Privacy Policy

Last updated: June 2026

1. Who we are

The address of our website is: https://www.goncalogil.com.

The controller responsible for the personal data collected through this website is:

Gonçalo Gil — Professional Illusionist
Email: info@goncalogil.com
Website: www.goncalogil.com

2. What personal data we collect and why

2.1 Contact form

When you fill in the contact form, your name, email address and the message submitted are collected. This data is used exclusively to respond to your request for information or proposal and is retained for 12 months for customer support purposes. It is not used for marketing purposes.

2.2 Comments

When visitors leave comments on the website, the data shown in the comments form is stored, as well as the visitor’s IP address and browser user agent string, to help detect spam. An anonymised string created from the email address, also known as a hash, may be sent to the Gravatar service to check whether it is being used. Gravatar’s privacy policy is available at: https://automattic.com/privacy/. After the comment is approved, the profile picture becomes publicly visible in the context of the comment.

2.3 Media

When uploading images to the website, you should avoid uploading images with embedded location data, such as EXIF GPS. Visitors may download and extract location data from images on the website.

2.4 Ticket purchases

When you purchase tickets for performances, the data required to complete the purchase is collected: name, email address, billing details and payment information. Payment data is processed securely through certified platforms, such as PayPal, Stripe and/or Ifthenpay/Multibanco, and is not stored on our servers. Transaction records are retained for the legally required period for tax and accounting purposes, namely 10 years.

2.5 Cookies

This website uses cookies to ensure its proper functioning. Specifically:

• If you leave a comment, you may choose to save your name, email address and website in cookies for convenience. These cookies will last for one year.
• When visiting the login page, a temporary cookie will be set to determine whether your browser accepts cookies. This cookie contains no personal data and is deleted when you close your browser.
• When you log in, cookies will be set to save your login information and screen display choices. Login cookies last for one year. If you select “Remember me”, your login will persist for two weeks. When you log out, the login cookies will be removed.
• If you edit or publish an article, an additional cookie will be saved in your browser, containing only the ID of the edited content. It expires after 1 day.

2.6 Embedded content from other websites

Articles and pages on this website may include embedded content, such as YouTube videos, images or articles. Embedded content from other websites behaves in the same way as if the user had visited those websites directly. These websites may collect data, use cookies, embed third-party tracking and monitor interactions, including when the user has an account and is logged in to those services.

2.7 Analytics data

This website may use traffic analytics tools to monitor performance and improve the browsing experience. This data is collected in an aggregated and anonymous form. If specific analytics plugins are installed, this section will be updated accordingly.

3. Who we share your data with

Your personal data is not sold or transferred to third parties for commercial purposes. It may be shared with the following service providers, strictly within the scope of their functions:

• PayPal — payment processing: privacy policy
• Stripe — payment processing: privacy policy
• Ifthenpay — Multibanco payment processing: privacy policy
• YouTube (Google) — embedded videos: privacy policy
• Google Fonts — web typography: privacy policy
• Gravatar (Automattic) — profile images in comments: privacy policy

If you request a password reset, your IP address will be included in the reset email.

4. Where your data is sent

Some of the third-party services used on this website, namely YouTube/Google and Stripe, transfer data to servers located outside the European Union, including the United States of America. These transfers are carried out under legal mechanisms approved by the European Commission, such as Standard Contractual Clauses or the EU-US Data Privacy Framework.

Visitor comments may be checked through an automated spam detection service.

5. Embedded third-party services

5.1 YouTube

This website uses YouTube plugins, operated by Google, YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. When visiting a page with an embedded YouTube video, a connection is established with YouTube’s servers, which are informed that our page has been visited. If the user is logged in to their YouTube account, this service may associate browsing behaviour directly with their personal profile. To avoid this association, the user should log out of their YouTube account before visiting the website. More information is available at: https://policies.google.com/privacy.

5.2 Google Web Fonts

To ensure consistent typography, this website uses Google Web Fonts. When opening a page, the browser loads the required fonts from Google servers, which are made aware of the user’s IP address. The use of Google Fonts is based on the interest of providing a coherent and visually refined presentation of the website, constituting a legitimate interest under Article 6(1)(f) of the GDPR. More information is available at: https://developers.google.com/fonts/faq and https://policies.google.com/privacy.

6. How long we retain your data

Personal data is retained only for the time necessary for the purpose for which it was collected:

• Contact form data: 12 months after the last contact.
• Comments and metadata: retained indefinitely in order to recognise and automatically approve subsequent comments.
• Purchase and billing records: 10 years, in accordance with legal tax and accounting obligations.
• Analytics data: 1 year.

For users registered on the website, the personal data in their profile is retained for as long as the account remains active. All users can view, edit or delete their personal information at any time, except for their username. Website administrators can also view and edit that information.

7. What rights you have over your data

Under the General Data Protection Regulation (GDPR), you have the following rights:

• Access: request an export file of the personal data held about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request that data be deleted, also known as the “right to be forgotten”, except for data that must be retained for administrative, legal or security reasons.
• Restriction of processing: restrict the processing of your data in certain circumstances.
• Objection: object to processing based on legitimate interest.
• Portability: receive your data in a structured, machine-readable format.
• Withdrawal of consent: withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, please contact us at info@goncalogil.com.

You also have the right to lodge a complaint with the competent supervisory authority in Portugal: Comissão Nacional de Proteção de Dados (CNPD) — www.cnpd.pt.

8. How your data is protected

Appropriate technical and organisational measures are adopted to protect users’ personal data against unauthorised access, loss, destruction or alteration. The website uses a secure connection, HTTPS/SSL, and payment data is processed exclusively through certified platforms that comply with the PCI-DSS standard.

9. Contact information

For any question related to privacy or data protection, you may contact us through:

Gonçalo Gil
Email: info@goncalogil.com
Website: www.goncalogil.com

10. Changes to this policy

We reserve the right to update this privacy policy whenever necessary. Any relevant change will be communicated on this page, with an indication of the update date. We recommend checking this page periodically.