Legal

Privacy Policy

Last updated: 14 April 2026

This Privacy Policy explains how Alfacinhas Studio collects, uses, stores and shares personal data when you visit our website or apply through our application form. We take your privacy seriously and comply with the Swiss Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR) where applicable.

1. Who we are (Data Controller)

The entity responsible for the processing of your personal data is:

Alfacinhas Studio is the trading name under which Publications Santos Nazaré operates this website and recruits collaborators. Throughout this policy, "we", "us" and "our" refer to this entity.

2. What data we collect

2.1 When you visit the website

When you browse alfacinhas.studio, we collect limited technical information through our hosting provider and analytics tools, including:

• IP address (truncated or anonymised where possible)
• Browser type and version, operating system, device type
• Referring URL and pages visited
• Date and time of visit, approximate geographic location (country/region)

2.2 When you apply through our form

Our application form is hosted by Typeform. When you submit an application, we collect:

• First name and preferred name
• Email address
• Age (to confirm you are 18 or older)
• Country and region of residence
• Spoken languages and English proficiency
• Availability and general working schedule
• Information about your private workspace at home
• Either a public Instagram handle or one photograph you choose to upload
• Your acknowledgements regarding the nature of the work
• Any free-text answers you provide

We do not ask for government ID, payment details, medical information or any other special-category data at the application stage. If a collaboration proceeds, additional information (such as contract details or payment information for the signing bonus) will be collected separately under a dedicated agreement.

2.3 Cookies and tracking

We use the following tracking technologies, which only activate after you give consent via our cookie banner:

• Vercel Analytics — privacy-friendly analytics, no cross-site tracking.
• Meta Pixel — used to measure the performance of our Instagram and Facebook advertising campaigns and to build lookalike audiences. Meta Pixel sets cookies and shares event data (page views, form submission events) with Meta Platforms Ireland Ltd.

You can withdraw your consent at any time by clicking the cookie preferences link in the footer of the site, or by clearing your browser cookies.

3. Why we process your data and on what legal basis

Under the GDPR and the Swiss FADP, we rely on the following legal bases:

• Pre-contractual steps (GDPR Art. 6(1)(b)) — to review your application, communicate with you about it, and take steps toward a potential collaboration at your request.
• Legitimate interests (GDPR Art. 6(1)(f)) — to operate and secure our website, prevent fraud and abuse, and keep basic records of our recruitment activity.
• Consent (GDPR Art. 6(1)(a)) — for non-essential cookies and tracking (Vercel Analytics, Meta Pixel) and for any processing that goes beyond what you reasonably expect from your application.
• Legal obligation (GDPR Art. 6(1)(c)) — where we are required to keep records or respond to lawful requests.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us operate this website and evaluate applications. These providers act as our data processors and are bound by contractual data-protection obligations.

We may also share your data with collaborating clients and partners in Georgia and the United Kingdom if your application is shortlisted and you have given explicit consent to such sharing. No sharing with clients happens automatically or before you have been informed.

5. International data transfers

Because some of our providers and collaborators are outside Switzerland and the European Economic Area, your personal data may be transferred internationally. We ensure each transfer is lawfully framed:

• United Kingdom — covered by the UK adequacy decision recognised by both the EU and Switzerland. No additional safeguard required.
• United States — transfers to providers such as Vercel, Meta, Airtable and Google rely on the EU-US Data Privacy Framework (where the provider is certified) and/or Standard Contractual Clauses (SCCs) combined with the Swiss addendum issued by the FDPIC.
• Georgia — Georgia is not covered by an EU or Swiss adequacy decision. Transfers to partners in Georgia are only performed with your explicit consent and under Standard Contractual Clauses with the Swiss addendum, together with additional organisational safeguards.

You can request a copy of the safeguards used for any specific transfer by writing to contact@alfacinhas.studio.

6. How long we keep your data

• Unsuccessful applications — kept for six (6) months from the date of submission, then permanently deleted from Typeform, our spreadsheets and our automation tools.
• Successful applications — kept for the duration of the collaboration and for three (3) years after it ends, to comply with accounting, tax and contractual-evidence obligations.
• Website analytics and Pixel events — retained according to the default retention policies of Vercel (up to 24 months) and Meta (up to 24 months).
• Email correspondence — kept up to three (3) years after the last exchange, unless earlier deletion is requested.

7. Your rights

Under the GDPR and the Swiss FADP, you have the right to:

• Access the personal data we hold about you and receive a copy;
• Request correction of inaccurate or incomplete data;
• Request deletion of your data ("right to be forgotten"), subject to legal retention obligations;
• Restrict or object to the processing of your data;
• Receive your data in a portable, machine-readable format;
• Withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal;
• Not be subject to fully automated decisions (we do not perform automated decision-making or profiling that produces legal effects on you).

To exercise any of these rights, email us at contact@alfacinhas.studio. We will respond within thirty (30) days. You do not need to justify your request, and exercising your rights is free of charge unless the request is manifestly unfounded or excessive.

8. Right to lodge a complaint

If you believe we have not handled your data lawfully, you can lodge a complaint with a supervisory authority:

• Switzerland — Federal Data Protection and Information Commissioner (FDPIC), edoeb.admin.ch.
• Portugal — Comissão Nacional de Proteção de Dados (CNPD), cnpd.pt.
• Any other EU country — your national data-protection authority.

We would appreciate the chance to address your concern directly before you contact an authority, so please feel free to write to us first.

9. How we protect your data

We use technical and organisational measures to keep your data safe: HTTPS encryption on the website, access controls on all tools, strong authentication on administrator accounts, limited access on a need-to-know basis, and regular review of our processors' security practices. No online service is perfectly secure, but we apply industry-standard safeguards and review them periodically.

10. Children

Our application form and services are strictly reserved to adults aged 18 or over. We do not knowingly collect data from minors. If you believe a minor has submitted information to us, please contact us and we will delete the record immediately.

11. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, in the tools we use or in applicable law. The "Last updated" date at the top of the page will always show the most recent revision. For material changes affecting applicants whose data we still hold, we will notify you by email.

12. Contact

For any question about this policy or how we handle your data:

contact@alfacinhas.studio
Publications Santos Nazaré, c/o Susana Santos, Dorfmatta 3, 1734 Tentlingen, Switzerland