Last updated: 11 November 2026

This Policy explains how Kelly Gouveia, Unipessoal, Lda. (trading as Kantagora Eventos), identified above, processes the personal data of people who visit kantagora.pt, ask us for a quote or book our services, in accordance with the EU General Data Protection Regulation (GDPR) and Portuguese Law no. 58/2019. For any question about your data, write to geral@kantagora.pt.

1. What data we process, why, and on what legal basis

• Quote requests and enquiries (form, email, phone or WhatsApp): name, email, phone, date, venue and type of event, number of guests and your message. We use them to answer your request and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Booking and delivering the service: the data above plus address, tax number, venue contacts and music preferences. We use them to prepare and deliver the service and to invoice. Legal basis: performance of the contract and compliance with legal obligations, namely tax obligations (Art. 6(1)(b) and (c)).
• Promotional messages: only sent if you have given your consent, which you can withdraw at any time (Art. 6(1)(a)).
• Event photos and videos published on our website and social media: with our clients’ permission. Anyone who appears in an image can ask for it to be removed, and children are always blurred.
• Website statistics (Google Analytics): only if you accept statistics cookies (consent).
• Spam protection on the form (Google reCAPTCHA): legitimate interest in keeping the website secure (Art. 6(1)(f)).

2. How long we keep data

• Quote requests that do not lead to a booking: up to 12 months after the last contact.
• Client and invoicing data: 10 years, as required by Portuguese tax law.
• Data for promotional messages: until you withdraw your consent.
• Google Analytics statistics: 14 months.

3. Who may receive the data

We do not sell or share personal data. The following may access it, only as far as necessary:

• PLAY Comunica, a partner company that manages the website and receives a copy of the requests sent through the form, acting as our processor;
• Amen, the company hosting our website and email, in the European Union;
• Google (Google Analytics, Google reCAPTCHA and Google Fonts) and Meta (WhatsApp, when you contact us that way);
• our certified accountant, for tax purposes;
• public authorities, when required by law.

4. Transfers outside the European Union

Google and Meta may process data in the United States. These transfers are covered by the EU-US Data Privacy Framework or by standard contractual clauses approved by the European Commission.

5. Your rights

You can, at any time and free of charge, ask for access to your data, rectification, erasure, restriction of processing and data portability, object to processing, and withdraw any consent you have given, without affecting the lawfulness of processing carried out before. Just write to geral@kantagora.pt. We reply within one month at the latest.

You also have the right to lodge a complaint with the Portuguese supervisory authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt, or with the data protection authority of the EU country where you live.

6. Cookies

Cookies are small files stored on your device when you visit a website. We use:

• Essential cookies, needed for the website to work: language choice (pll_language), storing your cookie preferences and form protection (Google reCAPTCHA). These do not require consent.
• Statistics cookies from Google Analytics (_ga and _ga_*), lasting up to 2 years. They are only set if you accept them in the cookie banner.

You can change your choice at any time through the Cookie preferences link, or delete cookies in your browser settings.

7. Security

We use appropriate technical and organisational measures to protect your data, such as encrypted connections (HTTPS) and access limited to the people who need it. No system is completely infallible, but if a data breach puts you at risk, we will act as required by law.

8. Changes to this Policy

We may update this Policy when needed. The version in force is the one published on this page, with the date of the last update.