Lazy Algorithm

Privacy Policy

Lazy Algorithm respects your privacy and is committed to protecting the personal data you entrust to us. This policy explains what data we collect through the website https://lza.pt, for what purposes, how long we keep it and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and applicable Portuguese law.

Last updated: 3 November 2026.

1. Data controller

The controller of your personal data is Lazy Algorithm, tax ID (NIF) 518499391, with its registered office at Rua Castilho 14C 5º, 1250-069 Lisbon, Portugal. For any privacy-related question, contact us at info@lza.pt. We have not appointed a Data Protection Officer.

2. What data we collect and why

  • Contact form. We collect your name, email address and the content of the message you send us, in order to respond to your request. The legal basis is your consent (Article 6(1)(a) GDPR), given by ticking the consent box on the form. We keep this data for 12 months.
  • Usage statistics (Google Analytics). With your consent, we collect information about how the site is used, such as pages visited, visit duration, device and browser type, approximate location and online identifiers (cookies), in order to understand and improve the site. If you do not consent, this tool is not activated.
  • Technical and security data. The server and our anti-spam protection record data such as your IP address, the date and time of the request, browser type and the pages requested. We process this data on the basis of our legitimate interest (Article 6(1)(f) GDPR) in keeping the site running and secure and preventing abuse, and only for as long as strictly necessary for those purposes.

3. Cookies

The site uses cookies and similar technologies. Non-essential cookies, for example statistics cookies, are only activated with your consent, which you can give, refuse or change at any time through the cookie banner. More information is available in our Cookie Policy.

4. Recipients and processors

To provide our service, we use the following providers, who process data on our behalf:

  • Hetzner Online GmbH, for website hosting in a European data centre.
  • Cloudflare, Inc. (Cloudflare Turnstile), to protect our forms against spam and automated abuse.
  • Brevo (formerly Sendinblue), a company based in France, to send and deliver the emails generated by the site, including messages submitted through the contact form.
  • Google (Google Analytics), for usage statistics, only if you give your consent.

We do not sell your personal data or pass it to third parties for marketing purposes. We may disclose it to authorities where required by law.

5. International transfers

Some of the providers above, namely Google and Cloudflare, may process data outside the European Economic Area, including in the United States. In those cases, the transfer relies on the mechanisms provided by the GDPR, such as the EU-US Data Privacy Framework adequacy decision or Standard Contractual Clauses.

6. Retention period

Contact form data is kept for 12 months. Statistics data is kept for the period set in the tool’s configuration. Technical and security data is kept only for as long as necessary. After that period, data is deleted or anonymised.

7. Your rights

Under the GDPR, you have the right to:

  • access your personal data and obtain a copy;
  • have inaccurate or incomplete data rectified;
  • request the erasure of your data;
  • request the restriction of processing;
  • receive your data in a structured, commonly used format (portability);
  • object to processing based on legitimate interest;
  • withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, write to us at info@lza.pt. We will reply within one month at most. You also have the right to lodge a complaint with the supervisory authority in Portugal, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.

8. Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or alteration, including encrypted communication (HTTPS), firewall protection and access control.

9. Children

The site is intended for businesses and professionals and is not directed at children. We do not knowingly collect data from children.

10. Automated decision-making

We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you.

11. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The version in force is always the one published on this page, with the date of the last update.