Privacy policy.
The privacy policy for the new site is being prepared and reviewed. This site sets no cookies and runs no analytics; the only personal data we receive is what you choose to send us by email. Questions: sdurao@mockingbird.pt.
1. Who we are. Mockingbird, Unipessoal Lda. ("Mockingbird", "we"), operating as Mockingbird Arts Management, is the data controller for personal data processed through this website and during our consultancy work prior to contractual terms.
Contact for privacy matters: sdurao@mockingbird.pt.
2. What data we collect. Contact and enquiry data — name, email, organisation, and the content of your message when you contact us.
Newsletter and editorial subscriptions — name and email, if you subscribe to our publications.
Professional contact data — names, roles, organisations, and contact details of partners, clients, artists, funders, and institutional contacts, collected in the ordinary course of our work.
Technical data — IP address, browser type, and usage data, where collected. See our Cookie Policy.
We do not knowingly collect data from children, and our website is not directed at them.
3. Why we process it, and on what legal basis. Responding to enquiries — Art. 6(1)(b) GDPR, steps prior to a contract, or 6(1)(f), legitimate interest.
Delivering consultancy services — Art. 6(1)(b), performance of a contract.
Newsletter and editorial mailings — Art. 6(1)(a), consent, withdrawable at any time.
Professional relationship management — Art. 6(1)(f), legitimate interest in operating an international consultancy.
Legal and accounting obligations — Art. 6(1)(c), legal obligation.
4. International transfers. Our work is international by nature. Where we transfer personal data outside the European Economic Area, we rely on European Commission adequacy decisions (including for the United Kingdom and the Republic of Korea), Standard Contractual Clauses for other destinations, or, exceptionally, your explicit consent. Details are available on request.
5. How long we keep it. Enquiry data: up to 2 years after last contact.
Contractual and accounting data: as required by Portuguese law, generally 10 years.
Newsletter data: until you unsubscribe.
Professional contact data: for the duration of an active professional relationship, reviewed periodically.
6. Who we share it with. We do not sell personal data. We share it only with service providers acting on our instructions (hosting, email, accounting), bound by data processing agreements; with project partners, where necessary to deliver a service and with your knowledge; and with public authorities, where legally required.
7. Your rights. Under the GDPR you have the right to access, rectify, erase, and port your data; to restrict or object to processing; and to withdraw consent at any time. To exercise these rights, contact sdurao@mockingbird.pt. You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD), at www.cnpd.pt.
8. Security. We apply appropriate technical and organisational measures to protect personal data, proportionate to the risks of our activity.
9. Changes. We may update this policy from time to time. The date at the top of the page indicates the current version.