(f) and/or 6(1)(b) GDPR).
I do not use your contact-form data for marketing unless you explicitly opt in elsewhere (for example, by signing up for a newsletter).
2.2 Website usage data (Google Analytics 4)
This Site uses Google Analytics 4 (“GA4”), a web analytics service provided by Google Ireland Limited (“Google”).
GA4 may collect and process:
- Pages you visit and navigation path
- Time spent on pages and interaction events
- Device type, browser, operating system
- Approximate geographic location (country/city)
- Referral source and campaign parameters
- A unique visitor identifier via the _ga cookie (and related cookies)
Purpose: To understand how visitors use the Site and to improve content, performance, and user experience.
Legal basis: Where required by applicable law (including for visitors in the EU/EEA), I rely on your consent for non-essential cookies and analytics. In other jurisdictions, I may rely on legitimate interest, subject to local requirements.
Google may transfer data to servers outside the European Economic Area, including the United States, under appropriate safeguards (e.g. Standard Contractual Clauses and/or the EU-US Data Privacy Framework).
More information:
- Google Privacy Policy: https://policies.google.com/privacy
- Google Analytics opt-out: https://tools.google.com/dlpage/gaoptout
3. Cookies and similar technologies
This Site uses cookies and similar technologies via Google Analytics 4 to distinguish you from other visitors and to collect usage statistics.
- _ga and related cookies: used to identify unique visitors and measure site usage.
You can control and/or delete cookies through your browser settings. If you disable cookies, some features of the Site (including analytics) may not function as intended.
For EU/EEA visitors, I use a cookie-consent banner to obtain your consent before activating non-essential cookies. You can withdraw or change your consent at any time via the banner or your browser settings.
4. Who I share your data with
I do not sell your personal data. I may share your data with:
- Email / hosting / CRM providers that process contact-form messages on my behalf under data-processing arrangements.
- Google Ireland Limited (for GA4 analytics), as described above.
These providers act as data processors and are required to protect your data and use it only for the purposes I specify.
5. How long I keep your data
- Contact-form data: I retain your messages and related contact details for 12 months after our last communication, unless a longer period is required by law or necessary for legal claims.
- Google Analytics data: GA4 data is retained for the period configured in my GA4 property (2 months), after which it is automatically deleted by Google.
6. Your rights (GDPR)
If you are in the European Economic Area (EEA) or otherwise covered by GDPR, you have the right to:
- Access your personal data
- Request correction of inaccurate data
- Request erasure (“right to be forgotten”)
- Restrict or object to certain processing
- Receive your data in a structured, commonly used format (data portability)
- Withdraw consent at any time (where processing is based on consent)
- Lodge a complaint with a data-protection authority
To exercise these rights, please contact me at: ricardo@ricardodias.co.
I will respond within the timeframes required by applicable law.
7. Security
I implement reasonable technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access. However, no method of transmission over the internet is 100% secure, and I cannot guarantee absolute security.
8. Changes to this privacy policy
I may update this privacy policy from time to time. The latest version will always be available on this page, with the “Effective date” at the top.
9. Contact
If you have any questions about this privacy policy or my data practices, please contact me at:
Email: ricardo@ricardodias.co
Address: Limassol, Cyprus