Privacy Policy
Last updated: February 2026
1. Data Controller
The data controller for personal data collected on this website is Babete Condomínios, accessible at condominio.babete.pt.
For any questions related to personal data, contact us at: [email protected]
2. Personal Data Collected
We collect the following data when you use our services:
- Account data: email address, display name (provided by the user or OAuth provider)
- Usage data: questions and municipalities saved in your account
- Analytics data (with consent): browsing data collected by Google Analytics and Microsoft Clarity (pages visited, session duration, device type, page interactions)
3. Purpose and Legal Basis
| Purpose | Legal basis (GDPR) |
|---|---|
| User account management | Performance of contract (Art. 6(1)(b)) |
| Saved items (questions and municipalities) | Performance of contract (Art. 6(1)(b)) |
| Website usage analysis | Consent (Art. 6(1)(a)) |
| Authentication via Google / Apple OAuth | Performance of contract (Art. 6(1)(b)) |
4. Third-Party Services
Some of our providers may process data outside the European Economic Area, namely in the United States. In such cases, transfers are carried out through appropriate legal mechanisms, including the EU-U.S. Data Privacy Framework (where applicable) or Standard Contractual Clauses approved by the European Commission.
- Google Tag Manager (GTM) — centralised management of analytics scripts. All analytics services are loaded exclusively through GTM.
- Google Analytics 4 — web traffic analysis, integrated via GTM. Privacy Policy
- Microsoft Clarity — user behaviour analysis, integrated via GTM (activated only after consent). Privacy Policy
- Google OAuth / Apple Sign-In — social authentication. Data received is limited to name and email.
- Supabase — database and authentication infrastructure. Data is stored in the West Europe region (London,
eu-west-2), located in the United Kingdom, a country with an adequacy decision recognised by the European Commission.
We have implemented Google Consent Mode v2 (Advanced): all analytics scripts start in a "denied" state by default and are only activated after explicit user consent via the cookie banner.
5. Cookies
We use the following types of cookies:
| Cookie / Storage | Type | Purpose |
|---|---|---|
babete_cookie_consent | Essential | Records the user's cookie choice |
sb-* | Essential | Authentication session |
_ga, _gid | Analytical | Google Analytics |
_clck, _clsk | Analytical | Microsoft Clarity |
sidebar:state | Functional | Remembers sidebar panel state |
You can change your cookie preferences at any time by clicking "Cookie Settings" in the website footer.
6. Data Retention
Your account data is retained as long as your account is active. Analytics data is retained according to Google Analytics (up to 26 months) and Microsoft Clarity (up to 13 months) retention policies.
After deleting your account, associated personal data is deleted or anonymised, except where retention is necessary for legal compliance or defence of rights.
7. Your Rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Access: request a copy of your personal data
- Rectification: correct inaccurate personal data
- Erasure: delete your account and all associated data (available in account settings)
- Portability: export your data in a machine-readable format (available in account settings)
- Objection: object to the processing of your data
- Withdraw consent: you can withdraw consent for analytics cookies at any time via cookie settings
To exercise any of these rights, contact us at [email protected].
You also have the right to lodge a complaint with the Portuguese Data Protection Authority (CNPD).
8. Security
We implement appropriate technical and organisational measures to ensure a level of security appropriate to the risk, including encryption in transit (TLS/HTTPS), restricted access control and database-level security policies (Row Level Security). Data access is restricted to the user themselves.
9. Changes to this Policy
We reserve the right to update this Privacy Policy. Any changes will be published on this page with the revised update date.